diff options
| author | Eike Rathke <erack@redhat.com> | 2017-03-10 13:38:28 +0100 |
|---|---|---|
| committer | Eike Rathke <erack@redhat.com> | 2017-03-10 13:58:17 +0100 |
| commit | 77a8cf7eaf638276030d1c5be8705f5603f071a9 (patch) | |
| tree | 7e3cc36383bdec93656515748122a5b2e464c75f /svl | |
| parent | f50a3995c7b1ba31d68decfab4b2baf4f4df27df (diff) | |
string access out of bounds
Change-Id: I4f6e6e8e77cdabe593bca5719b6ef38aeecc5da7
Diffstat (limited to 'svl')
| -rw-r--r-- | svl/source/numbers/zformat.cxx | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/svl/source/numbers/zformat.cxx b/svl/source/numbers/zformat.cxx index 1de8ffcdc8df..91c36d43b25f 100644 --- a/svl/source/numbers/zformat.cxx +++ b/svl/source/numbers/zformat.cxx @@ -2838,9 +2838,13 @@ bool SvNumberformat::ImpGetFractionOutput(double fNumber, bRes |= ImpNumberFill(sDiv, fNumber, k, j, nIx, NF_SYMBOLTYPE_FRAC); if ( !bHideFraction && sDenominatorFormat.getLength() > 0 ) { + sal_Int32 nDenominatorLen = sDenominatorFormat.getLength(); while ( sDiv[0] == ' ' ) // left align denominator { - sDiv.insert( sDenominatorFormat.getLength(), " " ); + if (sDiv.getLength() <= nDenominatorLen) + sDiv.append(" "); + else + sDiv.insert( nDenominatorLen, " " ); sDiv.remove( 0, 1 ); } } |