summaryrefslogtreecommitdiff
path: root/sw
diff options
context:
space:
mode:
authorMichael Stahl <mstahl@redhat.com>2013-02-27 22:24:36 +0100
committerMichael Stahl <mstahl@redhat.com>2013-02-28 14:02:33 +0100
commit0d4ee442f170eee4c35b9a1b1cb596f71d256b1e (patch)
tree8b42d4616b4f6b90f6f803abebeb60587da19cd0 /sw
parentb440cfcc548f3e9c74001c1e692b35ff272c409a (diff)
fdo#61309: writerfilter: filter out enormous numbering levels
Change-Id: Iafef1c2ca2ca072bd604946fbe19b6a24e323512
Diffstat (limited to 'sw')
-rw-r--r--sw/source/core/unocore/unoobj.cxx5
1 files changed, 5 insertions, 0 deletions
diff --git a/sw/source/core/unocore/unoobj.cxx b/sw/source/core/unocore/unoobj.cxx
index 8fd8e382e81b..f7762ab13dac 100644
--- a/sw/source/core/unocore/unoobj.cxx
+++ b/sw/source/core/unocore/unoobj.cxx
@@ -535,6 +535,11 @@ throw (lang::IllegalArgumentException)
sal_Int16 nLevel = 0;
if (rValue >>= nLevel)
{
+ if (nLevel < 0 || MAXLEVEL <= nLevel)
+ {
+ throw lang::IllegalArgumentException(
+ "invalid NumberingLevel", 0, 0);
+ }
pTxtNd->SetAttrListLevel(nLevel);
}
}