You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The length of the array for variable b is 336 (verticleLength * 3), but the boneIdx exceeds 336. Comparing with the C++ version, it is found that there are 373 elements in bone.
C++ version:
The text was updated successfully, but these errors were encountered:
davidetan
changed the title
spine-c _readVertices function boneIdx memory write overflow?
[c] _readVertices function boneIdx memory write overflow?
Feb 13, 2025
crash:
![Image](https://private-user-images.githubusercontent.com/19359452/412889680-e5ec3aee-b24a-4324-9f69-7b1186a5569a.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.VEKLszo2pGsVxy5KuP3uASKdON2a0xqOxIs05jnsi_I)
The length of the array for variable b is 336 (verticleLength * 3), but the boneIdx exceeds 336. Comparing with the C++ version, it is found that there are 373 elements in bone.
C++ version:
![Image](https://private-user-images.githubusercontent.com/19359452/412889038-eff6da2c-79ca-45dc-a04b-242d8363124b.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3Mzk2MDQwMTQsIm5iZiI6MTczOTYwMzcxNCwicGF0aCI6Ii8xOTM1OTQ1Mi80MTI4ODkwMzgtZWZmNmRhMmMtNzljYS00NWRjLWEwNGItMjQyZDgzNjMxMjRiLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNTAyMTUlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjUwMjE1VDA3MTUxNFomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTE3MzkzODMxMDQ2ZTQwYjUzMzQxNjU1NmU1NmI5NmNkODk4OGE5ZjZjOTE1MDU1NjI3YzMxYzQ0YzA2YWJmZDgmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0In0.n22OvbPlHkbpDZi4-AQZ9yMJmCr0yM3WXcWibXk01bU)
The text was updated successfully, but these errors were encountered: