summaryrefslogtreecommitdiff
path: root/filter
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2017-02-23 11:05:40 +0000
committerCaolán McNamara <caolanm@redhat.com>2017-02-23 11:07:02 +0000
commitee619fb344c7e8f491e09bd256df7f8567af9bef (patch)
treed83064e53798a0cd98418b6dcf1fceab8d628d0c /filter
parent46b1b5dd2a5368663fd56434160fa126f1a54d84 (diff)
ofz: don't read data that isn't there
Change-Id: I7fdcb78bde8f650c1a57d34177d8993a6d8a0a2f
Diffstat (limited to 'filter')
-rw-r--r--filter/source/graphicfilter/itiff/itiff.cxx6
1 files changed, 6 insertions, 0 deletions
diff --git a/filter/source/graphicfilter/itiff/itiff.cxx b/filter/source/graphicfilter/itiff/itiff.cxx
index 12aee89023e5..807756a561bd 100644
--- a/filter/source/graphicfilter/itiff/itiff.cxx
+++ b/filter/source/graphicfilter/itiff/itiff.cxx
@@ -995,6 +995,12 @@ bool TIFFReader::ConvertScanline(sal_Int32 nY)
{
sal_uInt32 nByteCount = nImageWidth >> 3;
+ sal_uInt32 nBytesNeeded = nByteCount;
+ if (nImageWidth & 7)
+ ++nBytesNeeded;
+ if (pt + nBytesNeeded > ptend)
+ return false;
+
if ( bByteSwap )
{
sal_Int32 nx = 0;