Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug
Bug#: 209409
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Games <games@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Thomas Ward <jouva@moufette.com>
Add CC:
CC:
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 209409 depends on: Show dependency tree
Bug 209409 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2008-02-09 03:43 0000 
The security patch for the commands to the server is incorrect. The first
change (from data.substr(2) to data.substr(2,16)) is fine since that's where
the proper data is. The new player function receives the FULL command
(.nNickname).

HOWEVER in the processCommands() function, the period is stripped (it's called
with data+1). Therefore when CHANGING your nickname and calling it with
data.substr(2,16) .nNickname sets one's nickname to "ickname". Likewise, the
picture icon command is ALSO broken. The patch should be modified.

Reproducible: Always

------- Comment #1 From Mr. Bones. 2008-02-09 04:30:37 0000 ------- 
yes, upstream changed the patch.  Resync and re-emerge to get the fixed up
patch.
Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug