Luke Ingram 49c338f6cf [c] Fix heap-buffer-overflow in _readVertices for weighted vertices. ...

The original code allocated vertex/bone buffers using hardcoded multipliers
that assumed a maximum of ~3 bones per vertex. Skeletons with vertices
exceeding this limit caused a heap-buffer-overflow, corrupting adjacent
heap metadata and crashing on subsequent loads.

Fix uses a two-pass approach: first scan the binary data to compute exact
buffer sizes needed, then rewind and read. This produces exact-fit
allocations with zero waste.

Fixes #2992

2026-02-17 12:49:27 -04:00

..

include/spine

License header update

2025-05-26 13:24:06 +02:00

src/spine

[c] Fix heap-buffer-overflow in _readVertices for weighted vertices.

2026-02-17 12:49:27 -04:00