Merge pull request #115931 from cdemirer/fix-uaf-animation-tree

Fix use-after-free in AnimationTree (AHashMap realloc)
This commit is contained in:
Thaddeus Crews 2026-02-06 08:17:54 -06:00
commit 24ae6c89be
No known key found for this signature in database
GPG key ID: 8C6E5FEB5FC03CCC

View file

@ -739,7 +739,8 @@ void AnimationTree::_animation_node_renamed(const ObjectID &p_oid, const String
for (const PropertyInfo &E : properties) {
if (E.name.begins_with(old_base)) {
String new_name = E.name.replace_first(old_base, new_base);
property_map[new_name] = property_map[E.name];
const Pair<Variant, bool> temp_copy = property_map[E.name];
property_map[new_name] = temp_copy;
property_map.erase(E.name);
}
}