If this is true, then this is poor programming ...

To idiot proof it, you would truncate vulnerable strings ...

if len(name) > 30
         { name[30] = NULL; }

Something like that ... but I can't imagine this wouldn't already be in the 
code ...

At 04:58 AM 10/17/2001 +0800, you wrote:
>If someone use name like this:
>Nick%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%.
>
>HLDS would crash on map change.....buffer overflow?
>
>_______________________________________________
>To unsubscribe, edit your list preferences, or view the list archives, 
>please visit:
>http://list.valvesoftware.com/mailman/listinfo/hlds

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to