From 3b2a92ea97f56cdd2d1870c1ae4afeae01d3f48e Mon Sep 17 00:00:00 2001
From: rubidium <rubidium@openttd.org>
Date: Sat, 23 Nov 2013 13:18:29 +0000
Subject: (svn r26062) -Fix: beef up checks against invalid data in highscore
 and language files

---
 src/strings.cpp | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'src/strings.cpp')

diff --git a/src/strings.cpp b/src/strings.cpp
index 0a6b23902..c3916dcf7 100644
--- a/src/strings.cpp
+++ b/src/strings.cpp
@@ -1763,7 +1763,12 @@ bool ReadLanguagePack(const LanguageMetadata *lang)
 
 	uint count = 0;
 	for (uint i = 0; i < TAB_COUNT; i++) {
-		uint num = lang_pack->offsets[i];
+		uint16 num = lang_pack->offsets[i];
+		if (num > TAB_SIZE) {
+				free(lang_pack);
+				return false;
+		}
+
 		_langtab_start[i] = count;
 		_langtab_num[i] = num;
 		count += num;
-- 
cgit v1.2.3-54-g00ecf