filter/source/graphicfilter/ios2met/ios2met.cxx | 2 ++
1 file changed, 2 insertions(+)
New commits:
commit 0a3380ae54e9c33aa4773c6d9878b99b9636dabf
Author: Caolán McNamara <caol...@redhat.com>
Date: Sun Jan 7 20:27:27 2018 +0000
ofz: fail early
Change-Id: I86790efea5ad4a12578477301959704fb09d67b6
diff --git a/filter/source/graphicfilter/ios2met/ios2met.cxx
b/filter/source/graphicfilter/ios2met/ios2met.cxx
index b737ac664d14..faf82a7569ed 100644
--- a/filter/source/graphicfilter/ios2met/ios2met.cxx
+++ b/filter/source/graphicfilter/ios2met/ios2met.cxx
@@ -887,6 +887,8 @@ void OS2METReader::ReadRelLine(bool bGivenPos, sal_uInt16
nOrderLen)
if (bCoord32) nOrderLen-=8; else nOrderLen-=4;
}
else aP0=aAttr.aCurPos;
+ if (nOrderLen > pOS2MET->remainingSize())
+ throw css::uno::Exception("attempt to read past end of input",
nullptr);
nPolySize=nOrderLen/2;
if (nPolySize==0) return;
tools::Polygon aPolygon(nPolySize);
_______________________________________________
Libreoffice-commits mailing list
libreoffice-comm...@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-commits
