mirror of https://github.com/OpenTTD/OpenTTD.git
001fdc3682
The command is placed in a queue for processing before it is bankrupted, after that the command is executed. This command yields a failure because the company does not exist, but then it still needs to call the callback. This callback tries to access the AI's virtual machine without any checks, so it starts to read a just freed pointer and segfaults. |
||
|---|---|---|
| .. | ||
| ai.hpp | ||
| ai_config.cpp | ||
| ai_config.hpp | ||
| ai_core.cpp | ||
| ai_gui.cpp | ||
| ai_gui.hpp | ||
| ai_info.cpp | ||
| ai_info.hpp | ||
| ai_instance.cpp | ||
| ai_instance.hpp | ||
| ai_scanner.cpp | ||
| ai_scanner.hpp | ||