From 70de5e23d0be6af225a617b30414ca23aa7e70db Mon Sep 17 00:00:00 2001 From: Freeyorp Date: Wed, 14 Apr 2010 15:44:34 +1200 Subject: Fix a critical exploit --- npc/028-1/Doctor2.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'npc/028-1') diff --git a/npc/028-1/Doctor2.txt b/npc/028-1/Doctor2.txt index e828e91b..1a4b9f36 100644 --- a/npc/028-1/Doctor2.txt +++ b/npc/028-1/Doctor2.txt @@ -381,7 +381,7 @@ L_island_end_menu_loop: set @i, 0; if (@c == 0) goto L_island_post_menu_loop_sub; L_island_end_menu_loop_sub: - if (@submenu$[@c] == @menuitems$[@index]) goto L_island_end_menu_loop; + if (@submenu$[@i] == @menuitems$[@index]) goto L_island_end_menu_loop; set @i, @i + 1; if (@i < @c) goto L_island_end_menu_loop_sub; L_island_post_menu_loop_sub: @@ -395,7 +395,7 @@ L_island_post_menu_loop_sub: @submenu$[2], -, @submenu$[3], -; set @menu, @menu - 1; - if (@menu >= 4) goto L_island_oo_range; + if (@menu >= 4 || @menu < 0) goto L_island_oo_range; if (@submenuindex[@menu] == 8 || @submenuindex[@menu] == 9) goto L_At_Island_Resolve; -- cgit v1.2.3-60-g2f50