From f0a83918dc89739323283a51b9d6fe877357eddc Mon Sep 17 00:00:00 2001
From: Ben Longbons <b.r.longbons@gmail.com>
Date: Wed, 9 Apr 2014 22:27:49 -0700
Subject: Update changelog that I forgot

---
 CHANGELOG | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/CHANGELOG b/CHANGELOG
index 23e4793..92e7793 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,25 @@
+v14.4.9:
+  - fix tarball timestamps
+  - added all missing copyright notices
+  - use AGPL for my new files; add @source command and makefile support
+  - fix a multiline span assertion missed by the testsuite
+  - @tee no longer duplicates the speaker's name
+  - fix @npcmove between blocks
+  - fix out-of-bounds crash when unarmed (exposed by shrinking character)
+  - bounds-checks for most arrays
+  - lots of deprecation warnings in the script parser (sorry)
+  - finally merge wushin's "local savepoint override" patch
+  - new magic frontend with sexpr; temporary converter
+  - if doing nothing, stop doing anything
+  - script variables of all types can now be used by magic
+  - flexible mapflags
+  - split out the character keys for better paging (network ABI change)
+  - lower priority for background processes
+  - add a more efficient string for temporaries
+  - make build prettier
+  - strictify sessions and fds
+  - recover nonexistent party member slots
+  - remove the middle makefile
 v14.1.27:
   - new tracking IO for better errors
   - Unified config parsing! This *requires* new config files in server-data
-- 
cgit v1.2.3-60-g2f50


From a4f3cabe0abb2b0625d2a0bb9c42cd28b589c480 Mon Sep 17 00:00:00 2001
From: Ben Longbons <b.r.longbons@gmail.com>
Date: Tue, 22 Apr 2014 13:44:34 -0700
Subject: Add missing changelog

---
 CHANGELOG | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG b/CHANGELOG
index 92e7793..f91489e 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,7 @@
+v14.4.18:
+  - fix some fatal bugs related to logout in the previous release
+  - fix out-of-bounds in trades exposed in the previous commit
+  - fix use-after-free when player is kicked with a delay
 v14.4.9:
   - fix tarball timestamps
   - added all missing copyright notices
-- 
cgit v1.2.3-60-g2f50


From e11badbebd078be3437a06a1fb72a7f01c3afd5c Mon Sep 17 00:00:00 2001
From: Ben Longbons <b.r.longbons@gmail.com>
Date: Tue, 5 Aug 2014 11:58:56 -0700
Subject: Emergency security fix for deleting characters

---
 CHANGELOG         | 2 ++
 src/char/char.cpp | 3 ++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG b/CHANGELOG
index f91489e..4ec5e5b 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,5 @@
+v14.4.19:
+  - emergency backport of security fix, since v14.7.1 is too buggy
 v14.4.18:
   - fix some fatal bugs related to logout in the previous release
   - fix out-of-bounds in trades exposed in the previous commit
diff --git a/src/char/char.cpp b/src/char/char.cpp
index 8a3397d..f8e12c0 100644
--- a/src/char/char.cpp
+++ b/src/char/char.cpp
@@ -2410,7 +2410,8 @@ void parse_char(Session *s)
                         {
                             if (cd.key.char_id == RFIFOL(s, 2))
                             {
-                                cs = &cd;
+                                if (cd.key.account_id == sd->account_id)
+                                    cs = &cd;
                                 break;
                             }
                         }
-- 
cgit v1.2.3-60-g2f50