From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2，但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2，没有用 index 计算，可能把无效区域一起拷进去。 一旦 size 实际是 133（不是 266），就会直接越界，堆会被破坏，m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/BondEq/Model.h |   16 +++++++++++-----
 1 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/SourceCode/Bond/BondEq/Model.h b/SourceCode/Bond/BondEq/Model.h
index 9a74296..58bb762 100644
--- a/SourceCode/Bond/BondEq/Model.h
+++ b/SourceCode/Bond/BondEq/Model.h
@@ -1,6 +1,8 @@
 #pragma once
-#include "Bonder.h"
+#include "CBonder.h"
 #include "Configuration.h"
+#include "CPanel.h"
+#include "GB2860SQLite.h"
 
 
 class CModel
@@ -15,9 +17,8 @@
 	int init();
 	int term();
 	void onTimer(UINT nTimerid);
-	int createRemoteEqs();
 	CBonder& getBonder();
-	BEQ::IRemoteEquipment* getBond1();
+	BEQ::IEquipment* getEquipment();
 
 public:
 	int notify(int code);
@@ -26,10 +27,15 @@
 	int notifyObjAndPtr(int code, IRxObject* pObj, void* ptr);
 	int notifyObjAndInt(int code, IRxObject* pObj1, IRxObject* pObj2, int exCode);
 	int notifyInt(int code, int exCode);
+	int notifyInt2(int code, int exCode, int exCode2);
+	int notifyDouble(int code, double dValue);
 	int notifyText(int code, const char* pszText);
 	int notifyPtrAndInt(int code, void* ptr1, void* ptr2, int exCode);
 	int notifyTextAndInt(int code, const char* pszText, int exCode);
 	int notifyMesMsg(int code, int stream, int function, const char* pszText);
+
+private:
+	int savePanel(CPanel* pPanel, CComponent* pComponent);
 
 public:
 	CConfiguration m_configuration;
@@ -43,8 +49,8 @@
 
 private:
 	CBonder m_bonder;
-	BEQ::IServo* m_pServo;
-	BEQ::IRemoteEquipment* m_pEqBond1;
+	BEQ::IEquipment* m_pEquipment;
 	int m_nTimerID;
+	CGB2860SQLite m_sqlite;
 };
 

--
Gitblit v1.9.3