Mercurial > hg > early-roguelike
view rogue4/INSTALL.txt @ 176:db1c9a21a7c3
srogue: prevent overflowing the score file name.
If SCOREFILE is not defined, roguehome() is called to find a directory
for the score file. It copies up to PATH_MAX-20 bytes from an
environment variable to a static buffer. Later these are strcpy()'d to
scorefile, which is of size LINLEN. Unfortunately LINLEN is 80 and
PATH_MAX is at least 256. On Linux, it happens to be 4096.
I haven't yet managed to crash or exploit it, but there are surely no
beneficial consequences, so roguehome() has been modified to check the
length, and the string it returns is also checked in main().
author | John "Elwin" Edwards |
---|---|
date | Sun, 02 Aug 2015 12:14:47 -0400 |
parents | c191a735f811 |
children |
line wrap: on
line source
Roguelike Gallery (rlgallery.org) This is the source code for the Roguelike Gallery's version of Rogue V4. History Rogue 4.2 was released by Michael Toy, Ken Arnold, and Glenn Wichman, probably early in 1982. Several updates were issued, and the major version number was incremented, so the last of the series was Rogue 5.2, released April 1982. The Roguelike Restoration Project (rogue.rogueforge.net) updated the game to work on modern systems. The Roguelike Gallery's version has been slightly modified for compatibility with dgamelaunch and security for multiple players. Installing On Unix, you can use the "./configure && make && make install" method. If you don't need a system-wide installation, you should be able to ignore all the options for "configure" and leave off the "make install". If you want multi-user play, run configure with the proper options ("configure --help" will explain what they do.) The important ones are savedir (where saved games are stored), scorefile (the high score list), and logfile (the log of all games played). You should probably also use '--enable-setgid=games' and '--disable-lockfile'. On Windows, I haven't tested the Visual Studio project files; the game should build, but the scorefile might not work. Playing For more details, see rogue4.6 (the man page) and rogue4.me (Michael Toy's "Guide to the Dungeons of Doom"). Troff format is a little outdated, but you should be able to discover something with a text editor. I plan to add versions in more common formats soon. Contact rlgallery.org admin: John "Elwin" Edwards <elwin@sdf.org>