starmath/source/parse.cxx | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit c86a23b9c739519b2c7c45b3ee67399549adacdc
Author: Caolán McNamara <caol...@redhat.com>
Date: Sun Sep 22 12:28:31 2013 +0100
ensure OUString::copy is within bounds
Change-Id: I7b8c2e764da01e38fb9f7048bcaeca93a72fafa3
diff --git a/starmath/source/parse.cxx b/starmath/source/parse.cxx
index 9cb24fc..78abe81 100644
--- a/starmath/source/parse.cxx
+++ b/starmath/source/parse.cxx
@@ -441,7 +441,7 @@ void SmParser::NextToken()
}
else if (aRes.TokenType & KParseType::ONE_SINGLE_CHAR)
{
- if (m_aBufferString.copy(nRealStart, 2) == "%%")
+ if (nRealStart + 2 <= nBufLen && m_aBufferString.copy(nRealStart,
2) == "%%")
{
//SkipComment
m_nBufferIndex = nRealStart + 2;
_______________________________________________
Libreoffice-commits mailing list
libreoffice-comm...@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-commits
