diff options
| author | Fridrich Štrba <fridrich.strba@bluewin.ch> | 2013-05-02 12:57:40 +0200 |
|---|---|---|
| committer | Fridrich Štrba <fridrich.strba@bluewin.ch> | 2013-05-02 12:58:06 +0200 |
| commit | 4314e6548356a5d2f1dc45e2aa501e37bd5a794e (patch) | |
| tree | 1f523d4ecf9f61a2e17c3e26b0af865cf655b93e /writerfilter/source/dmapper | |
| parent | ca8b63523885c89c694799622c319260346b00f6 (diff) | |
Fix out-of-bonds Sequence access in NumberingManager with page numbering
Change-Id: Ib35fcee1605215fb22ae9838b29fe1d8be5eaf58
Diffstat (limited to 'writerfilter/source/dmapper')
| -rw-r--r-- | writerfilter/source/dmapper/NumberingManager.cxx | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/writerfilter/source/dmapper/NumberingManager.cxx b/writerfilter/source/dmapper/NumberingManager.cxx index 9308d821cc88..3c6019de5e6a 100644 --- a/writerfilter/source/dmapper/NumberingManager.cxx +++ b/writerfilter/source/dmapper/NumberingManager.cxx @@ -527,7 +527,8 @@ uno::Sequence< uno::Sequence< beans::PropertyValue > > ListDef::GetPropertyValue // Merge the results of [2] in [1] sal_Int32 nThisCount = aThis.getLength( ); - for ( sal_Int32 i = 0; i < nThisCount; i++ ) + sal_Int32 nAbstractCount = aAbstract.getLength( ); + for ( sal_Int32 i = 0; i < nThisCount && i < nAbstractCount; i++ ) { uno::Sequence< beans::PropertyValue > level = aThis[i]; if ( level.hasElements() ) |