From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2,但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2,没有用 index 计算,可能把无效区域一起拷进去。 一旦 size 实际是 133(不是 266),就会直接越界,堆会被破坏,m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/Servo/CJobDataA.cpp |   18 ++++++++++++++----
 1 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/SourceCode/Bond/Servo/CJobDataA.cpp b/SourceCode/Bond/Servo/CJobDataA.cpp
index 03d90ff..4a1e3f3 100644
--- a/SourceCode/Bond/Servo/CJobDataA.cpp
+++ b/SourceCode/Bond/Servo/CJobDataA.cpp
@@ -6,12 +6,22 @@
 namespace SERVO {
 	CJobDataA::CJobDataA()
 	{
-
+		m_pOwner = nullptr;
 	}
 
 	CJobDataA::~CJobDataA()
 	{
 
+	}
+
+	void* CJobDataA::getOwner()
+	{
+		return m_pOwner;
+	}
+
+	void CJobDataA::setOwner(void* pOwner)
+	{
+		m_pOwner = pOwner;
 	}
 
 	short CJobDataA::getPortNo()
@@ -37,11 +47,11 @@
 		memcpy(&pszBuffer[index], &m_nPortNo, sizeof(short));
 		index += sizeof(short);
 
-		int strLen = min(20, m_strCarrierId.size());
+		int strLen = min(20, (int)m_strCarrierId.size());
 		memcpy(&pszBuffer[index], m_strCarrierId.c_str(), strLen);
 		index += 20;
 
-		strLen = min(20, m_pruductId.size());
+		strLen = min(20, (int)m_pruductId.size());
 		memcpy(&pszBuffer[index], m_pruductId.c_str(), strLen);
 		index += 20;
 
@@ -56,7 +66,7 @@
 
 		for (int i = 0; i < min(25, m_glassIds.size()); i++) {
 			std::string& strGlassId = m_glassIds.at(i);
-			strLen = min(20, strGlassId.size());
+			strLen = min(20, (int)strGlassId.size());
 			memcpy(&pszBuffer[index], strGlassId.c_str(), strLen);
 			index += 20;
 		}

--
Gitblit v1.9.3