diff options
| author | Markus Mohrhard <markus.mohrhard@googlemail.com> | 2014-08-03 22:47:27 +0200 |
|---|---|---|
| committer | Michael Stahl <mstahl@redhat.com> | 2014-08-04 12:11:02 +0000 |
| commit | 955c5539a1ea5e971f111989d6c5bec11d936416 (patch) | |
| tree | 7ee1dd84c42f43969ef39360656ee68bb50e68bd | |
| parent | Delete RID_XMLSECTP_MACROWARN dialog (diff) | |
| download | core-955c5539a1ea5e971f111989d6c5bec11d936416.tar.gz core-955c5539a1ea5e971f111989d6c5bec11d936416.zip | |
avoid buffer overflow by using wrong buffer
Found by Asan.
(regression from CWS mba34issues01)
Change-Id: Ia7159c9bed9d7f823448acd02e18568a5f3f2093
Reviewed-on: https://gerrit.libreoffice.org/10717
Reviewed-by: Michael Stahl <mstahl@redhat.com>
Tested-by: Michael Stahl <mstahl@redhat.com>
| -rw-r--r-- | sfx2/source/appl/appuno.cxx | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sfx2/source/appl/appuno.cxx b/sfx2/source/appl/appuno.cxx index 8f44b07b88f9..a16ab3e4e670 100644 --- a/sfx2/source/appl/appuno.cxx +++ b/sfx2/source/appl/appuno.cxx @@ -972,7 +972,7 @@ void TransformItems( sal_uInt16 nSlotId, const SfxItemSet& rSet, uno::Sequence<b for ( sal_uInt16 nArg=0; nArg<nFormalArgs; ++nArg ) { // check every formal argument of the method - const SfxFormalArgument &rArg = pSlot->GetFormalArgument( nArg ); + const SfxFormalArgument &rArg = bIsMediaDescriptor ? aFormalArgs[nArg] : pSlot->GetFormalArgument( nArg ); sal_uInt16 nWhich = rSet.GetPool()->GetWhich( rArg.nSlotId ); if ( rSet.GetItemState( nWhich ) == SFX_ITEM_SET ) //??? |