cohrs 8930e5b442 nethack -s buffer overflow fix ...

When printing invalid player names in -s mode, it was possible to overflow
the output buffer due to a missing buffer size check.  On shared Unix-like
systems with executable stacks, this could be used as a security exploit,
eg to obtain a shell running as user or group games.
While I was at it, removed a dead block of "#if 0" code

2003-02-10 19:01:58 +00:00

28 KiB

Raw Blame History

View Raw