Merge branch 'metal-sonic-use-after-free' into 'next'

Fix use-after-free when Metal Sonic charges energy balls

See merge request STJr/SRB2!1956
This commit is contained in:
MascaraSnake 2023-04-12 09:20:00 +00:00
commit 4f8625ef76

View file

@ -5665,8 +5665,11 @@ static void P_Boss9Thinker(mobj_t *mobj)
missile->fuse = 1;
if (missile->fuse > mobj->fuse)
{
P_RemoveMobj(missile);
}
else
{
if (mobj->health > mobj->info->damage)
{
P_SetScale(missile, FRACUNIT/3);
@ -5681,6 +5684,7 @@ static void P_Boss9Thinker(mobj_t *mobj)
missile->scalespeed = abs(missile->scale - missile->destscale)/missile->fuse;
missile->colorized = true;
}
}
// ...then down. easier than changing the missile's momz after-the-fact
mobj->z -= mobj->height/2;