search

wolfenste / tictactoe

0 stars 0 forks source link

Leaking access to `Map::setMarksCell` through `Game::getMap` #20

Closed flavius closed 6 years ago

flavius commented 6 years ago

Map has a public method to modify itself, that's setMarksCell.

At the same time, Game allows its own map to be retrieved.

Which means that any caller can $game->getMap()->setMarksCell() and corrupt the Map.