When pasting text into the chat input, it is truncated after 256 characters. However it is possible to continue typing. The result looks like this:



Note the cursor. Typing additional characters advances the cursor but doesn't show any new text. If too many characters are entered, TB crashes.

Additionally to manually typing characters, Lua can be used to crash TB too. Any call of the echo function with an argument that is longer than 255 characters will result in a crash.

This looks suspicously like a buffer overflow.

System info:
Toribash 4.92, Steam version
Windows 8 64 bit