View Issue Details

IDProjectCategoryView StatusLast Update
0004717Spring engineGeneralpublic2015-03-24 14:01
Reporterabma Assigned To 
PrioritynormalSeveritymajorReproducibilityhave not tried
Status newResolutionopen 
Target Version98.0.1+git 
Summary0004717: reading of SMF files seems unrealible to corrupted / broken files
Descriptionhttps://github.com/spring/spring/blob/develop/rts/Map/SMF/SMFFormat.h#L77

->

https://github.com/spring/spring/blob/develop/rts/Map/SMF/SMFMapFile.cpp#L23

it seems, maybe i missed it:
- missing range checks: all int vars could be negative
- missing check if an read error happened
- missing buffer length check in CSMFMapFile::ReadInfoMap, buffer could be to short (=mem corruption), it is passed from unitsync
Additional Informationhttps://springrts.com/phpbb/viewtopic.php?f=12&t=33309
TagsNo tags attached.
Checked infolog.txt for Errors

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2015-03-24 13:57 abma New Issue
2015-03-24 13:57 abma Target Version => 98.0.1+git
2015-03-24 13:57 abma Description Updated
2015-03-24 14:01 abma Description Updated