lotuswordpro/source/filter/lwpsilverbullet.cxx | 3 +++ 1 file changed, 3 insertions(+)
New commits: commit 36d55980b1b3498fecc460d3c46667e5f5a17b8e Author: Caolán McNamara <caol...@redhat.com> Date: Wed Dec 9 12:09:37 2015 +0000 guard against corrupt SilverBullet Change-Id: I3af47ab3af5e28a865a77a592f6a92edb46e4f2b diff --git a/lotuswordpro/source/filter/lwpsilverbullet.cxx b/lotuswordpro/source/filter/lwpsilverbullet.cxx index cb0a532..01a9253 100644 --- a/lotuswordpro/source/filter/lwpsilverbullet.cxx +++ b/lotuswordpro/source/filter/lwpsilverbullet.cxx @@ -94,6 +94,9 @@ void LwpSilverBullet::Read() sal_uInt16 nNumPos = m_pObjStrm->QuickReaduInt16(); + if (nNumPos > SAL_N_ELEMENTS(m_pResetPositionFlags)) + throw std::range_error("corrupt SilverBullet"); + for (sal_uInt16 nC = 0; nC < nNumPos; nC++) m_pResetPositionFlags[nC] = m_pObjStrm->QuickReaduInt8();
_______________________________________________ Libreoffice-commits mailing list libreoffice-comm...@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice-commits