[Bf-blender-cvs] SVN commit: /data/svn/bf-blender [35396] trunk/blender/source/blender/ editors/interface/interface_handlers.c: ui_textedit_delete_selection() could access past the array bounds.

[Campbell Barton]

Revision: 35396
          
http://projects.blender.org/scm/viewvc.php?view=rev&root=bf-blender&revision=35396
Author:   campbellbarton
Date:     2011-03-08 02:24:29 +0000 (Tue, 08 Mar 2011)
Log Message:
-----------
ui_textedit_delete_selection() could access past the array bounds.

Modified Paths:
--------------
    trunk/blender/source/blender/editors/interface/interface_handlers.c

Modified: trunk/blender/source/blender/editors/interface/interface_handlers.c
===================================================================
--- trunk/blender/source/blender/editors/interface/interface_handlers.c 
2011-03-08 01:28:10 UTC (rev 35395)
+++ trunk/blender/source/blender/editors/interface/interface_handlers.c 
2011-03-08 02:24:29 UTC (rev 35396)
@@ -1254,7 +1254,7 @@
        int len= strlen(str);
        int change= 0;
        if(but->selsta != but->selend && len) {
-               memmove( str+but->selsta, str+but->selend, len-but->selsta+1 );
+               memmove( str+but->selsta, str+but->selend, (len - but->selend) 
+ 1 );
                change= 1;
        }
        

_______________________________________________
Bf-blender-cvs mailing list
Bf-blender-cvs@blender.org
http://lists.blender.org/mailman/listinfo/bf-blender-cvs