From 194164a77eb4f2479b94c19e6f0e1278ab608781 Mon Sep 17 00:00:00 2001
From: historia <[not public]>
Date: Fri, 18 Sep 2026 16:13:49 -0400
Subject: fix: more casino, economy, gameplay, security, and world data
 hardening gaps

---
 internal/game/casino.go | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'internal/game/casino.go')

diff --git a/internal/game/casino.go b/internal/game/casino.go
index 4dfced6..dcf4273 100644
--- a/internal/game/casino.go
+++ b/internal/game/casino.go
@@ -932,7 +932,14 @@ func renderSlotSnapshot(snapshot *casino.SlotSnapshot, mode string, unicode bool
 			if reel < snapshot.StoppedReels {
 				value = snapshot.Grid[row][reel]
 			}
-			line += " " + colorSlotSymbol(mode, value) + strings.Repeat(" ", 7-len(value)) + " " + frameVertical
+			// Pad to the fixed 7-cell reel width; a malformed profile could
+			// otherwise make this negative and panic. Validation caps the id
+			// length, so this is a defence-in-depth backstop.
+			pad := 7 - len(value)
+			if pad < 0 {
+				pad = 0
+			}
+			line += " " + colorSlotSymbol(mode, value) + strings.Repeat(" ", pad) + " " + frameVertical
 		}
 		lines = append(lines, line)
 	}
-- 
cgit v1.2.3