From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2,但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2,没有用 index 计算,可能把无效区域一起拷进去。 一旦 size 实际是 133(不是 266),就会直接越界,堆会被破坏,m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/Servo/CCjPage1.h |   13 ++++---------
 1 files changed, 4 insertions(+), 9 deletions(-)

diff --git a/SourceCode/Bond/Servo/CCjPage1.h b/SourceCode/Bond/Servo/CCjPage1.h
index 168fe9c..3ee0c38 100644
--- a/SourceCode/Bond/Servo/CCjPage1.h
+++ b/SourceCode/Bond/Servo/CCjPage1.h
@@ -1,9 +1,10 @@
 锘�#pragma once
+#include "CCjPageBase.h"
 
 
 // CPjPage1 瀵硅瘽妗�
 
-class CCjPage1 : public CDialogEx
+class CCjPage1 : public CCjPageBase
 {
 	DECLARE_DYNAMIC(CCjPage1)
 
@@ -11,13 +12,9 @@
 	CCjPage1(CWnd* pParent = nullptr);   // 鏍囧噯鏋勯�犲嚱鏁�
 	virtual ~CCjPage1();
 
-private:
-	void Resize();
+protected:
+	virtual void Resize();
 
-private:
-	COLORREF m_crBkgnd;
-	COLORREF m_crBkgndCached;
-	CBrush m_brBkgnd;
 
 // 瀵硅瘽妗嗘暟鎹�
 #ifdef AFX_DESIGN_TIME
@@ -30,7 +27,5 @@
 	DECLARE_MESSAGE_MAP()
 public:
 	virtual BOOL OnInitDialog();
-	afx_msg HBRUSH OnCtlColor(CDC* pDC, CWnd* pWnd, UINT nCtlColor);
 	afx_msg void OnDestroy();
-	afx_msg void OnSize(UINT nType, int cx, int cy);
 };

--
Gitblit v1.9.3