From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2,但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2,没有用 index 计算,可能把无效区域一起拷进去。 一旦 size 实际是 133(不是 266),就会直接越界,堆会被破坏,m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/Servo/CRecipesManager.cpp |   24 +++++++++++++++++++++++-
 1 files changed, 23 insertions(+), 1 deletions(-)

diff --git a/SourceCode/Bond/Servo/CRecipesManager.cpp b/SourceCode/Bond/Servo/CRecipesManager.cpp
index 48ba9d1..98a17a2 100644
--- a/SourceCode/Bond/Servo/CRecipesManager.cpp
+++ b/SourceCode/Bond/Servo/CRecipesManager.cpp
@@ -232,7 +232,7 @@
 
 		// 找到对应CRecipeList, 找不到则返回NG
 		lock();
-		CRecipeList* pRecipeList = getRecipeListFromTemp(unitNo);
+		CRecipeList* pRecipeList = getRecipeList(unitNo);
 		if (pRecipeList == nullptr) {
 			unlock();
 			return MRLRC_NG;
@@ -262,6 +262,11 @@
 				lock();
 				m_nSyncStatus = SS_PARAMS_COMPLETE;
 				unlock();
+
+				if (m_onSyncingStateChanged != nullptr) {
+					m_onSyncingStateChanged(m_nSyncStatus);
+				}
+
 				return MRLRC_OK;
 			}
 
@@ -286,6 +291,23 @@
 		return iter->second;
 	}
 
+	bool CRecipesManager::saveRecipeList(int unitNo, std::string& strFilepath)
+	{
+		CRecipeList* pRecipeList = getRecipeList(unitNo);
+		if (pRecipeList == nullptr) return false;
+		return pRecipeList->serialize(strFilepath);
+	}
+
+	bool CRecipesManager::readRecipeList(int unitNo, std::string& strFilepath)
+	{
+		CRecipeList* pRecipeList = getRecipeList(unitNo);
+		if (pRecipeList == nullptr) {
+			pRecipeList = new CRecipeList();
+			m_mapRecipes[unitNo] = pRecipeList;
+		}
+		return pRecipeList->deserialize(strFilepath);
+	}
+
 	void CRecipesManager::setOnSyncingStateChanged(ONSYNCINGSTATECHANGED block)
 	{
 		m_onSyncingStateChanged = block;

--
Gitblit v1.9.3