summaryrefslogtreecommitdiffstats
path: root/hwpfilter
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2022-03-19 14:39:30 +0000
committerCaolán McNamara <caolanm@redhat.com>2022-03-19 20:09:53 +0100
commitef37fa084e55aa13ecebcd0ebdbc7c2bca908c11 (patch)
tree8aeb6f470ec33213fbb4b9bee8a72c0ef051d4fd /hwpfilter
parentColibre: tdf#148029 Remove dark area in dark variant (diff)
downloadcore-ef37fa084e55aa13ecebcd0ebdbc7c2bca908c11.tar.gz
core-ef37fa084e55aa13ecebcd0ebdbc7c2bca908c11.zip
ofz: Null-dereference READ
Change-Id: Ie42af72e321bd55e3373aca33f0bcb6884bf8836 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/131849 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Diffstat (limited to 'hwpfilter')
-rw-r--r--hwpfilter/source/hwpreader.cxx2
1 files changed, 1 insertions, 1 deletions
diff --git a/hwpfilter/source/hwpreader.cxx b/hwpfilter/source/hwpreader.cxx
index 13e60e21590d..8c84970867ba 100644
--- a/hwpfilter/source/hwpreader.cxx
+++ b/hwpfilter/source/hwpreader.cxx
@@ -3570,7 +3570,7 @@ void HwpReader::makeFormula(TxtBox * hbox)
pPar = hbox->plists[0].empty() ? nullptr : hbox->plists[0].front().get();
while( pPar )
{
- for( n = 0; n < pPar->nch && pPar->hhstr[n]->hh;
+ for( n = 0; n < pPar->nch && pPar->hhstr.count(n) && pPar->hhstr[n]->hh;
n += pPar->hhstr[n]->WSize() )
{
if (l >= sizeof(mybuf)-7)