griefith/test
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Bugfix

Browse Source 
Loading font used a minimal string array (80 chars) and copied file name
strings in it without size checks. Triple tsk!
This commit is contained in:
Ton Roosendaal
2009-06-04 15:44:43 +00:00
parent cf6ed23578
commit 549d1d3742
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
source/blender/src/buttons_editing.c
View File

@@ -2919,7 +2919,7 @@ void do_fontbuts(unsigned short event)
VFont *vf;
Object *ob;
ScrArea *sa;
char str[80];
char str[FILE_MAX];
int ctevt;
char *ctmenu;
DynStr *ds;
@@ -2988,8 +2988,8 @@ void do_fontbuts(unsigned short event)
break;
case B_LOADFONT:
vf= give_vfontpointer(G.buts->texnr);
if(vf && vf->id.prev!=vf->id.next) strcpy(str, vf->name);
else strcpy(str, U.fontdir);
if(vf && vf->id.prev!=vf->id.next) BLI_strncpy(str, vf->name, FILE_MAX);
else BLI_strncpy(str, U.fontdir, FILE_MAX);
sa= closest_bigger_area();
areawinset(sa->win);