fix: security vulnerabilities (#1980)

* fix: security vulnerabilities

Tested that all functions related to the touched files work

will test sqlite on a CI build

* fix failing test

* ai feedback

* add buffer size checking

* use c_str

* dont log session key

* Try this for a mac definition

* be quiet apple
This commit is contained in:
David Markowitz
2026-06-07 20:59:11 -07:00
committed by GitHub
parent f6c9a27a2b
commit a156a8fcba
109 changed files with 806 additions and 514 deletions

View File

@@ -124,21 +124,23 @@ void BaseRandomServer::NotifySpawnerOfDeath(Entity* self, Spawner* spawner) {
return;
}
const auto& sectionName = spawnerName.substr(0, spawnerName.size() - 7);
if (spawnerName.size() >= 7) {
const auto& sectionName = spawnerName.substr(0, spawnerName.size() - 7);
const auto variableName = u"mobsDead" + GeneralUtils::ASCIIToUTF16(sectionName);
const auto variableName = u"mobsDead" + GeneralUtils::ASCIIToUTF16(sectionName);
auto mobDeathCount = self->GetVar<int32_t>(variableName);
auto mobDeathCount = self->GetVar<int32_t>(variableName);
mobDeathCount++;
mobDeathCount++;
if (mobDeathCount >= mobDeathResetNumber) {
const auto& zoneInfo = GeneralUtils::SplitString(sectionName, '_');
if (mobDeathCount >= mobDeathResetNumber) {
const auto& zoneInfo = GeneralUtils::SplitString(sectionName, '_');
SpawnSection(self, sectionName, sectionMultipliers[zoneInfo[sectionIDConst - 1]]);
SpawnSection(self, sectionName, sectionMultipliers[zoneInfo[sectionIDConst - 1]]);
}
self->SetVar(variableName, mobDeathCount);
}
self->SetVar(variableName, mobDeathCount);
}
void BaseRandomServer::NamedEnemyDeath(Entity* self, Spawner* spawner) {