Blender Git Commits

crash fix at fracturing, customdata layer index handlng was incorrect

Fill stroke boundary must be included in strokes draw

If the option of boundary is Strokes, the special boundary strokes must be included as limits.

Several fixes after merge

Mainly due parameter list changes and rename of macros.

Merge branch 'blender2.8' into greasepencil-object

Conflicts:
source/blender/editors/gpencil/gpencil_paint.c
source/blender/editors/include/ED_gpencil.h
source/blender/editors/space_outliner/outliner_draw.c
source/blender/editors/space_view3d/view3d_draw_legacy.c

Fix T53832: Particle weight paint crash

Drawing hair weights read before the hair array start.
This code could be improved since it currently copy-pastes,
from do_particle_interpolation, but this would need larger changes.

For now just correct existing logic.

Fix T53823: Particle weight brush crash

Entering particle edit mode w/ the weight brush enabled crashed
on non-hair particle systems.

Fix memory leak in recent curve refactor

5b25605761fb7

Fix buffer overflow vulnerability in curve, font, particles code.

Solves these security issues from T52924:
CVE-2017-12102
CVE-2017-12103
CVE-2017-12104

While the specific overflow issue may be fixed, loading the repro .blend
files may still crash because they are incomplete and corrupt. The way
they crash may be impossible to exploit, but this is difficult to prove.

Differential Revision: https://developer.blender.org/D3002

Fix buffer overflow vulnerabilities in mesh code.

Solves these security issues from T52924:
CVE-2017-12081
CVE-2017-12082
CVE-2017-12086
CVE-2017-12099
CVE-2017-12100
CVE-2017-12101
CVE-2017-12105

While the specific overflow issue may be fixed, loading the repro .blend
files may still crash because they are incomplete and corrupt. The way
they crash may be impossible to exploit, but this is difficult to prove.

Differential Revision: https://developer.blender.org/D3002

Fix Linux/GCC compiler warning in recent fixes.

Fix buffer overflow vulernability in thumbnail file reading.

Fixes CVE-2017-2908 from T52924.

Differential Revision: https://developer.blender.org/D3001

Fix buffer overflows in TIFF, PNG, IRIS, DPX, HDR and AVI loading.

Solves these security issues from T52924:
CVE-2017-2899
CVE-2017-2900
CVE-2017-2901
CVE-2017-2902
CVE-2017-2903
CVE-2017-2904
CVE-2017-2905
CVE-2017-2906
CVE-2017-2907
CVE-2017-2918

Differential Revision: https://developer.blender.org/D2999

Memory: add MEM_malloc_arrayN() function to protect against overflow.

Differential Revision: https://developer.blender.org/D3002

Merge branch 'blender2.8' into greasepencil-object

Cleanup redundant parameters

Fix memory leak in recent curve refactor

5b25605761fb7

Merge branch 'blender2.8' into greasepencil-object

Conflicts:
source/blender/makesdna/DNA_scene_types.h

Fix problem with buffer when cursor outside camera view

Before, the stroke buffer was converted using the 3D cursor location, but if the camera moves and the cursor was on back of camera, the stroke buffer was not visible while painting.

Now, the conversion is done using the origin of the object and this avoid this problem.

Remove OPJ_DISABLE_TPSOT_FIX workaround

Own seek function was incorrect
(was using SEEK_CUR instead of SEEK_SET)

Merge branch 'master' into temp-openjpeg23