summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2017-08-07 19:24:37 +0100
committerCaolán McNamara <caolanm@redhat.com>2017-08-25 19:37:40 +0200
commit35bac83ed2b5d48233c653cc7dc4eab5c234f7ac (patch)
tree340140bac6b74c5f20c774a29516c1a42fae52a0
parent969838675cfd42bdfc27ee12d796dece59c3d5a3 (diff)
ofz#2877: crash in SVTB16Short
sal_uInt16 wraparound Change-Id: Ifd791bdd5f1b96576fdd4ca6665bb972fb8b1e4c Reviewed-on: https://gerrit.libreoffice.org/40848 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Caolán McNamara <caolanm@redhat.com> Tested-by: Caolán McNamara <caolanm@redhat.com>
-rw-r--r--sw/source/filter/ww8/ww8scan.cxx2
1 files changed, 1 insertions, 1 deletions
diff --git a/sw/source/filter/ww8/ww8scan.cxx b/sw/source/filter/ww8/ww8scan.cxx
index 5d82f5d61706..726d2094c31f 100644
--- a/sw/source/filter/ww8/ww8scan.cxx
+++ b/sw/source/filter/ww8/ww8scan.cxx
@@ -3493,7 +3493,7 @@ bool WW8PLCFx_SEPX::Find4Sprms(sal_uInt16 nId1,sal_uInt16 nId2,sal_uInt16 nId3,s
bool bFound = false;
sal_uInt8* pSp = pSprms.get();
- sal_uInt16 i=0;
+ size_t i = 0;
while (i + maSprmParser.MinSprmLen() <= nSprmSiz)
{
// Sprm found?