Bug #24
In the omega-rpg game:
void player_dump( void )
{
FILE *dumpfile;
char dump_name[ 32 ];
/* build player dump file name as "charactername.txt" */
strncpy( dump_name, Player.name, 27 );
strcat( dump_name, ".txt" );
strncpy is not guaranteed to NUL terminate. This might lead to a buffer overflow in the proceeding strcat.