summaryrefslogtreecommitdiff
path: root/indra/newview/llfollowcam.h
diff options
context:
space:
mode:
authorKitty Barnett <develop@catznip.com>2017-10-12 22:55:15 +0200
committerKitty Barnett <develop@catznip.com>2017-10-12 22:55:15 +0200
commit18fa2e6471fe25036341f0375a2f4d4887c8c378 (patch)
tree97521e311a7da38d0c90ba72955fd33f55a58a4c /indra/newview/llfollowcam.h
parent5a7b36d506c8fab720c466a8dff2e3fc79a14390 (diff)
MAINT-7081 [FIXED] Access (write) violation / buffer overrun in LLTextureFetchWorker::doWork()
The trouble lines are: U8 * buffer = (U8 *) ALLOCATE_MEM(LLImageBase::getPrivatePool(), total_size); if (cur_size > 0) { memcpy(buffer, mFormattedImage->getData(), cur_size); } If 'cur_size > mHttpReplyOffset + append_size' then 'total_size -= src_offset' will cause total_size to be smaller than cur_size causing a write access violation on the memcpy. Since the response is invalid it seemed best to make it follow the other failed partial condition. (transplanted from 737e28ec6b4d74f3ff915a4effc13d7b615a6a9b)
Diffstat (limited to 'indra/newview/llfollowcam.h')
0 files changed, 0 insertions, 0 deletions