Buffer overflow from OpenBSD

1.3 deraadt:
	buf oflow, felix@mamba.pond.sub.org
Obtained from: OpenBSD

Not sure how to exploit this, but may be a backmerge candidate.

1 files changed, 10 insertions, 10 deletions

diff --git a/games/sail/externs.h b/games/sail/externs.h
index 4ee8075..541b5a6 100644
--- a/games/sail/externs.h
+++ b/games/sail/externs.h
@@ -191,18 +191,18 @@ struct File {
 	char struck;			/* 66 */
 	struct ship *captured;		/* 68 */
 	short pcrew;			/* 70 */
-	char movebuf[10];		/* 72 */
-	char drift;			/* 82 */
+	char movebuf[60];		/* 72 */
+	char drift;			/* 132 */
 	short nfoul;
 	short ngrap;
-	struct snag foul[NSHIP];	/* 84 */
-	struct snag grap[NSHIP];	/* 124 */
-	char RH;			/* 224 */
-	char RG;			/* 226 */
-	char RR;			/* 228 */
-	char FS;			/* 230 */
-	char explode;			/* 232 */
-	char sink;			/* 234 */
+	struct snag foul[NSHIP];	/* 134 */
+	struct snag grap[NSHIP];	/* 144 */
+	char RH;			/* 274 */
+	char RG;			/* 276 */
+	char RR;			/* 278 */
+	char FS;			/* 280 */
+	char explode;			/* 282 */
+	char sink;			/* 284 */
 	char dir;
 	short col;
 	short row;