Competitor for the most obscure bug in Ued.

[ExpEM]

Using a BrushBuilder, if you return BadParameters with a long enough string the last few characters garble. For me this happens at 4096 (16 * 256) char. I expect this is a hard coded limit.

Example code:

[code]
class UedBreaker expands BrushBuilder;

var() int NumberOfChar;

function bool Build()
{
return BadParameters(GenString(NumberOfChar));
}

function String GenString(int i)
{
local string s;

s = "A";
while (Len(s) {
s = s$"A";
}

return(s);
}
[/code]

Set NumberOfChar to anything over 4095.

[[]KAOS[]Casey]

you're right, it's some hardcoded nonsense. I never understood why it was like that. it's been like that for ages -- iirc I was told it was a string copy function , and probably set up that way for speed