forked from bartvdbraak/blender
ui_textedit_delete_selection() could access past the array bounds.
This commit is contained in:
parent
471c0c1afb
commit
b9db9e147e
@ -1254,7 +1254,7 @@ static int ui_textedit_delete_selection(uiBut *but, uiHandleButtonData *data)
|
|||||||
int len= strlen(str);
|
int len= strlen(str);
|
||||||
int change= 0;
|
int change= 0;
|
||||||
if(but->selsta != but->selend && len) {
|
if(but->selsta != but->selend && len) {
|
||||||
memmove( str+but->selsta, str+but->selend, len-but->selsta+1 );
|
memmove( str+but->selsta, str+but->selend, (len - but->selend) + 1 );
|
||||||
change= 1;
|
change= 1;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user