summaryrefslogtreecommitdiff
path: root/filter/source/graphicfilter
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2015-07-20 08:50:27 +0100
committerAndras Timar <andras.timar@collabora.com>2015-08-03 17:51:33 +0200
commit96d15e571900772bfffcaaa1684dc45edff73e5a (patch)
tree96bce96dda82551f69c079b75f9ccf9433d35a2c /filter/source/graphicfilter
parent63a0c988ab44a4d54c8b733dd8728571581f7da4 (diff)
check np bounds yet again
Change-Id: Id3f6fdc0ebed9711acec5d71f404e7a6072b765c (cherry picked from commit bca4d6f896fb12ceff37476c43ea8892898dd385) Reviewed-on: https://gerrit.libreoffice.org/17208 Reviewed-by: Michael Meeks <michael.meeks@collabora.com> Tested-by: Michael Meeks <michael.meeks@collabora.com>
Diffstat (limited to 'filter/source/graphicfilter')
-rw-r--r--filter/source/graphicfilter/itiff/itiff.cxx2
1 files changed, 2 insertions, 0 deletions
diff --git a/filter/source/graphicfilter/itiff/itiff.cxx b/filter/source/graphicfilter/itiff/itiff.cxx
index 20d37687e4b0..69067c5b44e3 100644
--- a/filter/source/graphicfilter/itiff/itiff.cxx
+++ b/filter/source/graphicfilter/itiff/itiff.cxx
@@ -682,6 +682,8 @@ bool TIFFReader::ReadMap( sal_uLong nMinPercent, sal_uLong nMaxPercent )
pTIFF->Seek(pStripOffsets[nStrip]);
}
nRowBytesLeft = nBytesPerRow;
+ if (np >= SAL_N_ELEMENTS(pMap))
+ return false;
pdst=pMap[ np ];
do
{