From 8385d0a10e994608f8af5552e390304bb5d50e6a Mon Sep 17 00:00:00 2001 From: PatR Date: Tue, 23 May 2023 14:54:14 -0700 Subject: [PATCH] fixes entry for PR #1037 - use-after-free when applying an object. Pull request form copperwater: applying a cream pie always uses it up and applying a lump of royal jelly sometimes uses it up, then after that use the apply got checked for a talking artifact. If it had been used up when the apply routine would access memory which had already been freed. Closes #1037 --- doc/fixes3-7-0.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/doc/fixes3-7-0.txt b/doc/fixes3-7-0.txt index fa205f7b2..6174a446f 100644 --- a/doc/fixes3-7-0.txt +++ b/doc/fixes3-7-0.txt @@ -1190,6 +1190,8 @@ covetous monster attacking another monster to acquire special item would not skip sanity_check handling when current command is ^P, otherwise it might re-trigger and show new sanity warning every time when set for line-at-a-line feedback +applying a cream pie (always) or lump of royal jelly (sometimes) would use up + the object and then access its memory after that had been freed Fixes to 3.7.0-x General Problems Exposed Via git Repository