Skip to content

Fix buffer overflow when linedef type 415 executes

Hanicef requested to merge Hanicef/SRB2:fix-line-415-buffer-overflow into next

When linedef type 415 executes, there's a risk that the game segfaults or executes arbitrary code due to the lump that contains the script is not guaranteed to be NULL-terminated (in fact, I've found that that's rarely the case). The fix simply creates a temporary buffer to store the script in and adds a NULL-termination to it.

Merge request reports