[Freeciv-Dev] Re: Server security bugs

[Mateusz Stefek <matusik_s@xxxxx>]

> I clean the patch and bit up. The policy in packets.c is to expect the
> cap the count at the array size.
> 
>       Raimar
> 
  > +  while (pack_iter_remaining(&iter) >= 2 &&
- > +    packet->num_nations_used <= MAX_NUM_PLAYERS) {
+ > + packet->num_nations_used < MAX_NUM_PLAYERS) {
  >      iget_uint16(&iter, &packet->nations_used[packet->num_nations_used]);
  >      packet->num_nations_used++;
  >    }

security2.diff
Description: Text Data