From d3e76140637691ea6afe2aa0d73d1297f9ede0d8 Mon Sep 17 00:00:00 2001
From: Caolán McNamara <caolanm@redhat.com>
Date: Tue, 31 Jan 2017 09:23:09 +0000
Subject: ofz#502 negative index

Change-Id: I2eb3da9d378cd8fdace5ccd644f501f5119f6698
Reviewed-on: https://gerrit.libreoffice.org/33741
Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Michael Stahl <mstahl@redhat.com>
---
 vcl/source/gdi/svmconverter.cxx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'vcl')

diff --git a/vcl/source/gdi/svmconverter.cxx b/vcl/source/gdi/svmconverter.cxx
index 81e04b99abdf..12dec2d097f0 100644
--- a/vcl/source/gdi/svmconverter.cxx
+++ b/vcl/source/gdi/svmconverter.cxx
@@ -940,7 +940,7 @@ void SVMConverter::ImplConvertFromSVM1( SvStream& rIStm, GDIMetaFile& rMtf )
                                 // #106172# Add last DX array elem, if missing
                                 if( nAryLen != nStrLen )
                                 {
-                                    if( nAryLen+1 == nStrLen )
+                                    if (nAryLen+1 == nStrLen && nIndex >= 0)
                                     {
                                         std::unique_ptr<long[]> pTmpAry(new long[nStrLen]);
 
-- 
cgit