Blender Git Loki
Git Commits -> Revision e04d7c4
Revision e04d7c4 by Brecht Van Lommel (master) January 17, 2018, 23:54 (GMT) |
Fix buffer overflow vulnerabilities in mesh code. Solves these security issues from T52924: CVE-2017-12081 CVE-2017-12082 CVE-2017-12086 CVE-2017-12099 CVE-2017-12100 CVE-2017-12101 CVE-2017-12105 While the specific overflow issue may be fixed, loading the repro .blend files may still crash because they are incomplete and corrupt. The way they crash may be impossible to exploit, but this is difficult to prove. Differential Revision: https://developer.blender.org/D3002 |
Commit Details:
Full Hash: e04d7c49dca9dc7bbf1cbe446b612aaa5ba12581
Parent Commit: e0f2c7a
Lines Changed: +358, -343
44 Modified Paths:
/source/blender/blenkernel/intern/cdderivedmesh.c (+22, -22) (Diff)
/source/blender/blenkernel/intern/curve.c (+39, -39) (Diff)
/source/blender/blenkernel/intern/customdata.c (+15, -16) (Diff)
/source/blender/blenkernel/intern/customdata_file.c (+6, -2) (Diff)
/source/blender/blenkernel/intern/DerivedMesh.c (+31, -32) (Diff)
/source/blender/blenkernel/intern/font.c (+10, -10) (Diff)
/source/blender/blenkernel/intern/mesh.c (+13, -13) (Diff)
/source/blender/blenkernel/intern/mesh_evaluate.c (+34, -25) (Diff)
/source/blender/blenkernel/intern/multires.c (+35, -31) (Diff)
/source/blender/blenloader/intern/readfile.c (+9, -9) (Diff)
/source/blender/blenloader/intern/versioning_250.c (+1, -1) (Diff)
/source/blender/blenloader/intern/versioning_legacy.c (+1, -1) (Diff)
/source/blender/editors/space_view3d/drawobject.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_array.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_boolean.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_build.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_collision.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_correctivesmooth.c (+9, -9) (Diff)
/source/blender/modifiers/intern/MOD_decimate.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_displace.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_explode.c (+5, -5) (Diff)
/source/blender/modifiers/intern/MOD_fluidsim_util.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_laplaciandeform.c (+14, -14) (Diff)
/source/blender/modifiers/intern/MOD_laplaciansmooth.c (+8, -8) (Diff)
/source/blender/modifiers/intern/MOD_mask.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_meshcache.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_meshdeform.c (+4, -4) (Diff)
/source/blender/modifiers/intern/MOD_mirror.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_normal_edit.c (+6, -6) (Diff)
/source/blender/modifiers/intern/MOD_particleinstance.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_screw.c (+4, -4) (Diff)
/source/blender/modifiers/intern/MOD_skin.c (+6, -6) (Diff)
/source/blender/modifiers/intern/MOD_smooth.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_solidify.c (+13, -13) (Diff)
/source/blender/modifiers/intern/MOD_surface.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_surfacedeform.c (+17, -17) (Diff)
/source/blender/modifiers/intern/MOD_util.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_uvproject.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_warp.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_wave.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_weightvgedit.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_weightvgmix.c (+8, -8) (Diff)
/source/blender/modifiers/intern/MOD_weightvgproximity.c (+12, -12) (Diff)
/source/blender/modifiers/intern/MOD_weightvg_util.c (+2, -2) (Diff)
/source/blender/blenkernel/intern/curve.c (+39, -39) (Diff)
/source/blender/blenkernel/intern/customdata.c (+15, -16) (Diff)
/source/blender/blenkernel/intern/customdata_file.c (+6, -2) (Diff)
/source/blender/blenkernel/intern/DerivedMesh.c (+31, -32) (Diff)
/source/blender/blenkernel/intern/font.c (+10, -10) (Diff)
/source/blender/blenkernel/intern/mesh.c (+13, -13) (Diff)
/source/blender/blenkernel/intern/mesh_evaluate.c (+34, -25) (Diff)
/source/blender/blenkernel/intern/multires.c (+35, -31) (Diff)
/source/blender/blenloader/intern/readfile.c (+9, -9) (Diff)
/source/blender/blenloader/intern/versioning_250.c (+1, -1) (Diff)
/source/blender/blenloader/intern/versioning_legacy.c (+1, -1) (Diff)
/source/blender/editors/space_view3d/drawobject.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_array.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_boolean.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_build.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_collision.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_correctivesmooth.c (+9, -9) (Diff)
/source/blender/modifiers/intern/MOD_decimate.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_displace.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_explode.c (+5, -5) (Diff)
/source/blender/modifiers/intern/MOD_fluidsim_util.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_laplaciandeform.c (+14, -14) (Diff)
/source/blender/modifiers/intern/MOD_laplaciansmooth.c (+8, -8) (Diff)
/source/blender/modifiers/intern/MOD_mask.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_meshcache.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_meshdeform.c (+4, -4) (Diff)
/source/blender/modifiers/intern/MOD_mirror.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_normal_edit.c (+6, -6) (Diff)
/source/blender/modifiers/intern/MOD_particleinstance.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_screw.c (+4, -4) (Diff)
/source/blender/modifiers/intern/MOD_skin.c (+6, -6) (Diff)
/source/blender/modifiers/intern/MOD_smooth.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_solidify.c (+13, -13) (Diff)
/source/blender/modifiers/intern/MOD_surface.c (+2, -2) (Diff)
/source/blender/modifiers/intern/MOD_surfacedeform.c (+17, -17) (Diff)
/source/blender/modifiers/intern/MOD_util.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_uvproject.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_warp.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_wave.c (+1, -1) (Diff)
/source/blender/modifiers/intern/MOD_weightvgedit.c (+3, -3) (Diff)
/source/blender/modifiers/intern/MOD_weightvgmix.c (+8, -8) (Diff)
/source/blender/modifiers/intern/MOD_weightvgproximity.c (+12, -12) (Diff)
/source/blender/modifiers/intern/MOD_weightvg_util.c (+2, -2) (Diff)