From 42251419e0b524d9b89f48932acdb2436e80e474 Mon Sep 17 00:00:00 2001
From: AJ Martinez <aj@worldsbe.st>
Date: Sat, 29 Apr 2023 17:21:44 -0700
Subject: [PATCH] PT_SAY: check that source matches packet source

---
 src/d_clisrv.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/d_clisrv.c b/src/d_clisrv.c
index e40d9d7d6..be16c4254 100644
--- a/src/d_clisrv.c
+++ b/src/d_clisrv.c
@@ -5243,9 +5243,13 @@ static void HandlePacketFromPlayer(SINT8 node)
 			break;
 		case PT_SAY:
 			if (client)
-				break;
+				break; // Only sent to servers, why are we receiving this?
 
 			say_pak say = netbuffer->u.say;
+
+			if (playernode[say.source] != node)
+				break; // Spoofed source!
+
 			DoSayCommand(say.message, say.target, say.flags, say.source);
 			break;
 		case PT_LOGIN: