kannonier8/blender
1
0
Fork 0
forked from bartvdbraak/blender
Code Pull Requests Activity

ui_textedit_delete_selection() could access past the array bounds.

Browse Source
This commit is contained in:
Campbell Barton 2011-03-08 02:24:29 +00:00
parent 471c0c1afb
commit b9db9e147e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
source/blender/editors/interface/interface_handlers.c
View File

@ -1254,7 +1254,7 @@ static int ui_textedit_delete_selection(uiBut *but, uiHandleButtonData *data)
int len= strlen(str); int len= strlen(str);
int change= 0; int change= 0;
if(but->selsta != but->selend && len) { if(but->selsta != but->selend && len) {
memmove( str+but->selsta, str+but->selend, len-but->selsta+1 ); memmove( str+but->selsta, str+but->selend, (len - but->selend) + 1 );
change= 1; change= 1;
} }