diff options
| author | Ben Harris <bjh21@bjh21.me.uk> | 2023-02-13 22:14:26 +0000 |
|---|---|---|
| committer | Ben Harris <bjh21@bjh21.me.uk> | 2023-04-08 20:08:16 +0100 |
| commit | e411db788cfc0d0ed54b3c9b9deb15edba7d237a (patch) | |
| tree | df4592537a32023426c21bada2e5fbccc94dd5d4 /pattern.c | |
| parent | d505f08f671c2f0a3fdd0b7d733e4ce987aa4786 (diff) | |
| download | puzzles-e411db788cfc0d0ed54b3c9b9deb15edba7d237a.zip puzzles-e411db788cfc0d0ed54b3c9b9deb15edba7d237a.tar.gz puzzles-e411db788cfc0d0ed54b3c9b9deb15edba7d237a.tar.bz2 puzzles-e411db788cfc0d0ed54b3c9b9deb15edba7d237a.tar.xz | |
Net: assert that cx and cy are in range in compute_active()
This avoids an out-of-range heap write shortly afterwards. An assertion
failure is better than a buffer overrun, but still not ideal. Fixing
the problem properly will require fairly wide-ranging changes, though.
The bug can be demonstrated by loading this save file into a build with
AddressSanitizer:
SAVEFILE:41:Simon Tatham's Portable Puzzle Collection
VERSION :1:1
GAME :3:Net
PARAMS :4:5x5w
CPARAMS :4:5x5w
DESC :25:9893e85285bb72e6de5182741
UI :9:O0,0;C6,6
NSTATES :1:1
STATEPOS:1:1
Diffstat (limited to 'pattern.c')
0 files changed, 0 insertions, 0 deletions