Re: [crossfire] Hardening plugin system

2006-01-16 Thread Nicolas Weeger
If its a choice of: a) when callback to set value is used, we set the value and then mark a flag that the object has been modified, and when function is finished, we check sanity of object, or b) when callback to set value is made, we check the validity I'd personally choose b -

Re: [crossfire] Hardening plugin system

2006-01-14 Thread Mark Wedel
Nicolas Weeger wrote: Hello. Currently, a plugin can easily crash the server, which doesn't check parameters (just call a function with a NULL pointer, nice crash guaranteed). Also, server doesn't checks parameters and such, which can lead to invalid values (Str of 50 for a player...). So