vcl/source/gdi/svmconverter.cxx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
New commits: commit 5885a5da36828434bc80c6dde0334f74f1de1195 Author: Caolán McNamara <caol...@redhat.com> Date: Thu Mar 16 16:07:28 2017 +0000 ofz: reject invalid fraction negative nYNum Change-Id: I9f86dba2408bdd1e2678c3165386cc99fd94a5a7 diff --git a/vcl/source/gdi/svmconverter.cxx b/vcl/source/gdi/svmconverter.cxx index 55e1faf5b7c1..edd844df4749 100644 --- a/vcl/source/gdi/svmconverter.cxx +++ b/vcl/source/gdi/svmconverter.cxx @@ -159,7 +159,7 @@ bool ImplReadMapMode(SvStream& rIStm, MapMode& rMapMode) sal_Int32 nXNum(0), nXDenom(0), nYNum(0), nYDenom(0); rIStm.ReadInt32(nXNum).ReadInt32(nXDenom).ReadInt32(nYNum).ReadInt32(nYDenom); - if (!rIStm.good() || nXDenom == 0 || nYDenom == 0) + if (!rIStm.good() || nXDenom == 0 || nYDenom == 0 || nYNum < 0) { SAL_WARN("vcl.gdi", "Parsing error: invalid mapmode fraction"); return false;
_______________________________________________ Libreoffice-commits mailing list libreoffice-comm...@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-commits