From ca9a3f049163e850b4fcde14165d3b59ef9c7dcd Mon Sep 17 00:00:00 2001 From: Alibek Omarov Date: Tue, 11 Feb 2025 21:15:33 +0300 Subject: [PATCH] engine: server: fix out of bounds write in SV_FindTouchedLeafs --- engine/server/sv_world.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/engine/server/sv_world.c b/engine/server/sv_world.c index 805331ea..e685248f 100644 --- a/engine/server/sv_world.c +++ b/engine/server/sv_world.c @@ -601,7 +601,7 @@ static void SV_FindTouchedLeafs( edict_t *ent, model_t *mod, mnode_t *node, int // add an efrag if the node is a leaf if( node->contents < 0 ) { - if( ent->num_leafs > MAX_ENT_LEAFS( FBitSet( mod->flags, MODEL_QBSP2 ))) + if( ent->num_leafs >= MAX_ENT_LEAFS( FBitSet( mod->flags, MODEL_QBSP2 ))) { // continue counting leafs, // so we know how many it's overrun