From 914a35e8467252da43f864c86b0a820d8c0bd38e Mon Sep 17 00:00:00 2001
From: Caolán McNamara <caolanm@redhat.com>
Date: Sun, 4 Feb 2018 20:45:30 +0000
Subject: ofz#4949 Integer-overflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Change-Id: Ib8928108c987989ab849e8d7e1a85078f6d93050
Reviewed-on: https://gerrit.libreoffice.org/49216
Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Tested-by: Caolán McNamara <caolanm@redhat.com>
---
 svx/source/table/tablelayouter.cxx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'svx')

diff --git a/svx/source/table/tablelayouter.cxx b/svx/source/table/tablelayouter.cxx
index 9a31f56288cc..9bca986844c3 100644
--- a/svx/source/table/tablelayouter.cxx
+++ b/svx/source/table/tablelayouter.cxx
@@ -798,7 +798,7 @@ void TableLayouter::LayoutTableHeight( tools::Rectangle& rArea, bool bFit )
 
     // now scale if wanted and needed
     if( bFit && nCurrentHeight != rArea.getHeight() )
-        distribute( maRows, rArea.getHeight() - nCurrentHeight );
+        distribute(maRows, o3tl::saturating_sub<sal_Int32>(rArea.getHeight(), nCurrentHeight));
 
     // last step, update left edges
     sal_Int32 nNewHeight = 0;
-- 
cgit