Skip to content

Fix buffer overflow when when fetching typenames on freeslots

Hanicef requested to merge Hanicef/SRB2:fix-buffer-overflow-mobj-typename into next

here's a fun one: MOBJTYPE_LIST only covers the standard types, so if a freeslot mobj has it's removal delayed, it tries to fetch a value beyond the end of MOBJTYPE_LIST. so, in that case, we can just return MT_FREESLOT instead.

Merge request reports

Loading