fix: out-of-bounds index in itemDeleteHandler()

2023-12-18 04:41:53 -06:00 · 2023-12-18 04:41:53 -06:00 · e61682dfb2
parent d9ebb4e3ef
commit e61682dfb2
1 changed files with 3 additions and 0 deletions
--- a/src/Items.cpp
+++ b/src/Items.cpp
@ -416,6 +416,9 @@ static void itemDeleteHandler(CNSocket* sock, CNPacketData* data) {

    Player* plr = PlayerManager::getPlayer(sock);

+    if (itemdel->iSlotNum < 0 || itemdel->iSlotNum >= AINVEN_COUNT)
+        return; // sanity check
+
    resp.eIL = itemdel->eIL;
    resp.iSlotNum = itemdel->iSlotNum;