ofz#3771 Integer-overflow

Change-Id: Iedc61de56b494d6344490f6d6f712a62b2a12b78
Reviewed-on: https://gerrit.libreoffice.org/43783
Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Tested-by: Caolán McNamara <caolanm@redhat.com>
This commit is contained in:
Caolán McNamara
2017-10-24 15:53:45 +01:00
parent 08deeace49
commit 035f5f1d98

View File

@@ -1534,6 +1534,9 @@ WW8PLCFpcd* WW8ScannerBase::OpenPieceTable( SvStream* pStr, const WW8Fib* pWwF )
if ( ((8 > m_pWw8Fib->m_nVersion) && !pWwF->m_fComplex) || !pWwF->m_lcbClx )
return nullptr;
if (pWwF->m_lcbClx < 0)
return nullptr;
WW8_FC nClxPos = pWwF->m_fcClx;
if (!checkSeek(*pStr, nClxPos))