From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2,但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2,没有用 index 计算,可能把无效区域一起拷进去。 一旦 size 实际是 133(不是 266),就会直接越界,堆会被破坏,m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/Servo/CAttributeVector.cpp |   46 ++++++++++++++++++++++++++++++++++++++++++++--
 1 files changed, 44 insertions(+), 2 deletions(-)

diff --git a/SourceCode/Bond/Servo/CAttributeVector.cpp b/SourceCode/Bond/Servo/CAttributeVector.cpp
index 6d9213a..d7c52b7 100644
--- a/SourceCode/Bond/Servo/CAttributeVector.cpp
+++ b/SourceCode/Bond/Servo/CAttributeVector.cpp
@@ -1,5 +1,6 @@
 #include "stdafx.h"
 #include "CAttributeVector.h"
+#include <algorithm>
 
 
 namespace SERVO {
@@ -16,14 +17,43 @@
 		m_attributes.clear();
 	}
 
-	void CAttributeVector::addAttribute(CAttribute* pAttribute)
+	BOOL CAttributeVector::addAttribute(CAttribute* pAttribute, BOOL bReplace/* = FALSE*/)
 	{
+		if (!pAttribute) { 
+			return FALSE;
+		}
+
+		const std::string& name = pAttribute->getName();
+		if (name.empty()) { 
+			return FALSE;
+		}
+
+		if (bReplace) {
+			for (auto it = m_attributes.begin(); it != m_attributes.end(); ) {
+				if (name.compare((*it)->getName()) == 0) {
+					delete (*it);
+					it = m_attributes.erase(it);
+				}
+				else {
+					++it;
+				}
+			}
+		}
+
 		m_attributes.push_back(pAttribute);
+		return TRUE;
+	}
+
+	void CAttributeVector::addAttributeVector(CAttributeVector& av)
+	{
+		for (auto item : av.m_attributes) {
+			m_attributes.push_back(item);
+		}
 	}
 
 	unsigned int CAttributeVector::size()
 	{
-		return m_attributes.size();
+		return (unsigned int)m_attributes.size();
 	}
 
 	void CAttributeVector::clear()
@@ -32,6 +62,13 @@
 			delete item;
 		}
 		m_attributes.clear();
+	}
+
+	void CAttributeVector::sortWithWeight()
+	{
+		std::sort(m_attributes.begin(), m_attributes.end(), [](CAttribute* pAttribute1, CAttribute* pAttribut2) {
+			return pAttribute1->getWeight() < pAttribut2->getWeight();
+		});
 	}
 
 	bool CAttributeVector::empty()
@@ -44,4 +81,9 @@
 		ASSERT(index < m_attributes.size());
 		return m_attributes[index];
 	}
+
+	std::vector<CAttribute*>& CAttributeVector::getAttributes()
+	{
+		return m_attributes;
+	}
 }

--
Gitblit v1.9.3