TorqueGameEngines/Torque3D
1
0
Fork 0
mirror of https://github.com/TorqueGameEngines/Torque3D.git synced 2026-02-24 17:13:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Added fix for #365 from PR #367 - buffer overrun

Browse source
This commit is contained in:
Tony 2021-01-21 18:38:00 -05:00
parent be3b5ec3aa
commit e3ea4c549c
1 changed files with 8 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
Engine/source/ts/tsShapeOldRead.cpp
View file

@ -856,12 +856,12 @@ void TSShape::writeName(Stream * s, S32 nameIndex)
S32 TSShape::readName(Stream * s, bool addName)
{
static char buffer[256];
S32 sz;
U32 sz;
S32 nameIndex = -1;
s->read(&sz);
if (sz)
if (sz>0 && sz<255)
{
s->read(sz*sizeof(char),buffer);
s->read(sz,buffer);
buffer[sz] = '\0';
nameIndex = findName(buffer);
@ -881,6 +881,11 @@ S32 TSShape::readName(Stream * s, bool addName)
names.last() = buffer;
}
}
else
{
Con::errorf("invalid TSShape::readName length!");
}
return nameIndex;
}