forked from bartvdbraak/blender
Old IDProperty bug, (from original commit r8916),
found crash while changing operator string size. Shrinking arrays never worked right. rather then "newlen * sizeof(...)", it would memcpy "newlen * oldlen * sizeof(...)" which always goes over the array bounds.
This commit is contained in:
parent
b9db9e147e
commit
97edca3bc9
@ -240,7 +240,7 @@ void IDP_ResizeArray(IDProperty *prop, int newlen)
|
||||
else {
|
||||
/* newlen is smaller*/
|
||||
idp_resize_group_array(prop, newlen, newarr);
|
||||
memcpy(newarr, prop->data.pointer, newlen*prop->len*idp_size_table[(int)prop->subtype]);
|
||||
memcpy(newarr, prop->data.pointer, newlen*idp_size_table[(int)prop->subtype]);
|
||||
}
|
||||
|
||||
MEM_freeN(prop->data.pointer);
|
||||
|
Loading…
Reference in New Issue
Block a user