mirror of
https://github.com/CalcProgrammer1/OpenRGB.git
synced 2026-09-13 05:39:07 -04:00
NetworkServer: reject SDK index == element count (off-by-one)
The SDK LED/zone update handlers checked the client-supplied index with '>' instead of '>=', so an index equal to the element count passed the check and reached an out-of-bounds access: - UpdateSingleLED: out-of-bounds write to colors[led_idx] - UpdateZoneLEDs / UpdateZoneMode: out-of-bounds read/write on zones[zone_idx] UpdateMode had the same off-by-one (currently harmless due to a later check), fixed for consistency. The num_colors check stays '>' since num_colors == leds_count is a valid "all LEDs" request.
This commit is contained in:
500 Internal Server Error
Gitea Version: 1.28.0+dev-477-g8b6ad49a5f