diff options
| author | Acts1631 <acts1631kjv@proton.me> | 2026-07-19 21:28:01 -0400 |
|---|---|---|
| committer | OatmealDome <julian@oatmealdome.me> | 2026-08-10 17:50:27 -0400 |
| commit | a92697415379491f2cdccdee2cc956da2ca07fe1 (patch) | |
| tree | e19518973548ad43e1f22e88d2d72abe74e68beb /Source/UnitTests/Common/WorkQueueThreadTest.cpp | |
| parent | 5e237fd28491f94e72ac3d87e854bb40ff4eeec2 (diff) | |
NetPlay: bound LZO decompression output
NetPlay save synchronization decoded remote LZO blocks with the unsafe
decoder and no output capacity. A malicious host could overflow a client
buffer with a block larger than its declared size.
Use the bounds-checking decoder, validate the declared output length, and
grow buffer results only after each checked block has been decoded.
Diffstat (limited to 'Source/UnitTests/Common/WorkQueueThreadTest.cpp')
0 files changed, 0 insertions, 0 deletions