• src/sbbs3/js_console.cpp

    From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Sat Mar 23 17:11:55 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/35666fb0ec7116fd0580da76
    Modified Files:
    src/sbbs3/js_console.cpp
    Log Message:
    Fix CID 479078: Resource leak (RESOURCE_LEAK)

    Passing an unparseable integer to console.editfile() could leak heap memory

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Windows 11)@VERT to Git commit to main/sbbs/master on Tue Aug 6 18:11:10 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/049c18c41a02cf6a6934ecd5
    Modified Files:
    src/sbbs3/js_console.cpp
    Log Message:
    Fix potential null object pointer passed to JS_GetProperty in js_gotoxy()

    I'm not sure under what script conditions this could happen, but apparently Nelgin was able to produce this null pointer deref (and segfault) using DDMsgReader. This should fix issue #769

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Rob Swindell (on Debian Linux)@VERT to Git commit to main/sbbs/master on Tue Aug 6 18:27:43 2024
    https://gitlab.synchro.net/main/sbbs/-/commit/a2d6dc86b0b09664a1782cb6
    Modified Files:
    src/sbbs3/js_console.cpp
    Log Message:
    Better invalid argument reporting (null object) from js_gotoxy()

    The calling script will still terminate if it does this, but at least the caller will get a useful JS exception.

    Related to fix for issue #769

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net