Skip to content

Buffer overflow vulnerability when adding bots through Lua

What it says on the tin, the function doesn't check or truncate the length of the name

// Read the bot name, if given
if (!lua_isnoneornil(L, 3))
	strcpy(player_names[newplayernum], luaL_checkstring(L, 3));
Edited by Lactozilla