Squashed commit of the following:

commit 6e551a9f7d7509f13f4dde8f2d6828b51cd2cbb7 Author: ureishi <[email protected]> Date: Sat Nov 9 15:54:20 2024 +0900 patch: add validation 同期データを加工して不正に頂点情報用のメモリを確保出来てしまう脆弱性に対する対応
ureishi · Nov 9, 2024 · 0f57717 · 0f57717
1 parent 851d08a
commit 0f57717
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/Assets/QvPen/Runtime/UdonAsset/SerializedUdonPrograms/1064dc79ec16c944793e0bfc45718c46.asset b/Assets/QvPen/Runtime/UdonAsset/SerializedUdonPrograms/1064dc79ec16c944793e0bfc45718c46.asset
diff --git a/Assets/QvPen/Runtime/UdonScript/QvPen_Pen.cs b/Assets/QvPen/Runtime/UdonScript/QvPen_Pen.cs
@@ -328,7 +328,7 @@ private int GetMode(Vector3[] data)
             => data.Length > 0 ? (int)GetData(data, FOOTER_ELEMENT_DATA_INFO).y : MODE_UNKNOWN;
 
         private int GetFooterLength(Vector3[] data)
-            => data.Length > 0 ? (int)GetData(data, FOOTER_ELEMENT_DATA_INFO).z : 0;
+            => data.Length > 0 ? Mathf.Clamp((int)GetData(data, FOOTER_ELEMENT_DATA_INFO).z, 0, data.Length) : 0;
 
         #endregion