diff options
Diffstat (limited to 'filter')
| -rw-r--r-- | filter/qa/cppunit/data/tiff/fail/crash-5.tiff | bin | 0 -> 252 bytes | |||
| -rw-r--r-- | filter/source/graphicfilter/itiff/itiff.cxx | 2 |
2 files changed, 2 insertions, 0 deletions
diff --git a/filter/qa/cppunit/data/tiff/fail/crash-5.tiff b/filter/qa/cppunit/data/tiff/fail/crash-5.tiff Binary files differnew file mode 100644 index 000000000000..4849edff238b --- /dev/null +++ b/filter/qa/cppunit/data/tiff/fail/crash-5.tiff diff --git a/filter/source/graphicfilter/itiff/itiff.cxx b/filter/source/graphicfilter/itiff/itiff.cxx index b18db6b9be3b..7a5d48793acd 100644 --- a/filter/source/graphicfilter/itiff/itiff.cxx +++ b/filter/source/graphicfilter/itiff/itiff.cxx @@ -669,6 +669,8 @@ bool TIFFReader::ReadMap() pTIFF->Seek(pStripOffsets[nStrip]); } nRowBytesLeft = nBytesPerRow; + if (np >= SAL_N_ELEMENTS(pMap)) + return false; pdst=pMap[ np ]; do { |