diff options
| author | Fridrich Štrba <fridrich.strba@bluewin.ch> | 2013-05-02 12:57:40 +0200 |
|---|---|---|
| committer | Petr Mladek <pmladek@suse.cz> | 2013-05-07 13:21:03 +0200 |
| commit | 2e8a941f57292c92e15314001ed70ad31435c7aa (patch) | |
| tree | 53a1bed76b1e35850022b76474783388f97359a6 /writerfilter | |
| parent | f187302463e76b4d253458d3fbbfafca1f9167de (diff) | |
Fix out-of-bonds Sequence access in NumberingManager with page numbering
Change-Id: Ib35fcee1605215fb22ae9838b29fe1d8be5eaf58
(cherry picked from commit 4314e6548356a5d2f1dc45e2aa501e37bd5a794e)
Reviewed-on: https://gerrit.libreoffice.org/3739
Reviewed-by: Bosdonnat Cedric <cedric.bosdonnat@free.fr>
Tested-by: Bosdonnat Cedric <cedric.bosdonnat@free.fr>
Diffstat (limited to 'writerfilter')
| -rw-r--r-- | writerfilter/source/dmapper/NumberingManager.cxx | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/writerfilter/source/dmapper/NumberingManager.cxx b/writerfilter/source/dmapper/NumberingManager.cxx index 470cb0cc485f..0cd91385dce3 100644 --- a/writerfilter/source/dmapper/NumberingManager.cxx +++ b/writerfilter/source/dmapper/NumberingManager.cxx @@ -492,7 +492,8 @@ uno::Sequence< uno::Sequence< beans::PropertyValue > > ListDef::GetPropertyValue // Merge the results of [2] in [1] sal_Int32 nThisCount = aThis.getLength( ); - for ( sal_Int32 i = 0; i < nThisCount; i++ ) + sal_Int32 nAbstractCount = aAbstract.getLength( ); + for ( sal_Int32 i = 0; i < nThisCount && i < nAbstractCount; i++ ) { uno::Sequence< beans::PropertyValue > level = aThis[i]; if ( level.hasElements() ) |