summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2017-05-15 12:55:05 +0100
committerCaolán McNamara <caolanm@redhat.com>2017-05-15 12:56:42 +0100
commit81c36caa943691417b12677826b9b108bad098d5 (patch)
tree2a5e2dff53ed18a664798b9cb852c4f93eccd2e0
parentf566e2d579f5385b01d9b124e7055721313325c9 (diff)
ofz#1612 avoid oom
Change-Id: I2e327ea449dad8ec88963b6b9429e478a3332e22
-rw-r--r--vcl/source/filter/wmf/enhwmf.cxx2
1 files changed, 2 insertions, 0 deletions
diff --git a/vcl/source/filter/wmf/enhwmf.cxx b/vcl/source/filter/wmf/enhwmf.cxx
index b55e969dbea5..22125d747dbe 100644
--- a/vcl/source/filter/wmf/enhwmf.cxx
+++ b/vcl/source/filter/wmf/enhwmf.cxx
@@ -545,6 +545,8 @@ void EnhWMFReader::ReadAndDrawPolyLine()
pWMF->SeekRel( 0x10 ); // TODO Skipping Bounds. A 128-bit WMF RectL object (specifies the bounding rectangle in device units.)
pWMF->ReadUInt32( nNumberOfPolylines );
pWMF->ReadUInt32( nCount ); // total number of points in all polylines
+ if (pWMF->Tell() >= nEndPos)
+ return;
// taking the amount of points of each polygon, retrieving the total number of points
if ( pWMF->good() &&