engine: mod_studio: validate studio self-reported length before loading model

This commit is contained in:
Alibek Omarov 2025-01-22 20:00:13 +03:00
parent 4f2249ed8e
commit f6f15cc204

View file

@ -868,7 +868,7 @@ void Mod_LoadStudioModel( model_t *mod, const void *buffer, qboolean *loaded )
mod->type = mod_studio; mod->type = mod_studio;
phdr = R_StudioLoadHeader( mod, buffer ); phdr = R_StudioLoadHeader( mod, buffer );
if( !phdr ) if( !phdr || phdr->length < sizeof( studiohdr_t )) // garbage value in length
return; // bad model return; // bad model
#if !XASH_DEDICATED #if !XASH_DEDICATED