fix replaybuf overflow

Author: mercury233

gframe/single_duel.cpp

@@ -1428,14 +1428,18 @@ void SingleDuel::EndDuel() {
 	if(!pduel)
 		return;
 	last_replay.EndRecord();
-	char replaybuf[0x2000], *pbuf = replaybuf;
-	std::memcpy(pbuf, &last_replay.pheader, sizeof last_replay.pheader);
-	pbuf += sizeof last_replay.pheader;
+	size_t header_size = sizeof last_replay.pheader;
+	size_t buffer_size = header_size + last_replay.comp_size;
+	char* replaybuf = new char[buffer_size];
+	char* pbuf = replaybuf;
+	std::memcpy(pbuf, &last_replay.pheader, header_size);
+	pbuf += header_size;
 	std::memcpy(pbuf, last_replay.comp_data, last_replay.comp_size);
-	NetServer::SendBufferToPlayer(players[0], STOC_REPLAY, replaybuf, sizeof last_replay.pheader + last_replay.comp_size);
+	NetServer::SendBufferToPlayer(players[0], STOC_REPLAY, replaybuf, buffer_size);
 	NetServer::ReSendToPlayer(players[1]);
 	for(auto oit = observers.begin(); oit != observers.end(); ++oit)
 		NetServer::ReSendToPlayer(*oit);
+	delete[] replaybuf;
 	end_duel(pduel);
 	event_del(etimer);
 	pduel = 0;

gframe/tag_duel.cpp

@@ -1536,16 +1536,20 @@ void TagDuel::EndDuel() {
 	if(!pduel)
 		return;
 	last_replay.EndRecord();
-	char replaybuf[0x2000], *pbuf = replaybuf;
-	std::memcpy(pbuf, &last_replay.pheader, sizeof last_replay.pheader);
-	pbuf += sizeof last_replay.pheader;
+	size_t header_size = sizeof last_replay.pheader;
+	size_t buffer_size = header_size + last_replay.comp_size;
+	char* replaybuf = new char[buffer_size];
+	char* pbuf = replaybuf;
+	std::memcpy(pbuf, &last_replay.pheader, header_size);
+	pbuf += header_size;
 	std::memcpy(pbuf, last_replay.comp_data, last_replay.comp_size);
-	NetServer::SendBufferToPlayer(players[0], STOC_REPLAY, replaybuf, sizeof last_replay.pheader + last_replay.comp_size);
+	NetServer::SendBufferToPlayer(players[0], STOC_REPLAY, replaybuf, buffer_size);
 	NetServer::ReSendToPlayer(players[1]);
 	NetServer::ReSendToPlayer(players[2]);
 	NetServer::ReSendToPlayer(players[3]);
 	for(auto oit = observers.begin(); oit != observers.end(); ++oit)
 		NetServer::ReSendToPlayer(*oit);
+	delete[] replaybuf;
 	end_duel(pduel);
 	event_del(etimer);
 	pduel = 0;