5 ms·
Really smart. It's worth mentioning that the Q3VM was the entry point to many of the exploits created for Q3, just something to bear in mind.
by xedarius 8y ago
Really smart.
It's worth mentioning that the Q3VM was the entry point to many of the exploits created for Q3, just something to bear in mind.
- janosch9001 8y agoIt is forked from the well maintained ioquake3 project. But do you have further informations? I'd love to fix stuff if possible (and maybe back port that to ioquake3).
- rasz 8y agoHow did that work? You need to load your custom scripts somehow in the first place, Im guessing in a form of game mod. So you are already running custom code at this point.
- AgentME 8y agoWhenever you connect to a server, the client autodownloads any game mods used by the server. Random servers and their game mods aren't supposed to have arbitrary unsandboxed code execution on your system, but they could if they exploited a vulnerability in the code vm. The code vm is supposed to be safe for running arbitrary code in a sandbox.