sv_user.c: check if prydon cursor entnum is in range

fte-team · Sep 9, 2024 · 01a78ca · 01a78ca
1 parent 2efeab6
commit 01a78ca
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/engine/server/sv_user.c b/engine/server/sv_user.c
@@ -8051,6 +8051,10 @@ static void SV_ReadPrydonCursor(usercmd_t *cmd)
 	cmd->cursor_impact[2] = MSG_ReadFloat();
 	cmd->cursor_entitynumber = MSGSV_ReadEntity(host_client);
 
+	/* client is sending junk or trying to crash us -eukara */
+	if (cmd->cursor_entitynumber < 0 || cmd->cursor_entitynumber >= sv.world.num_edicts) {
+		cmd->cursor_entitynumber = 0;
+	}
 
 	if (svprogfuncs)
 	{