diff options
| author | Caolán McNamara <caolanm@redhat.com> | 2021-09-02 08:49:56 +0100 |
|---|---|---|
| committer | Caolán McNamara <caolanm@redhat.com> | 2021-09-02 21:16:08 +0200 |
| commit | bd8e2365937f0dc58563a3a09c15078b94cd4f5c (patch) | |
| tree | 0ffd848b504b94308d453cb8b6604a344624bb41 /filter | |
| parent | d98aae68810a77df399decbe09ba70f99fdb7344 (diff) | |
do the same check on the same code pattern as was done earlier
in this same function
Change-Id: I03a112e3e57549ec776e99a460544b575476528d
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/121496
Tested-by: Jenkins
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Diffstat (limited to 'filter')
| -rw-r--r-- | filter/source/msfilter/svdfppt.cxx | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/filter/source/msfilter/svdfppt.cxx b/filter/source/msfilter/svdfppt.cxx index 61e020a2987e..a2ce30270283 100644 --- a/filter/source/msfilter/svdfppt.cxx +++ b/filter/source/msfilter/svdfppt.cxx @@ -4051,6 +4051,8 @@ void PPTParaSheet::Read( SdrPowerPointImport const & sal_uInt32 nVal32; // number of tabulators rIn.ReadUInt16( nVal16 ); + if (!rIn.good() || rIn.remainingSize() / sizeof(nVal32) < nVal16) + return; for (sal_uInt16 i = 0; i < nVal16; ++i) rIn.ReadUInt32( nVal32 ); // reading the tabulators } |