From aded93fe685d4d8f17789d51def82c9f5443ff9a Mon Sep 17 00:00:00 2001 From: rtw1x1 Date: Fri, 14 Nov 2025 21:09:42 +0000 Subject: [PATCH] Fix buffer overflow in QUERY_PLAYER_CREATE --- src/db/ClientManagerPlayer.cpp | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/db/ClientManagerPlayer.cpp b/src/db/ClientManagerPlayer.cpp index a1563dc..7728cda 100644 --- a/src/db/ClientManagerPlayer.cpp +++ b/src/db/ClientManagerPlayer.cpp @@ -1,4 +1,4 @@ - + #include "stdafx.h" #include "ClientManager.h" @@ -893,7 +893,8 @@ void CClientManager::__QUERY_PLAYER_CREATE(CPeer *peer, DWORD dwHandle, TPlayerC packet->player_table.ht, packet->player_table.job); - static char text[4096 + 1]; + //tw1x1: Buffer overflow (14.11.2025 / 21:08 GMT) + static char text[8192 + 1]; CDBManager::instance().EscapeString(text, packet->player_table.skills, sizeof(packet->player_table.skills)); queryLen += snprintf(queryStr + queryLen, sizeof(queryStr) - queryLen, "'%s', ", text);