From 2de57f9bbbd9a5177d215929985c3e2d560208b2 Mon Sep 17 00:00:00 2001 From: Warner Losh Date: Sun, 9 Feb 1997 04:47:19 +0000 Subject: [PATCH] Buffer overflow from OpenBSD 1.3 deraadt: buf oflow, felix@mamba.pond.sub.org Obtained from: OpenBSD Not sure how to exploit this, but may be a backmerge candidate. --- games/sail/externs.h | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/games/sail/externs.h b/games/sail/externs.h index 4ee80754473..541b5a6dedb 100644 --- a/games/sail/externs.h +++ b/games/sail/externs.h @@ -191,18 +191,18 @@ struct File { char struck; /* 66 */ struct ship *captured; /* 68 */ short pcrew; /* 70 */ - char movebuf[10]; /* 72 */ - char drift; /* 82 */ + char movebuf[60]; /* 72 */ + char drift; /* 132 */ short nfoul; short ngrap; - struct snag foul[NSHIP]; /* 84 */ - struct snag grap[NSHIP]; /* 124 */ - char RH; /* 224 */ - char RG; /* 226 */ - char RR; /* 228 */ - char FS; /* 230 */ - char explode; /* 232 */ - char sink; /* 234 */ + struct snag foul[NSHIP]; /* 134 */ + struct snag grap[NSHIP]; /* 144 */ + char RH; /* 274 */ + char RG; /* 276 */ + char RR; /* 278 */ + char FS; /* 280 */ + char explode; /* 282 */ + char sink; /* 284 */ char dir; short col; short row;