diff options
author | Caolán McNamara <caolanm@redhat.com> | 2014-10-15 10:45:30 +0100 |
---|---|---|
committer | Caolán McNamara <caolanm@redhat.com> | 2014-10-15 16:56:58 +0100 |
commit | e178c45a47c394fe50463aeee9e7996a7c03277f (patch) | |
tree | 0b8d2c8cbe1151e5b2589e0583fd24fac8084102 /sw | |
parent | 0fc5d67a84cc1d5881765d51fe14416686efe2d1 (diff) |
coverity#1242692 Untrusted value as argument
Change-Id: If0019caa34168b758f23e88363b94e91f8bd4c8a
Diffstat (limited to 'sw')
-rw-r--r-- | sw/source/filter/ww8/ww8scan.cxx | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sw/source/filter/ww8/ww8scan.cxx b/sw/source/filter/ww8/ww8scan.cxx index 7d889bff3d43..752c78e5badc 100644 --- a/sw/source/filter/ww8/ww8scan.cxx +++ b/sw/source/filter/ww8/ww8scan.cxx @@ -1570,6 +1570,8 @@ WW8PLCFpcd* WW8ScannerBase::OpenPieceTable( SvStream* pStr, const WW8Fib* pWwF ) return NULL; // gone wrong if( 1 == clxt ) // clxtGrpprl ? { + if (nLen > pStr->remainingSize()) + return NULL; sal_uInt8* p = new sal_uInt8[nLen+2]; // allocate ShortToSVBT16(nLen, p); // trage Laenge ein if (!checkRead(*pStr, p+2, nLen)) // read grpprl |