libretro/scummvm
1
0
Fork 0
mirror of https://github.com/libretro/scummvm.git synced 2024-12-12 20:17:49 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

CGE2: Fix possible string overflow in Hero::expand().

Browse Source
This commit is contained in:
uruk 2014-08-13 19:49:56 +02:00
parent 8b1ffab95b
commit 8e22ef9b6d
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
engines/cge2/hero.cpp
View File

@ -190,14 +190,15 @@ Sprite *Hero::expand() {
setShapeList(_dim[0], shpcnt);
}
Common::String str(_vm->_text->getText(_ref + 100));
char text[kLineMax + 1];
strcpy(text, str.c_str());
char *tempStr = _vm->_text->getText(_ref + 100);
char *text = new char[strlen(tempStr) + 1];
strcpy(text, tempStr);
_reachStart = atoi(_vm->token(text));
_reachCycle = atoi(_vm->token(nullptr));
_sayStart = atoi(_vm->token(nullptr));
_funStart = atoi(_vm->token(nullptr));
_funDel = _funDel0 = (72 / _ext->_seq[0]._dly) * atoi(_vm->token(nullptr));
delete[] text;
int i = stepSize() / 2;
_maxDist = sqrt(double(i * i * 2));