summaryrefslogtreecommitdiff
path: root/sw
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2014-10-15 10:45:30 +0100
committerCaolán McNamara <caolanm@redhat.com>2014-10-15 16:56:58 +0100
commite178c45a47c394fe50463aeee9e7996a7c03277f (patch)
tree0b8d2c8cbe1151e5b2589e0583fd24fac8084102 /sw
parent0fc5d67a84cc1d5881765d51fe14416686efe2d1 (diff)
coverity#1242692 Untrusted value as argument
Change-Id: If0019caa34168b758f23e88363b94e91f8bd4c8a
Diffstat (limited to 'sw')
-rw-r--r--sw/source/filter/ww8/ww8scan.cxx2
1 files changed, 2 insertions, 0 deletions
diff --git a/sw/source/filter/ww8/ww8scan.cxx b/sw/source/filter/ww8/ww8scan.cxx
index 7d889bff3d43..752c78e5badc 100644
--- a/sw/source/filter/ww8/ww8scan.cxx
+++ b/sw/source/filter/ww8/ww8scan.cxx
@@ -1570,6 +1570,8 @@ WW8PLCFpcd* WW8ScannerBase::OpenPieceTable( SvStream* pStr, const WW8Fib* pWwF )
return NULL; // gone wrong
if( 1 == clxt ) // clxtGrpprl ?
{
+ if (nLen > pStr->remainingSize())
+ return NULL;
sal_uInt8* p = new sal_uInt8[nLen+2]; // allocate
ShortToSVBT16(nLen, p); // trage Laenge ein
if (!checkRead(*pStr, p+2, nLen)) // read grpprl