diff options
| author | Freeyorp <Freeyorp101@hotmail.com> | 2010-04-14 15:44:34 +1200 |
|---|---|---|
| committer | Freeyorp <Freeyorp101@hotmail.com> | 2010-05-24 23:33:30 +1200 |
| commit | 70de5e23d0be6af225a617b30414ca23aa7e70db (patch) | |
| tree | 37f58e65b3593f674fb472829f0feffdc6cec298 /npc/028-1/Doctor2.txt | |
| parent | 351738249bdb557e2042f80bc1be24323190e649 (diff) | |
| download | serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.tar.gz serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.tar.bz2 serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.tar.xz serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.zip | |
Fix a critical exploit
Diffstat (limited to 'npc/028-1/Doctor2.txt')
| -rw-r--r-- | npc/028-1/Doctor2.txt | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/npc/028-1/Doctor2.txt b/npc/028-1/Doctor2.txt index e828e91b..1a4b9f36 100644 --- a/npc/028-1/Doctor2.txt +++ b/npc/028-1/Doctor2.txt @@ -381,7 +381,7 @@ L_island_end_menu_loop: set @i, 0; if (@c == 0) goto L_island_post_menu_loop_sub; L_island_end_menu_loop_sub: - if (@submenu$[@c] == @menuitems$[@index]) goto L_island_end_menu_loop; + if (@submenu$[@i] == @menuitems$[@index]) goto L_island_end_menu_loop; set @i, @i + 1; if (@i < @c) goto L_island_end_menu_loop_sub; L_island_post_menu_loop_sub: @@ -395,7 +395,7 @@ L_island_post_menu_loop_sub: @submenu$[2], -, @submenu$[3], -; set @menu, @menu - 1; - if (@menu >= 4) goto L_island_oo_range; + if (@menu >= 4 || @menu < 0) goto L_island_oo_range; if (@submenuindex[@menu] == 8 || @submenuindex[@menu] == 9) goto L_At_Island_Resolve; |