sc/source/core/tool/compiler.cxx | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit 07b18860ae03ecb66b5605201f34c2aef3a55ad6
Author: Eike Rathke <er...@redhat.com>
Date: Fri Aug 22 00:11:18 2014 +0200
out-of-bounds string access
... when parsing ='foo'# with no character following.
Change-Id: Id65fce721cb47a4d3c947c677323bdcaa2ce957f
diff --git a/sc/source/core/tool/compiler.cxx b/sc/source/core/tool/compiler.cxx
index 93d8f19..8c3e485 100644
--- a/sc/source/core/tool/compiler.cxx
+++ b/sc/source/core/tool/compiler.cxx
@@ -426,7 +426,7 @@ static bool lcl_isValidQuotedText( const OUString&
rFormula, sal_Int32 nSrcPos,
// but '' marks an escaped '
// We've earlier guaranteed that a string containing '' will be
// surrounded by '
- if (rFormula[nSrcPos] == '\'')
+ if (nSrcPos < rFormula.getLength() && rFormula[nSrcPos] == '\'')
{
sal_Int32 nPos = nSrcPos+1;
while (nPos < rFormula.getLength())
_______________________________________________
Libreoffice-commits mailing list
libreoffice-comm...@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-commits
