[Freeciv-Dev] Suggested patch to the worklist security hole (PR#484)

[Taneli Huuskonen <huuskone@xxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Last night I submitted a bug report to bugs@xxxxxxxxxxxxxxxxxxx, an
address I spotted in a source file, thinking the communication would be
private.  This morning I realized it wasn't.  I'm sorry for making a
security hole public before a patch was available.  However, I've
attached my own suggested fix for the bug.  It consists of two rather
trivial changes: adding a check for invalid index in
handle_player_worklist( ) and eliminating the strcpy( ) from
copy_worklist( ).

Taneli Huuskonen

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv

iQA/AwUBOYKbr1+t0CYLfLaVEQJNvgCdGjF3dqC8jeyFuN8u69wOu1tuqzsAmwZK
cWS196ziSIgFOq85aALVVrmY
=0jPb
-----END PGP SIGNATURE-----
-- 
I don't   | All messages will be PGP signed,  | Fight for your right to
speak for | encrypted mail preferred.  Keys:  | use sealed envelopes.
the Uni.  | http://www.helsinki.fi/~huuskone/ | http://www.gilc.org/

worklist.patch
Description: worklist.patch