From 32418426965f76a6bafb2dac4ac137ff9c566fe9 Mon Sep 17 00:00:00 2001 From: Inkfish Date: Tue, 2 Mar 2010 09:50:32 +0000 Subject: Fixed an exploit where the buyer can end the auction himself. git-svn-id: https://rathena.svn.sourceforge.net/svnroot/rathena/trunk@14255 54d463be-8e91-2dee-dedb-b68131a5f0ec --- Changelog-Trunk.txt | 2 ++ src/char_sql/int_auction.c | 6 ++++++ 2 files changed, 8 insertions(+) diff --git a/Changelog-Trunk.txt b/Changelog-Trunk.txt index dc41be305..aa1201a79 100644 --- a/Changelog-Trunk.txt +++ b/Changelog-Trunk.txt @@ -3,6 +3,8 @@ Date Added AS OF SVN REV. 5091, WE ARE NOW USING TRUNK. ALL UNTESTED BUGFIXES/FEATURES GO INTO TRUNK. IF YOU HAVE A WORKING AND TESTED BUGFIX PUT IT INTO STABLE AS WELL AS TRUNK. +2010/03/02 + * Fixed an exploit where the buyer can end the auction himself. [Inkfish] 2010/02/27 * Fixed Posion Status killing monsters with low max hp(like plants). [Inkfish] 2010/02/19 diff --git a/src/char_sql/int_auction.c b/src/char_sql/int_auction.c index 06d37aa0a..a51361789 100644 --- a/src/char_sql/int_auction.c +++ b/src/char_sql/int_auction.c @@ -378,6 +378,12 @@ static void mapif_parse_Auction_close(int fd) return; } + if( auction->seller_id != char_id ) + { + mapif_Auction_close(fd, char_id, 1); // You cannot end the auction + return; + } + if( auction->buyer_id == 0 ) { mapif_Auction_close(fd, char_id, 1); // You cannot end the auction -- cgit v1.2.3-70-g09d2