forked from bartvdbraak/blender
ui_textedit_delete_selection() could access past the array bounds.
This commit is contained in:
parent
471c0c1afb
commit
b9db9e147e
@ -1254,7 +1254,7 @@ static int ui_textedit_delete_selection(uiBut *but, uiHandleButtonData *data)
|
||||
int len= strlen(str);
|
||||
int change= 0;
|
||||
if(but->selsta != but->selend && len) {
|
||||
memmove( str+but->selsta, str+but->selend, len-but->selsta+1 );
|
||||
memmove( str+but->selsta, str+but->selend, (len - but->selend) + 1 );
|
||||
change= 1;
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user