From 968e75444759b090d82a8cb3c67e4ea265e2fbe2 Mon Sep 17 00:00:00 2001 From: Markus Armbruster Date: Mon, 13 Jun 2005 11:32:07 +0000 Subject: [PATCH] (lrange, shoo, execute): Buffer passed to getstarg() was too small. Player could overrun it! --- src/lib/commands/rang.c | 6 +++--- src/lib/commands/shoo.c | 6 +++--- src/lib/player/player.c | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/src/lib/commands/rang.c b/src/lib/commands/rang.c index 47d63369..88884edb 100644 --- a/src/lib/commands/rang.c +++ b/src/lib/commands/rang.c @@ -76,9 +76,9 @@ lrange(void) struct lndstr land; struct lchrstr *lcp; int i; - s_char *p; - s_char prompt[128]; - s_char buf[128]; + char *p; + char prompt[128]; + char buf[1024]; if (!snxtitem(&np, EF_LAND, player->argp[1])) return RET_SYN; diff --git a/src/lib/commands/shoo.c b/src/lib/commands/shoo.c index 03411d8c..6d75c25c 100644 --- a/src/lib/commands/shoo.c +++ b/src/lib/commands/shoo.c @@ -57,10 +57,10 @@ shoo(void) struct ichrstr *ip; struct lndstr land; int targets; - s_char *p; + char *p; int mil, nsec; - s_char prompt[128]; - s_char buf[128]; + char prompt[128]; + char buf[1024]; ip = whatitem(player->argp[1], "Shoot what "); if (ip == 0 || (ip->i_vtype != I_CIVIL && ip->i_vtype != I_UW)) diff --git a/src/lib/player/player.c b/src/lib/player/player.c index e465235a..88d600b6 100644 --- a/src/lib/player/player.c +++ b/src/lib/player/player.c @@ -303,7 +303,7 @@ status(void) int execute(void) { - char buf[512]; + char buf[1024]; int failed; char *p; char *redir;