Switch branches/tags
Nothing to show
Find file History

README.md

Huffman

In the function SV_ExecuteClientMessage, the length of the
compressed data is not checked to be smaller than the
allocated buffer on the stack before the call to MSG_ReadBitsCompress.

Overflowing the buffer using a modified client message
enables arbitrary code execution.

code

Credits

Name Author Reference
WinDivert basil https://reqrypt.org/windivert.html
Quake Huffman encoding Id Software, Inc. https://github.com/id-Software/Quake
Premake Premake https://premake.github.io/
Icon Aga Malarczyk https://www.iconfinder.com/icons/853305/antichristmas_snow_snowman_thief_winter_icon