Commit: 9036fa6b2e47c1cd6f208e9a128771752766c5e8
Author: Campbell Barton
Date:   Mon Aug 3 23:18:09 2015 +1000
Branches: master
https://developer.blender.org/rB9036fa6b2e47c1cd6f208e9a128771752766c5e8

Fix buffer overrun lofting nurbs

===================================================================

M       source/blender/editors/curve/editcurve.c

===================================================================

diff --git a/source/blender/editors/curve/editcurve.c 
b/source/blender/editors/curve/editcurve.c
index 3163b54..d410111 100644
--- a/source/blender/editors/curve/editcurve.c
+++ b/source/blender/editors/curve/editcurve.c
@@ -3591,15 +3591,17 @@ static void switchdirection_knots(float *base, int tot)
                fp1++; 
                fp2--;
        }
+
        /* and make in increasing order again */
-       a = tot;
+       a = tot - 1;
        fp1 = base;
-       fp2 = tempf = MEM_mallocN(sizeof(float) * a, "switchdirect");
+       fp2 = tempf = MEM_mallocN(sizeof(float) * tot, "switchdirect");
        while (a--) {
                fp2[0] = fabsf(fp1[1] - fp1[0]);
                fp1++;
                fp2++;
        }
+       fp2[0] = 0.0f;
 
        a = tot - 1;
        fp1 = base;

_______________________________________________
Bf-blender-cvs mailing list
[email protected]
http://lists.blender.org/mailman/listinfo/bf-blender-cvs

Reply via email to