fixed possible overflow cases

--HG--
extra : convert_revision : svn%3A39bc706e-5318-0410-9160-8a85361fbb7c/trunk%40657

core/sm_srvcmds.cpp

@@ -158,7 +158,7 @@ void RootConsoleMenu::DrawGenericOption(const char *cmd, const char *text)
 	char buffer[255];
 	size_t len, cmdlen = strlen(cmd);
 
-	len = snprintf(buffer, sizeof(buffer), "    %s", cmd);
+	len = UTIL_Format(buffer, sizeof(buffer), "    %s", cmd);
 	if (cmdlen < 16)
 	{
 		size_t num = 16 - cmdlen;

core/sm_stringutil.cpp

@@ -890,7 +890,13 @@ size_t UTIL_Format(char *buffer, size_t maxlength, const char *fmt, ...)
 	size_t len = vsnprintf(buffer, maxlength, fmt, ap);
 	va_end(ap);
 
-	return (len >= maxlength) ? (maxlength - 1) : len;
+	if (len >= maxlength)
+	{
+		buffer[maxlength - 1] = '\0';
+		return (maxlength - 1);
+	} else {
+		return len;
+	}
 }
 
 char *sm_strdup(const char *str)

core/systems/LibrarySys.cpp

@@ -305,7 +305,7 @@ size_t LibrarySystem::PathFormat(char *buffer, size_t len, const char *fmt, ...)
 	size_t mylen = vsnprintf(buffer, len, fmt, ap);
 	va_end(ap);
 
-	mylen = (mylen >= len) ? (len - 1) : mylen;
+	mylen = (mylen >= len) ? len : mylen;
 
 	for (size_t i=0; i<mylen; i++)
 	{

plugins/include/sourcemod.inc

@@ -109,6 +109,7 @@ forward OnGameFrame();
  * Called when the map is loaded and configs have been parsed.
  * Note that commands are processed per-frame, and thus config
  * files may not be fully loaded until a few seconds later.
+ * This function will be called on each mapchange.
  */
 forward OnServerLoad();