mirrors/raylib
1
0
Fork 0
mirror of https://github.com/raysan5/raylib.git synced 2025-09-28 05:58:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed bug with BoundingBox Lua constructor

Browse Source 
Fixed use-after-free in DestroyLight
This commit is contained in:
ghassanpl
2016-08-06 22:14:49 +02:00
parent 6f27941e28
commit 47b6e62744
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/rlgl.c
View File

@@ -2559,11 +2559,13 @@ void DestroyLight(Light light)
{
if (light != NULL)
{
int light_id = light->id;
// Free dynamic memory allocation
free(lights[light->id]);
free(lights[light_id]);
// Remove *obj from the pointers array
for (int i = light->id; i < lightsCount; i++)
for (int i = light_id; i < lightsCount; i++)
{
// Resort all the following pointers of the array
if ((i + 1) < lightsCount)
@@ -2571,7 +2573,6 @@ void DestroyLight(Light light)
lights[i] = lights[i + 1];
lights[i]->id = lights[i + 1]->id;
}
else free(lights[i]);
}
// Decrease enabled physic objects count

2
src/rlua.h
View File

@@ -768,7 +768,7 @@ static int lua_BoundingBox(lua_State* L)
{
Vector3 min = LuaGetArgument_Vector3(L, 1);
Vector3 max = LuaGetArgument_Vector3(L, 2);
LuaPush_BoundingBox(L, (BoundingBox) { { min.x, min.y }, { max.x, max.y } });
LuaPush_BoundingBox(L, (BoundingBox) { { min.x, min.y, min.z }, { max.x, max.y, max.z } });
return 1;
}