fix #H3039 - panic() when trying to drop destroyed items
From a bug report, dropping a lit (burning) potion of oil while levitating can produce an explosion which can destroy inventory. If in the process of dropping multiple items, the ones after the oil might be gone, resulting in use of stale pointers and possibly triggering an "extract_nobj: object lost" panic or even a crash. While testing my fix, I discovered that being killed by an exploding potion of oil could produce an "object_is_local" panic if bones are saved (and reproduced with unmodified 3.4.3).
This commit is contained in:
@@ -642,4 +642,16 @@ splatter_burning_oil(x, y)
|
||||
explode(x, y, ZT_SPELL_O_FIRE, d(4,4), BURNING_OIL, EXPL_FIERY);
|
||||
}
|
||||
|
||||
/* lit potion of oil is exploding; extinguish it as a light source before
|
||||
possibly killing the hero and attempting to save bones */
|
||||
void
|
||||
explode_oil(obj, x, y)
|
||||
struct obj *obj;
|
||||
int x, y;
|
||||
{
|
||||
if (!obj->lamplit) impossible("exploding unlit oil");
|
||||
end_burn(obj, TRUE);
|
||||
splatter_burning_oil(x, y);
|
||||
}
|
||||
|
||||
/*explode.c*/
|
||||
|
||||
Reference in New Issue
Block a user