Chris-plus-alphanumericgibberish / dNAO

Merge of dnethack onto the nethack.alt.org sources.
Other
20 stars 29 forks source link

Out of bounds read in doorganize code when an inventory item is on # #2176

Open demogorgon22 opened 1 year ago

demogorgon22 commented 1 year ago

https://github.com/NetHack/NetHack/commit/8a1d0746862eaad184a54949e80a799f7f13dbcc

invlet is used to index into the alphabet array and when this code is run and you have an item on #, # is used to calculate the index which leads to an out of bounds read confirmed by address sanitizer.

Chris-plus-alphanumericgibberish commented 5 months ago

4ed10086f740471592359f2c6db81e51384ba14c