Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[c] _readVertices function boneIdx memory write overflow? #2751

Open
IsakWong opened this issue Feb 13, 2025 · 2 comments
Open

[c] _readVertices function boneIdx memory write overflow? #2751

IsakWong opened this issue Feb 13, 2025 · 2 comments
Assignees
@badlogic
Labels
bug

Comments

@IsakWong
Copy link

IsakWong commented Feb 13, 2025 •
edited
Loading

crash:
Image

The length of the array for variable b is 336 (verticleLength * 3), but the boneIdx exceeds 336. Comparing with the C++ version, it is found that there are 373 elements in bone.

C++ version:
Image
@davidetan davidetan changed the title spine-c _readVertices function boneIdx memory write overflow? [c] _readVertices function boneIdx memory write overflow? Feb 13, 2025
@badlogic
Copy link
Collaborator

@IsakWong can you share the skeleton and atlas files so I can reproduce this? I checked the code and I can't quite figure out why there would be a difference.

@badlogic badlogic self-assigned this Feb 26, 2025
@badlogic badlogic added the bug label Feb 26, 2025
@IsakWong
Copy link
Author

IsakWong commented Mar 5, 2025

ex2048.zip @badlogic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@badlogic badlogic

Labels
bug
Milestone
No milestone
Development

No branches or pull requests
2 participants
@badlogic @IsakWong