File tremulous-1.1.0-overflow.patch of Package tremulous22

--- src/botlib/l_precomp.c
+++ src/botlib/l_precomp.c
@@ -1016,7 +1016,7 @@
 				break;
 			} //end if
 			if (token.type == TT_PUNCTUATION && *token.string == '>') break;
-			strncat(path, token.string, MAX_PATH);
+			strncat(path, token.string, MAX_PATH-strlen(path)-1);
 		} //end while
 		if (*token.string != '>')
 		{
--- src/renderer/tr_shade_calc.c
+++ src/renderer/tr_shade_calc.c
@@ -620,7 +620,7 @@
 {
 	int	i;
 	int *pColors = ( int * ) dstColors;
-	unsigned char invModulate[3];
+	unsigned char invModulate[4];
 	int c;
 
 	if ( !backEnd.currentEntity )