diff options
| author | Caolán McNamara <caolanm@redhat.com> | 2019-07-20 15:06:13 +0100 |
|---|---|---|
| committer | Caolán McNamara <caolanm@redhat.com> | 2019-07-20 17:40:08 +0200 |
| commit | 70b11d8ee1c93d1a31746086b858216a7d1cca7a (patch) | |
| tree | bb7b9d911088aaede82e5476ba5e14d3bf5448ca /sc/source/filter | |
| parent | ecce69dc554429e42bf3fc67d75ac86cf2120714 (diff) | |
cid#1448265 Untrusted value as argument
Change-Id: I31280f417e3542bb7596bab798e971b714b5285f
Reviewed-on: https://gerrit.libreoffice.org/76002
Tested-by: Jenkins
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Tested-by: Caolán McNamara <caolanm@redhat.com>
Diffstat (limited to 'sc/source/filter')
| -rw-r--r-- | sc/source/filter/excel/excform8.cxx | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/sc/source/filter/excel/excform8.cxx b/sc/source/filter/excel/excform8.cxx index 7965c1a55c02..4ac2697093f0 100644 --- a/sc/source/filter/excel/excform8.cxx +++ b/sc/source/filter/excel/excform8.cxx @@ -1382,6 +1382,13 @@ void ExcelToSc8::ConvertExternName( std::unique_ptr<ScTokenArray>& rpArray, XclI nRow2 = rStrm.ReaduInt16(); nGrbitCol1 = rStrm.ReaduInt16(); nGrbitCol2 = rStrm.ReaduInt16(); + + if (nExtTab1 >= nTabCount || nExtTab2 >= nTabCount) + { + bError = true; + break; + } + ScSingleRefData& rR1 = aCRD.Ref1; ScSingleRefData& rR2 = aCRD.Ref2; |