From a563cfd0f2a5e68ad0eab1a371b141fab4ddd59e Mon Sep 17 00:00:00 2001 From: Mathias Froehlich Date: Sun, 26 Feb 2012 13:14:39 +0100 Subject: [PATCH] hla: Fix buffer overrun in SGMath vector types. --- simgear/hla/HLAArrayDataElement.hxx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/simgear/hla/HLAArrayDataElement.hxx b/simgear/hla/HLAArrayDataElement.hxx index de3c1d0a..8f510be5 100644 --- a/simgear/hla/HLAArrayDataElement.hxx +++ b/simgear/hla/HLAArrayDataElement.hxx @@ -214,7 +214,7 @@ public: virtual bool setNumElements(unsigned count) { - for (unsigned i = 2; i < count; ++i) + for (unsigned i = count; i < 2; ++i) _value[i] = 0; return true; } @@ -306,7 +306,7 @@ public: virtual bool setNumElements(unsigned count) { - for (unsigned i = 3; i < count; ++i) + for (unsigned i = count; i < 3; ++i) _value[i] = 0; return true; } @@ -398,7 +398,7 @@ public: virtual bool setNumElements(unsigned count) { - for (unsigned i = 4; i < count; ++i) + for (unsigned i = count; i < 4; ++i) _value[i] = 0; return true; } @@ -490,7 +490,7 @@ public: virtual bool setNumElements(unsigned count) { - for (unsigned i = 4; i < count; ++i) + for (unsigned i = count; i < 4; ++i) _value[i] = 0; return true; } -- 2.39.5