Lubomir I. Ivanov 769aca9e95 equipment: sanitize 'tank_info' loop limits
In a number of places the global 'tank_info' array
is being iterated based on a 'tank_info[idx].name != NULL'
condition.

This is dangerous because if the user has added a lot of tanks,
such loops can reach 'tank_info[MAX_TANK_INFO]'. This is an
out of bounds read and if the 'name' pointer there happens to be
non-NULL, passing that address to a peace of code that tries
to read it (like strlen()) would either SIGSEGV or have undefined
behavior.

Clamp all loops that iterate 'tank_info' to MAX_TANK_INFO.

Signed-off-by: Lubomir I. Ivanov <neolit123@gmail.com>
2018-06-20 09:30:58 +09:00
..
2018-05-07 13:56:23 +02:00
2018-04-28 20:11:22 +03:00
2017-11-25 20:13:01 +01:00
2018-06-20 09:27:11 +09:00
2018-06-20 09:27:11 +09:00
2018-01-31 14:47:26 +01:00
2017-04-29 13:32:55 -07:00
2018-01-08 09:52:55 +02:00
2017-05-26 15:52:04 -07:00
2018-05-27 23:18:01 +03:00
2017-05-26 15:44:36 -07:00
2018-04-28 20:11:22 +03:00
2017-11-19 12:20:43 -08:00
2017-04-29 13:32:55 -07:00
2018-05-30 21:47:07 -07:00
2017-04-29 13:32:55 -07:00
2017-10-04 08:05:09 -07:00
2017-04-29 13:32:55 -07:00
2017-04-29 13:32:55 -07:00