Patch File for DeHackEd v3.0 # Note: Use the pound sign ('#') to start comment lines. Doom version = 21 Patch format = 6 # Bug found in batman.deh (thanks to grazza for finding this): # # This demonstrates a bug in DOS dehacked: the Doom frame table contains # 967 entries, so it should be possible to set frame 966 (the last frame) # However, dehacked only allocates space for 966 frames (see dheinit.h, # line 74). # As a result, and because of a lack of bounds checking, this will # overflow the frame array and start writing into the weapon array instead. # The result is equal to this: # # Weapon 0 # Select frame = 0 # # In Batman Doom, this has the effect that when using Vanilla Doom with # DOS dehacked, it is impossible to change weapons away from the fist. Frame 966 Next frame = 0