Fix potential security issues.
This commit is contained in:
@@ -180,23 +180,21 @@ inline void ValidateDSProcess::DoValidationEx(T** parray, unsigned int size,
|
||||
|
||||
// ------------------------------------------------------------------------------------------------
|
||||
template <typename T>
|
||||
inline void ValidateDSProcess::DoValidationWithNameCheck(T** array,
|
||||
unsigned int size, const char* firstName,
|
||||
const char* secondName)
|
||||
{
|
||||
inline
|
||||
void ValidateDSProcess::DoValidationWithNameCheck(T** array, unsigned int size, const char* firstName, const char* secondName) {
|
||||
// validate all entries
|
||||
DoValidationEx(array,size,firstName,secondName);
|
||||
|
||||
for (unsigned int i = 0; i < size;++i)
|
||||
{
|
||||
for (unsigned int i = 0; i < size;++i) {
|
||||
int res = HasNameMatch(array[i]->mName,mScene->mRootNode);
|
||||
if (!res) {
|
||||
if (0 == res) {
|
||||
const std::string name = static_cast<char*>(array[i]->mName.data);
|
||||
ReportError("aiScene::%s[%i] has no corresponding node in the scene graph (%s)",
|
||||
firstName,i,array[i]->mName.data);
|
||||
}
|
||||
else if (1 != res) {
|
||||
firstName,i, name.c_str());
|
||||
} else if (1 != res) {
|
||||
const std::string name = static_cast<char*>(array[i]->mName.data);
|
||||
ReportError("aiScene::%s[%i]: there are more than one nodes with %s as name",
|
||||
firstName,i,array[i]->mName.data);
|
||||
firstName,i, name.c_str());
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -699,7 +697,7 @@ void ValidateDSProcess::Validate( const aiMaterial* pMaterial)
|
||||
if (prop->mDataLength < 5 || prop->mDataLength < 4 + (*reinterpret_cast<uint32_t*>(prop->mData)) + 1) {
|
||||
ReportError("aiMaterial::mProperties[%i].mDataLength is "
|
||||
"too small to contain a string (%i, needed: %i)",
|
||||
i,prop->mDataLength,sizeof(aiString));
|
||||
i,prop->mDataLength,static_cast<int>(sizeof(aiString)));
|
||||
}
|
||||
if(prop->mData[prop->mDataLength-1]) {
|
||||
ReportError("Missing null-terminator in string material property");
|
||||
@@ -710,14 +708,14 @@ void ValidateDSProcess::Validate( const aiMaterial* pMaterial)
|
||||
if (prop->mDataLength < sizeof(float)) {
|
||||
ReportError("aiMaterial::mProperties[%i].mDataLength is "
|
||||
"too small to contain a float (%i, needed: %i)",
|
||||
i,prop->mDataLength,sizeof(float));
|
||||
i,prop->mDataLength, static_cast<int>(sizeof(float)));
|
||||
}
|
||||
}
|
||||
else if (aiPTI_Integer == prop->mType) {
|
||||
if (prop->mDataLength < sizeof(int)) {
|
||||
ReportError("aiMaterial::mProperties[%i].mDataLength is "
|
||||
"too small to contain an integer (%i, needed: %i)",
|
||||
i,prop->mDataLength,sizeof(int));
|
||||
i,prop->mDataLength, static_cast<int>(sizeof(int)));
|
||||
}
|
||||
}
|
||||
// TODO: check whether there is a key with an unknown name ...
|
||||
@@ -955,7 +953,7 @@ void ValidateDSProcess::Validate( const aiString* pString)
|
||||
{
|
||||
if (pString->length > MAXLEN)
|
||||
{
|
||||
this->ReportError("aiString::length is too large (%i, maximum is %i)",
|
||||
this->ReportError("aiString::length is too large (%i, maximum is %lu)",
|
||||
pString->length,MAXLEN);
|
||||
}
|
||||
const char* sz = pString->data;
|
||||
|
||||
Reference in New Issue
Block a user