PennMUSH Incorp. 182p3

  * Crash bug in buy fixed. Reported by Amy. Patch by Javelin.

diff --git a/src/rob.c b/src/rob.c
index 3e0442a0a867bda6eaff58f847364f5e3f25c24e..8ec3eb72a4f3568c6c69ca6530ec400f3ad294cf 100644 (file)
--- a/src/rob.c
+++ b/src/rob.c
@@ -241,7 +241,7 @@ void
 do_buy(dbref player, char *item, char *from, int price)
 {
   dbref vendor;
-  char *prices;
+  char prices[BUFFER_LEN];
   char *plus;
   char *cost;
   char finditem[BUFFER_LEN];
@@ -309,10 +309,10 @@ do_buy(dbref player, char *item, char *from, int price)
     a = atr_get(vendor, "PRICELIST");
     if (!a)
       continue;
-    /* atr_value uses a static buffer, so we'll take advantage of that */
-    prices = atr_value(a);
+    strncpy(prices,atr_value(a),BUFFER_LEN);
+    prices[BUFFER_LEN-1] = '\0';
     upcasestr(prices);
-    count = list2arr(r, BUFFER_LEN / 2, atr_value(a), ' ');
+    count = list2arr(r, BUFFER_LEN / 2, prices, ' ');
     if (!count)
       continue;
     for (i = 0; i < count; i++) {