diff options
| author | Ray Molenkamp <github@lazydodo.com> | 2019-03-31 22:45:13 +0300 |
|---|---|---|
| committer | Ray Molenkamp <github@lazydodo.com> | 2019-03-31 22:45:26 +0300 |
| commit | a41008964c76014246417b045bd543a44397b3ca (patch) | |
| tree | a0d4fc544447eb33daeb2f89880230f069bedc55 /source/blender/blenloader | |
| parent | a4869df4c9d27279b44171d12cdece8989aaf255 (diff) | |
Fix: Buffer overflow in StudioLight
sl->light_ambient is a float[3], copy_v4_fl4 overwrites sl->free_function with a bogus
pointer on 32 bit.
Diffstat (limited to 'source/blender/blenloader')
| -rw-r--r-- | source/blender/blenloader/intern/versioning_userdef.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source/blender/blenloader/intern/versioning_userdef.c b/source/blender/blenloader/intern/versioning_userdef.c index 5bff0cd1c93..502b33a2b4a 100644 --- a/source/blender/blenloader/intern/versioning_userdef.c +++ b/source/blender/blenloader/intern/versioning_userdef.c @@ -452,7 +452,7 @@ void BLO_version_defaults_userpref_blend(Main *bmain, UserDef *userdef) userdef->light_param[3].flag = 1; userdef->light_param[3].smooth = 0.7; - copy_v4_fl4(userdef->light_ambient, 0.025000, 0.025000, 0.025000, 1.000000); + copy_v3_fl3(userdef->light_ambient, 0.025000, 0.025000, 0.025000); userdef->flag &= ~( USER_FLAG_UNUSED_4); |