diff options
| author | Caolán McNamara <caolanm@redhat.com> | 2022-01-26 11:57:13 +0000 |
|---|---|---|
| committer | Aron Budea <aron.budea@collabora.com> | 2022-08-10 22:42:56 +0200 |
| commit | 3d8222a5adc873e3ae40a1693896b75ebb3c88b8 (patch) | |
| tree | ecc21758c3b3d8a73d054e58cebb9f24abcd65ef /lotuswordpro | |
| parent | ofz: Use-of-uninitialized-value (diff) | |
| download | core-3d8222a5adc873e3ae40a1693896b75ebb3c88b8.tar.gz core-3d8222a5adc873e3ae40a1693896b75ebb3c88b8.zip | |
ofz#44080 throw exception on a negative length
Change-Id: I3e2286cea69908fae3a2dd177d10fca2b7f0c877
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/128956
Tested-by: Jenkins
Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
(cherry picked from commit af8709defeb90464c8724d3fe5fb8cbbf6efc2b8)
Diffstat (limited to 'lotuswordpro')
| -rw-r--r-- | lotuswordpro/source/filter/lwpdrawobj.cxx | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/lotuswordpro/source/filter/lwpdrawobj.cxx b/lotuswordpro/source/filter/lwpdrawobj.cxx index 4ffffb2fa536..a3fd862766d0 100644 --- a/lotuswordpro/source/filter/lwpdrawobj.cxx +++ b/lotuswordpro/source/filter/lwpdrawobj.cxx @@ -1090,6 +1090,9 @@ XFFrame* LwpDrawTextBox::CreateDrawObj(const OUString& rStyleName ) aEncoding = LwpCharSetMgr::GetTextCharEncoding(); } + if (TextLength < 2) + throw BadRead(); + XFParagraph* pXFPara = new XFParagraph(); pXFPara->Add(OUString(reinterpret_cast<char*>(m_aTextRec.pTextString), (TextLength-2), aEncoding)); pXFPara->SetStyleName(rStyleName); |