diff options
| author | rubidium <rubidium@openttd.org> | 2011-08-12 18:36:47 +0000 |
|---|---|---|
| committer | rubidium <rubidium@openttd.org> | 2011-08-12 18:36:47 +0000 |
| commit | 81074e0ca2b8c7fa470db5b657998ac614a810de (patch) | |
| tree | 721f028bcea87ff250e6a8489890a8055dd8dbdc /src/saveload/cheat_sl.cpp | |
| parent | c8f19a608da349bdb22e286054daa08d049baf84 (diff) | |
| download | openttd-81074e0ca2b8c7fa470db5b657998ac614a810de.tar.xz | |
(svn r22737) -Fix [FS#4717]: some corrupted savegames could crash OpenTTD instead of showing the "savegame corrupted" message
Diffstat (limited to 'src/saveload/cheat_sl.cpp')
| -rw-r--r-- | src/saveload/cheat_sl.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/saveload/cheat_sl.cpp b/src/saveload/cheat_sl.cpp index 724c945df..aa5648a88 100644 --- a/src/saveload/cheat_sl.cpp +++ b/src/saveload/cheat_sl.cpp @@ -38,6 +38,8 @@ static void Load_CHTS() { Cheat *cht = (Cheat*)&_cheats; size_t count = SlGetFieldLength() / 2; + /* Cannot use lengthof because _cheats is of type Cheats, not Cheat */ + if (count > sizeof(_cheats) / sizeof(Cheat)) SlErrorCorrupt("Too many cheat values"); for (uint i = 0; i < count; i++) { cht[i].been_used = (SlReadByte() != 0); |