connectivity/source/drivers/dbase/DTable.cxx |    7 +++++++
 1 file changed, 7 insertions(+)

New commits:
commit 524ec386b2438fbcda42a1264ad372285a91be7f
Author:     Caolán McNamara <caolan.mcnam...@collabora.com>
AuthorDate: Sat Jul 13 20:05:08 2024 +0100
Commit:     Caolán McNamara <caolan.mcnam...@collabora.com>
CommitDate: Sun Jul 14 15:14:42 2024 +0200

    cid#1608516 Overflowed constant
    
    Change-Id: I0d494f512a45e93933fdb03f64238f12ed2570a2
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/170440
    Reviewed-by: Caolán McNamara <caolan.mcnam...@collabora.com>
    Tested-by: Jenkins

diff --git a/connectivity/source/drivers/dbase/DTable.cxx 
b/connectivity/source/drivers/dbase/DTable.cxx
index 22caafc43fc6..cd42c6d8fa42 100644
--- a/connectivity/source/drivers/dbase/DTable.cxx
+++ b/connectivity/source/drivers/dbase/DTable.cxx
@@ -2683,7 +2683,14 @@ bool ODbaseTable::ReadMemo(std::size_t nBlockNo, 
ORowSetValue& aVariable)
             (*m_pMemoStream).ReadUInt32( nLength );
 
             if (m_aMemoHeader.db_typ == MemodBaseIV)
+            {
+                if (nLength < 8)
+                {
+                    SAL_WARN("connectivity.drivers", "Size too small");
+                    return false;
+                }
                 nLength -= 8;
+            }
 
             if ( nLength )
             {

Reply via email to