starmath/source/parse.cxx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
New commits: commit c86a23b9c739519b2c7c45b3ee67399549adacdc Author: Caolán McNamara <caol...@redhat.com> Date: Sun Sep 22 12:28:31 2013 +0100 ensure OUString::copy is within bounds Change-Id: I7b8c2e764da01e38fb9f7048bcaeca93a72fafa3 diff --git a/starmath/source/parse.cxx b/starmath/source/parse.cxx index 9cb24fc..78abe81 100644 --- a/starmath/source/parse.cxx +++ b/starmath/source/parse.cxx @@ -441,7 +441,7 @@ void SmParser::NextToken() } else if (aRes.TokenType & KParseType::ONE_SINGLE_CHAR) { - if (m_aBufferString.copy(nRealStart, 2) == "%%") + if (nRealStart + 2 <= nBufLen && m_aBufferString.copy(nRealStart, 2) == "%%") { //SkipComment m_nBufferIndex = nRealStart + 2;
_______________________________________________ Libreoffice-commits mailing list libreoffice-comm...@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice-commits