If execute's argument was read interactively, it prints the argument
instead of the command. Else, it prints uninitialized garbage. The
latter can theoretically crash the server, or leak information.
Broken in commit
3de1e8be, v4.3.28
continue;
}
pr("\nExecute : ");
- uprnf(buf);
+ uprnf(player->combuf);
pr("\n");
if (redir) {
pr("Execute : redirection not supported\n");
failed = 1;
- } else if (dispatch(buf, NULL) < 0)
+ } else if (dispatch(player->combuf, NULL) < 0)
failed = 1;
empth_yield();
}