문서는 unavailable in your language
This page is not currently available in your language. As a result, the English version is being displayed instead.
Are you fluent in English and Korean? Help us translate (영어)!
|
|
패치 노트
Larger changes
- Added privilege checking to command execution. Commands originating outside of the client are now only able to execute commands that are considered to be safe. Commands such as 'connect', 'bind', 'quit' and certain cvars such as 'cl_filterstuffcmd' are now only executable by trusted sources.
- Setting 'cl_filterstuffcmd' to a value greater than zero (e.g. 'cl_filterstuffcmd 1') will set a number of commands that are potentially abusable, such as 'say', 'fps_max', and 'setinfo', to also be only executable by privileged sources.
Fixes
- Fixed intermittent double weapon firing
- Fixed client incorrectly blocking download of custom sprays
Security fixes
- All custom resources downloaded from a server now have their file name's checked for safety before being allowed to download
- Invalid file extensions are now prevented in several commands
- Dynamic libraries are no longer searched for in custom resource directories
- Added additional file extensions to custom resource blocked extensions list
- Fixed buffer overflow in message delta parsing
- Fixed RCE in weapon message handling
- Fixed RCE in model loading
- Fixed buffer overflows in TGA and BMP loading
- Fixed buffer overflow in demo playback
- Fixed buffer overflows in model name loading
- Fixed buffer overflow in detail texture loading
- Fixed buffer overflow in console map listing
- Fixed command chaining in cvar's that specified config files to be passed to the 'exec' command
변경된 파일
- 추신: 아래의 변경된 파일 목록은 두 다른 버전의 게임으로부터 산출해냈습니다.
변경 사항
Deleted: tfc/civilian.cfg
Modified: tfc/cl_dlls/client.dll
Modified: tfc/cl_dlls/client.dylib
Modified: tfc/cl_dlls/client.so
Modified: tfc/dlls/tfc.dll
Modified: tfc/dlls/tfc.dylib
Modified: tfc/dlls/tfc.so