README: information about the Engine.u-v226zeur2 distribution

This modified package Engine provides a patch to a vulnerability in the
StatLogFile class. When no specific measures are taken, too-generic native
functions in that class can be used to open and write to arbitrary files,
possibly with arbitrary data.

Since this is a serious vulnerability, potentially compromising a windoze system
in a whim, we, Leo_TCK and I, have decided to provide this patch. We developed
it for v226zeur2, which uses the v226f version of package Engine -- for that
reason, it is a drop-in replacement for the v226b and v226f versions of the
Engine.u file.

No native code changes have been made. This modification should be entirely
network-compatible with all versions of Unreal from v225 to v226f, and
v226zeur{,2}. It has been tested as such. It should work with v224, as well;
however, this has not been tested.

To install, simply overwrite the existing System/Engine.u file in your Unreal
directory with the one included in this archive. Make sure you make and keep a
backup of the existing version, in case some unforseen incompatibility or other
problem arises in the future.

Also included is package khanlog, an ad hoc package compiled by Leo_TCK. It
contains the StatLogDing class written by De Zeurkous, which can be spawned to
test the (new) StatLogFile class.

If any problems arise, and/or you have any questions, feel free to contact
either or both of us by e-mail at our respective addresses, as listed below.

Have fun,

       --De Zeurkous <zeurkous@nichten.info>.
       --Leo_TCK <leo@nichten.info>,
                 <leo_tck@volny.cz>.

[Last modified at Fri Aug 27 19:54:41 UTC 2010 by De Zeurkous.]
