theAsmodai
89be2166ee
Merge pull request #660 from dreamstalker/cll_hookchain
...
Add hookchain for connectionless limiter
2018-09-29 12:47:42 +03:00
theAsmodai
2444c9fe15
Merge pull request #659 from dreamstalker/ipbans_check
...
Optimize check for bans by ip
2018-09-29 12:47:34 +03:00
Asmodai
c2d311c6df
Add hookchain for connectionless limiter
2018-09-27 01:04:19 +03:00
Asmodai
93222402b8
Optimize check for bans by ip
2018-09-26 23:48:10 +03:00
theAsmodai
83f53fb5c5
Merge pull request #652 from WPMGPRoSToTeMa/fix-net-queuepacket-workflow
...
Fixed NET_QueuePacket workflow
2018-09-19 13:46:45 +03:00
theAsmodai
4abeb0c8b5
Merge pull request #653 from dreamstalker/chal_api
...
Reworked SV_CheckChallenge_api function
2018-09-15 13:00:34 +03:00
Asmodai
834c5a9eda
Reworked SV_CheckChallenge_api function
2018-09-15 12:21:01 +03:00
WPMGPRoSToTeMa
d15ebf6df2
Fixed NET_QueuePacket workflow
2018-09-15 00:16:19 +03:00
s1lent
469908f5c5
Fix #483
2018-09-03 18:04:47 +07:00
s1lent
237ee46464
SV_WriteId_f, DemoFile::StartRecording: Enforce certain extensions be used for files (*.dem, *.cfg) and prevent certain path characters from being used in commands
...
SV_CheckForDuplicateNames: revert checks (default behavior hlds)
2018-09-03 17:34:08 +07:00
theAsmodai
0ce0af7d0f
Merge pull request #643 from s1lentq/master
...
Check limits up to MAX_MODELS for precached local models (Related #633 )
2018-08-11 18:04:52 +03:00
s1lent
3eed9d11e7
Check limits up to MAX_MODELS for precached local models (Related #633 )
2018-08-08 14:06:03 +07:00
theAsmodai
4da8c9ebcd
Merge pull request #641 from dreamstalker/namedots
...
Additional check for '..' in fixed names
2018-08-06 11:36:30 +03:00
Asmodai
c7616fa283
Additional check for '..' in fixed names
2018-08-05 12:01:59 +03:00
s1lent
65c6ce593b
Bugfix: Prevent to pre-cache same local models twice and more (Affects #612 )
2018-05-22 19:09:21 +07:00
theAsmodai
87a2d170ec
Merge pull request #614 from s1lentq/fligthrec-move-to-debug
...
Move REHLDS_FLIGHT_REC macro to debug build
2018-05-13 21:30:05 +03:00
s1lent
7fa57453ed
Move REHLDS_FLIGHT_REC macro to debug build
2018-05-10 23:05:10 +07:00
theAsmodai
87a10a1e41
Added sv_rehlds_maxclients_from_single_ip cvar ( #610 )
...
Correctly reject overlimit connections
2018-05-07 21:24:21 +03:00
Dmitry Novikov
19c22d7538
Skipping local model to pre-cached if no entities to transmit. ( #612 )
...
* Skipping local model to pre-cached if no entities to transmit.
2018-05-07 17:18:56 +03:00
s1lent
2e2b93131d
Closes #611
2018-05-07 01:44:37 +07:00
s1lent
2fa7655370
Bugfix Info_ValueForKey: Fix wrong comparison
2018-05-06 13:35:57 +07:00
theAsmodai
f324df867f
Info code refactoring ( #604 )
...
* info.cpp refactoring
* Update info unittests
* Make _vgui_menus important and fix tests passing
2018-05-04 23:37:53 +03:00
theAsmodai
97868baf92
Merge pull request #581 from dreamstalker/hltv_frag_validation
...
Add fragments validation to hltv
2018-05-04 23:37:18 +03:00
theAsmodai
5fdafc1f3e
Merge pull request #597 from IgnacioFDM/patch-1
...
Dummy assignment?
2018-04-28 12:50:09 +03:00
Alik Aslanyan
ce163a323b
Fixes for new exploit involving " in info strings. ( #596 )
...
* Refactor SV_CheckForDuplicateNames
* Refactor and fix Info_IsValid
2018-04-06 20:11:38 +04:00
IgnacioFDM
ec63e8f162
Dummy assignment?
