src/lib/CDRTypes.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
New commits: commit fd3624be0ba589a2567dbd8e6599e8434400bc83 Author: Caolán McNamara <[email protected]> AuthorDate: Sat May 23 18:23:05 2026 +0000 Commit: Caolán McNamara <[email protected]> CommitDate: Sat May 23 20:28:03 2026 +0200 fix past-the-end read in CDRSplineData::create since: commit 1307f57003e90d3fd642f3a1057898b19c74f179 Date: Wed Mar 7 14:09:30 2012 +0100 Try to emulate the loda 0x26 Change-Id: Idf1f67f4daa31729d581422a6ec3dddd56168a47 Reviewed-on: https://gerrit.libreoffice.org/c/libcdr/+/205590 Reviewed-by: Caolán McNamara <[email protected]> Tested-by: Caolán McNamara <[email protected]> diff --git a/src/lib/CDRTypes.cpp b/src/lib/CDRTypes.cpp index 6d61465..dc31d3c 100644 --- a/src/lib/CDRTypes.cpp +++ b/src/lib/CDRTypes.cpp @@ -67,7 +67,7 @@ void libcdr::CDRSplineData::create(libcdr::CDRPath &path) const path.appendLineTo(tmpPoints[1].first, tmpPoints[1].second); else if (tmpPoints.size() == 3) path.appendQuadraticBezierTo(tmpPoints[1].first, tmpPoints[1].second, - tmpPoints[2].first, tmpPoints[3].second); + tmpPoints[2].first, tmpPoints[2].second); else path.appendSplineTo(tmpPoints); tmpPoints.clear(); @@ -78,7 +78,7 @@ void libcdr::CDRSplineData::create(libcdr::CDRPath &path) const path.appendLineTo(tmpPoints[1].first, tmpPoints[1].second); else if (tmpPoints.size() == 3) path.appendQuadraticBezierTo(tmpPoints[1].first, tmpPoints[1].second, - tmpPoints[2].first, tmpPoints[3].second); + tmpPoints[2].first, tmpPoints[2].second); else if (tmpPoints.size() > 3) path.appendSplineTo(tmpPoints); }
