summaryrefslogtreecommitdiff
path: root/sw/source/filter/ww8
diff options
context:
space:
mode:
authorCaolán McNamara <caolanm@redhat.com>2013-09-11 09:32:11 +0100
committerMichael Stahl <mstahl@redhat.com>2013-09-11 17:47:15 +0000
commitc0cf51a499ec52b23443393b67425ab557328a9a (patch)
treec9aac089e253d4dcea0757fe2a6580bd338ddbbd /sw/source/filter/ww8
parent9c2b278f3d46e85697ae95ca54b4c552d964a33a (diff)
CID#736212 clip word 2 pap bounds
and add a unit test for the word 2..5 formats (cherry picked from commit 5d8a9d56de7c1217cfdbe2288c1a3a9128c3dbb5) Conflicts: sw/qa/core/filters-test.cxx Change-Id: I6c7c26be6092acbb81282080de6c393d92ad5dd4 Reviewed-on: https://gerrit.libreoffice.org/5912 Reviewed-by: Michael Stahl <mstahl@redhat.com> Tested-by: Michael Stahl <mstahl@redhat.com>
Diffstat (limited to 'sw/source/filter/ww8')
-rw-r--r--sw/source/filter/ww8/ww8scan.cxx10
1 files changed, 9 insertions, 1 deletions
diff --git a/sw/source/filter/ww8/ww8scan.cxx b/sw/source/filter/ww8/ww8scan.cxx
index e9ef6f85e0fe..3b0acb53e99c 100644
--- a/sw/source/filter/ww8/ww8scan.cxx
+++ b/sw/source/filter/ww8/ww8scan.cxx
@@ -2521,7 +2521,15 @@ WW8PLCFx_Fc_FKP::WW8Fkp::WW8Fkp(ww::WordVersion eVersion, SvStream* pSt,
{
aEntry.mnLen-=6; //PHE
//skipi stc, len byte + 6 byte PHE
- aEntry.mpData = maRawData + nOfs + 8;
+ unsigned int nOffset = nOfs + 8;
+ if (nOffset >= 511) //Bad offset
+ aEntry.mnLen=0;
+ if (aEntry.mnLen) //start is ok
+ {
+ if (nOffset + aEntry.mnLen > 512) //Bad end, clip
+ aEntry.mnLen = 512 - nOffset;
+ aEntry.mpData = maRawData + nOffset;
+ }
}
else
aEntry.mnLen=0; //Too short