IS4Code / YSF

YSF Server Functions
Other
98 stars 34 forks source link

Returning strings corrupts AMX stack if target buffer is too small #74

Closed IS4Code closed 6 years ago

IS4Code commented 6 years ago

set_amxstring misinterprets the max parameter and accesses one cell past the buffer to set the string terminator, if the target buffer is too small.

This can corrupt the AMX stack and cause random crashes.