From 91185482fbb32414db2f0665eee5bf3f1414e95e Mon Sep 17 00:00:00 2001 From: vuonojenmustaturska Date: Thu, 10 May 2018 20:36:09 +0300 Subject: [PATCH] Fixes an admin unprotected varedit exploit --- code/modules/clothing/clothing.dm | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/code/modules/clothing/clothing.dm b/code/modules/clothing/clothing.dm index c353e63abb8..1dde03a8ed8 100644 --- a/code/modules/clothing/clothing.dm +++ b/code/modules/clothing/clothing.dm @@ -83,13 +83,14 @@ /obj/item/clothing/equipped(mob/user, slot) ..() - + if (!istype(user)) + return if(slot_flags & slotdefine2slotbit(slot)) //Was equipped to a valid slot for this item? if (LAZYLEN(user_vars_to_edit)) for(var/variable in user_vars_to_edit) if(variable in user.vars) LAZYSET(user_vars_remembered, variable, user.vars[variable]) - user.vars[variable] = user_vars_to_edit[variable] + user.vv_edit_var(variable, user_vars_to_edit[variable]) /obj/item/clothing/examine(mob/user) ..()