2018-04-03 14:27:19 -03:00
IgnacioDM
19e3a5df56
Fix (Re)HLDS exploit (Can't use keys or values with a ")
...
Assume two clients connect with the following string
```connect 48 12345678 \prot\2\unique\-1\raw\261578371d95a424925835ca44f82811 \cl_lw\1\cl_lc\1\*hltv\1\rate\10000\cl_updaterate\20\hspecs\0\hslots\0\hdelay\30\name\test"```
Name will be parsed as ```test"```
Then in ```SV_CheckForDuplicateNames```, ```Info_SetValueForKey``` will fail because of the quotes, and an infinite loop will occur.
I also added a check for ```\```, altough it's technically impossible to appear, it never hurts to be extra careful with this kind of client input.
TODO (by others sorry, really busy atm):
- Fix ```COM_Parse``` so that you can't inject quote marks. Other exploits may currently exist that also rely on this bug.
2018-04-01 19:11:44 +04:00
s1lent
7cfae98e81
Reworked NetChannel::ValidateFragments
...
Added macros HLTV_FIXES
Minor refactoring BitBuffer.cpp and cosmetic changes
2018-02-22 18:04:21 +07:00
In-line
822df9a92d
Default sv_rollangle/sv_rollspeed to 0.0 (without REHLDS_FIXES) ( #584 )
...
Default sv_rollangle/sv_rollspeed to 0.0 (without REHLDS_FIXES)
2018-02-21 21:47:13 +04:00
s1lent
0d5a8ee2bf
Set default values sv_rollspeed, sv_rollangle for the default behavior
2018-02-21 15:57:53 +07:00
In-line
acf44cf949
Add missing sv_* cvars registration. ( #583 )
...
Add missing sv_rollangle cvar registration.
Add missing sv_rollspeed cvar registration.
2018-02-20 19:53:29 +03:00
Asmodai
4d87e215d3
Add fragments validation to hltv
2018-02-17 01:47:58 +03:00
s1lent
7a415ed47c
SV_CountResourceByType: Remove useless filter
2018-02-14 19:13:19 +07:00
theAsmodai
20de6914f7
Merge pull request #579 from s1lentq/fix-char3164
...
Fix non-printable character (0x3164)
2018-02-13 14:55:07 +03:00
s1lent
fec4b1bbe6
Fix non-printable character 0x3164
2018-02-13 17:47:52 +07:00
s1lent
82ee1b0aac
ReHLDS API: Implemented CRehldsServerStatic::GetMaxClientsLimit
...
Bump minor version
2018-01-24 17:34:06 +07:00
s1lent
20200f7eaa
ReHLDS API: Use maxclientslimit instead maxclients
2018-01-24 17:19:53 +07:00
In-line
923c838807
Refactoring and fixes in net_ws ( #567 )
2018-01-18 14:13:38 +03:00
s1lent
a8f4f03e3e
SV_FlyMove: Add impact to MOVETYPE_TOSS (related #555 )
2018-01-17 17:29:03 +07:00
s1lent
01781eacc1
Fix missed else-statement related #555
2017-12-30 19:01:27 +07:00
s1lent
780afd0227
Prevent crash when steam not active yet
2017-12-20 20:49:36 +07:00
s1lent
e6a9fd1095
Small refactoring r_studio.cpp
2017-12-20 20:05:12 +07:00
s1lent
f5784be364
Reversed CIPRateLimit
...
Minor refactoring
2017-12-19 21:34:15 +07:00
Dmitry Novikov
5e2bd82b00
Improve movement toss ( #555 )
2017-12-18 19:01:18 +07:00
Lev
a761c5d380
Small refactoring in pr_edict.
2017-12-15 20:23:36 +05:00
s1lent
8249802a70
ICC: Use -fp-model precise for ANSI/IEEE standards compliance
2017-12-15 02:56:20 +07:00
s1lent
6994b32f25
HLTV: Rename GROUP_UNKNOWN to GROUP_MULTICAST
2017-12-15 01:39:49 +07:00
s1lent
690296605f
Revert: sv_force_ent_intersection
2017-12-15 01:11:54 +07:00
s1lent
2d85358e7e
SV_FlyMove: fixed illogical checks
2017-12-15 00:28:05 +07:00
s1lent
4ea810eeba
sv_phys.cpp: minor refactoring and more comments
2017-12-14 23:40:26 +07:00
