From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2,但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2,没有用 index 计算,可能把无效区域一起拷进去。 一旦 size 实际是 133(不是 266),就会直接越界,堆会被破坏,m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/Servo/CEquipmentPage1.cpp |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/SourceCode/Bond/Servo/CEquipmentPage1.cpp b/SourceCode/Bond/Servo/CEquipmentPage1.cpp
index 56c8cbd..684c23b 100644
--- a/SourceCode/Bond/Servo/CEquipmentPage1.cpp
+++ b/SourceCode/Bond/Servo/CEquipmentPage1.cpp
@@ -180,7 +180,7 @@
 
 	for (int nRow = 0; nRow < SIGNAL_GRID_ROWS; ++nRow) {
 		for (int nCol = 0; nCol < SIGNAL_GRID_COLS; ++nCol) {
-			BOOL bCurrentState = m_pEquipment->isLinkSignalOn(nRow, nCol);
+			BOOL bCurrentState = m_pEquipment->isLinkSignalUpstreamOn(nRow, nCol);
 			UpdateSignalState(nRow, nCol, bCurrentState);
 		}
 	}
@@ -210,8 +210,8 @@
 		int index = nRow * SIGNAL_GRID_COLS + nCol;
 		if (index >= 0 && index < (int)m_vSignalList.size() && m_vSignalList[index].bClickable && m_pEquipment != nullptr) {
 			// 璇诲彇褰撳墠鐘舵�佸苟鍒囨崲
-			const BOOL bCurrentState = m_pEquipment->isLinkSignalOn(nRow, nCol);
-			m_pEquipment->setLinkSignal(nRow, nCol, !bCurrentState);
+			const BOOL bCurrentState = m_pEquipment->isLinkSignalUpstreamOn(nRow, nCol);
+			m_pEquipment->setLinkSignalUpstream(nRow, nCol, !bCurrentState);
 		}
 	});
 

--
Gitblit v1.9.3