From 1a3c59baacf9caecb4b13bbe2bb6316ef115f19e Mon Sep 17 00:00:00 2001 From: Campbell Barton Date: Fri, 26 Apr 2013 11:31:54 +0000 Subject: [PATCH] fix for out of bounds memory access in solidify modifier (hidden by guardedalloc). --- source/blender/modifiers/intern/MOD_solidify.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/source/blender/modifiers/intern/MOD_solidify.c b/source/blender/modifiers/intern/MOD_solidify.c index 9cdd52f2375..5eebb9ca52a 100644 --- a/source/blender/modifiers/intern/MOD_solidify.c +++ b/source/blender/modifiers/intern/MOD_solidify.c @@ -302,10 +302,11 @@ static DerivedMesh *applyModifier( ml = orig_mloop + mp->loopstart; - for (j = 0, ml_v1 = ml->v, ml_v2 = ml[mp->totloop - 1].v; + for (j = 0, ml_v2 = ml[mp->totloop - 1].v; j < mp->totloop; - j++, ml++, ml_v2 = ml_v1, ml_v1 = ml->v) + j++, ml++, ml_v2 = ml_v1) { + ml_v1 = ml->v; /* add edge user */ eidx = GET_INT_FROM_POINTER(BLI_edgehash_lookup(edgehash, ml_v1, ml_v2)); if (edge_users[eidx] == INVALID_UNUSED) {