fix stack corruption

bad creation can set many (or all) points equal. Catch indices trying to write past the arrays size.
BRL-CAD · Aug 10, 2023 · 6a81a2a · 6a81a2a
1 parent 2e66983
commit 6a81a2a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/librt/primitives/arb8/arb8.c b/src/librt/primitives/arb8/arb8.c
@@ -255,6 +255,7 @@ rt_arb_get_cgtype(
  for (j = i + 1; j < 8; j++) {
  /* check if points are "equal" */
  if (VNEAR_EQUAL(arb->pt[i], arb->pt[j], tol->dist)) {
+ if (si >= 10) break; /* too many equal points - can't write past array size */
  svec[++si] = j;
  unique = 0;
  }