nethack-gwaa-kiwi/nethack
1
0
Fork 0
Code Pull Requests Activity

next qbuf overflow

Browse Source 
By naming the candelabrum as long a name as the game will allow, and by naming a candle the longest name also, a qbuf overflow and crash is
triggered when you attach the candle to the candelabrum.
This commit is contained in:
nethack.allison
2003-05-09 03:55:33 +00:00
parent bba4872447
commit 5353192bda
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/apply.c
+6 -2
View File
@@ -925,7 +925,9 @@ struct obj **optr;
} }
Sprintf(qbuf, "Attach %s", the(xname(obj))); Sprintf(qbuf, "Attach %s", the(xname(obj)));
Sprintf(eos(qbuf), " to %s?", the(xname(otmp))); Sprintf(eos(qbuf), " to %s?",
safe_qbuf(qbuf, sizeof(" to ?"), the(xname(otmp)),
the(simple_typename(otmp->otyp)), "it"));
if(yn(qbuf) == 'n') { if(yn(qbuf) == 'n') {
if (!obj->lamplit) if (!obj->lamplit)
You("try to light %s...", the(xname(obj))); You("try to light %s...", the(xname(obj)));
@@ -2561,7 +2563,9 @@ do_break_wand(obj)
char confirm[QBUFSZ], the_wand[BUFSZ], buf[BUFSZ]; char confirm[QBUFSZ], the_wand[BUFSZ], buf[BUFSZ];
Strcpy(the_wand, yname(obj)); Strcpy(the_wand, yname(obj));
Sprintf(confirm, "Are you really sure you want to break %s?", the_wand); Sprintf(confirm, "Are you really sure you want to break %s?",
safe_qbuf(confirm, sizeof("Are you really sure you want to break ?"),
the_wand, ysimple_name(obj), "the wand"));
if (yn(confirm) == 'n' ) return 0; if (yn(confirm) == 'n' ) return 0;
if (nohands(youmonst.data)) { if (nohands(youmonst.data)) {