[8848] Fixed bidding on auctions below starting bid

This was possible by using cheating tools only; the client denies such
actions without sending CMSG_AUCTION_PLACE_BID.
Thanks to leak for reporting this vulnerability.
This commit is contained in:
arrai 2009-11-20 16:03:54 +01:00
parent 166c4feaca
commit b4ce8020e7
2 changed files with 2 additions and 2 deletions

View file

@ -323,7 +323,7 @@ void WorldSession::HandleAuctionPlaceBid( WorldPacket & recv_data )
} }
// cheating // cheating
if(price <= auction->bid) if(price <= auction->bid || price < auction->startbid)
return; return;
// price too low for next bid if not buyout // price too low for next bid if not buyout

View file

@ -1,4 +1,4 @@
#ifndef __REVISION_NR_H__ #ifndef __REVISION_NR_H__
#define __REVISION_NR_H__ #define __REVISION_NR_H__
#define REVISION_NR "8847" #define REVISION_NR "8848"
#endif // __REVISION_NR_H__ #endif // __REVISION_NR_H__