Login
User Name:

Password:



Register
Forgot your password?
Vote for Us!
AFKMud 2.2.2
Mar 3, 2019 5:35 pm
By Samson
Development
Nov 28, 2018 12:10 pm
By Keirath
First Immortal
Oct 12, 2018 2:02 pm
By GatewaySysop
Bug in do_climb( )
Jun 5, 2018 7:31 pm
By joeyfogas
question on overland code
May 31, 2018 12:03 pm
By joeyfogas
SmaugFUSS 1.9.3
Author: Various
Submitted by: Samson
AFKMud 2.2.2
Author: AFKMud Team
Submitted by: Samson
tintin++ ogg sound player script for linux
Author: Robert Smith
Submitted by: Vladaar
6Dragons ogg Soundpack
Author: Vladaar
Submitted by: Vladaar
6Dragons 4.4
Author: Vladaar
Submitted by: Vladaar
Users Online
CommonCrawl, Remcon, Google

Members: 1
Guests: 12
Stats
Files
Topics
Posts
Members
Newest Member
483
3,743
19,401
655
RodrickMci
Today's Birthdays
tphegley (37)
Related Links
» SmaugMuds » Bugfix Lists » SWR FUSS Bugfix List » [Bug] strip_cr function has n...
Forum Rules | Mark all | Recent Posts

[Bug] strip_cr function has no protection against NULL strings
< Newer Topic :: Older Topic >

Pages:<< prev 1 next >>
Post is unread #1 Nov 6, 2005 3:54 pm   Last edited Nov 27, 2005 4:02 pm by Samson
Go to the top of the page
Go to the bottom of the page

Samson
Black Hand
GroupAdministrators
Posts3,647
JoinedJan 1, 2002

Bug: strip_cr function has no protection against NULL strings
Danger: Critical - Can lead to crashes and corrupted data.
Found by: Samson
Fixed by: Samson

---

build.c, strip_cr

Locate:
   static char newstr[MAX_STRING_LENGTH];
   int i, j;


Change to:
   static char newstr[MAX_STRING_LENGTH];
   int i, j;

   if( !str || str[0] == '\0' )
      return "";


This simple fix will prevent the strip_cr function from bringing the game down at a most inopportune moment with a NULL string being fed to it. This function is used heavily in the saving of area files so it represents an especially dangerous threat if left unprotected. When fed a NULL string this fix will return just an empty one which is perfectly safe.

EDIT: This fix was edited to remove the bug message due to spam reports. The NULL string protection is still vital however and should not be removed completely.
       
Pages:<< prev 1 next >>