Clients can access the inventories of incapacitated characters (e.g. put handcuffs on a stunned player, grab stuff from a dead character's inventory)

2017-04-04 21:18:03 +03:00
parent 6895cdbd7d
commit 0f8e6440ef
2 changed files with 20 additions and 9 deletions
@@ -1001,11 +1001,14 @@ namespace Barotrauma
        {
            if (!AllowInput || LockHands) return false;

+            //the inventory belongs to some other character
            if (inventory.Owner is Character && inventory.Owner != this)
            {
                var owner = (Character)inventory.Owner;

-                return owner.isDead || owner.IsUnconscious || owner.Stun > 0.0f || owner.LockHands;
+                //can only be accessed if the character is incapacitated and has been selected
+                return selectedCharacter == owner &&
+                    (owner.isDead || owner.IsUnconscious || owner.Stun > 0.0f || owner.LockHands);
            }

            if (inventory.Owner is Item)