From 815a7ae53be78f1f7108dbf086b2928d3017bbe4 Mon Sep 17 00:00:00 2001 From: Thilo Schulz Date: Mon, 3 Dec 2012 17:58:55 +0000 Subject: Add length check here as well, thanks Ensiform --- src/server/sv_main.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/server/sv_main.c b/src/server/sv_main.c index bee0ec19..100e97ce 100644 --- a/src/server/sv_main.c +++ b/src/server/sv_main.c @@ -582,6 +582,10 @@ static void SVC_Status( netadr_t from ) { return; } + // A maximum challenge length of 128 should be more than plenty. + if(strlen(Cmd_Argv(1)) > 128) + return; + strcpy( infostring, Cvar_InfoString( CVAR_SERVERINFO ) ); // echo back the parameter to status. so master servers can use it as a challenge -- cgit