summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBen Longbons <b.r.longbons@gmail.com>2014-08-05 11:58:56 -0700
committerBen Longbons <b.r.longbons@gmail.com>2014-08-05 12:11:38 -0700
commite11badbebd078be3437a06a1fb72a7f01c3afd5c (patch)
tree52b7b0f8a555b94cd3044ec7803e15a1ed3346d2
parenta4f3cabe0abb2b0625d2a0bb9c42cd28b589c480 (diff)
downloadtmwa-e11badbebd078be3437a06a1fb72a7f01c3afd5c.tar.gz
tmwa-e11badbebd078be3437a06a1fb72a7f01c3afd5c.tar.bz2
tmwa-e11badbebd078be3437a06a1fb72a7f01c3afd5c.tar.xz
tmwa-e11badbebd078be3437a06a1fb72a7f01c3afd5c.zip
Emergency security fix for deleting charactersv14.4.19
-rw-r--r--CHANGELOG2
-rw-r--r--src/char/char.cpp3
2 files changed, 4 insertions, 1 deletions
diff --git a/CHANGELOG b/CHANGELOG
index f91489e..4ec5e5b 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,5 @@
+v14.4.19:
+ - emergency backport of security fix, since v14.7.1 is too buggy
v14.4.18:
- fix some fatal bugs related to logout in the previous release
- fix out-of-bounds in trades exposed in the previous commit
diff --git a/src/char/char.cpp b/src/char/char.cpp
index 8a3397d..f8e12c0 100644
--- a/src/char/char.cpp
+++ b/src/char/char.cpp
@@ -2410,7 +2410,8 @@ void parse_char(Session *s)
{
if (cd.key.char_id == RFIFOL(s, 2))
{
- cs = &cd;
+ if (cd.key.account_id == sd->account_id)
+ cs = &cd;
break;
}
}