summaryrefslogtreecommitdiff
path: root/npc/028-1
diff options
context:
space:
mode:
authorFreeyorp <Freeyorp101@hotmail.com>2010-04-14 15:44:34 +1200
committerFreeyorp <Freeyorp101@hotmail.com>2010-05-24 23:33:30 +1200
commit70de5e23d0be6af225a617b30414ca23aa7e70db (patch)
tree37f58e65b3593f674fb472829f0feffdc6cec298 /npc/028-1
parent351738249bdb557e2042f80bc1be24323190e649 (diff)
downloadserverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.tar.gz
serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.tar.bz2
serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.tar.xz
serverdata-70de5e23d0be6af225a617b30414ca23aa7e70db.zip
Fix a critical exploit
Diffstat (limited to 'npc/028-1')
-rw-r--r--npc/028-1/Doctor2.txt4
1 files changed, 2 insertions, 2 deletions
diff --git a/npc/028-1/Doctor2.txt b/npc/028-1/Doctor2.txt
index e828e91b..1a4b9f36 100644
--- a/npc/028-1/Doctor2.txt
+++ b/npc/028-1/Doctor2.txt
@@ -381,7 +381,7 @@ L_island_end_menu_loop:
set @i, 0;
if (@c == 0) goto L_island_post_menu_loop_sub;
L_island_end_menu_loop_sub:
- if (@submenu$[@c] == @menuitems$[@index]) goto L_island_end_menu_loop;
+ if (@submenu$[@i] == @menuitems$[@index]) goto L_island_end_menu_loop;
set @i, @i + 1;
if (@i < @c) goto L_island_end_menu_loop_sub;
L_island_post_menu_loop_sub:
@@ -395,7 +395,7 @@ L_island_post_menu_loop_sub:
@submenu$[2], -,
@submenu$[3], -;
set @menu, @menu - 1;
- if (@menu >= 4) goto L_island_oo_range;
+ if (@menu >= 4 || @menu < 0) goto L_island_oo_range;
if (@submenuindex[@menu] == 8 || @submenuindex[@menu] == 9)
goto L_At_Island_Resolve;