mir/libreoffice
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tdf#108039: check for nullptr in rtl_uString and OUString

Browse Source 
rtl_[u]String_newConcat now checks allocation result to return
early and avoid SIGSEGV. Other functions are not modified, to
keep old behavior relying on allocation success and crashing
early on OOM to avoid added overhead in performance-critical
places.

OUString operator+= now checks rtl_uString_newConcat result and
throws std::bad_alloc on failure, to specifically address BASIC
problem. It keeps strong exception guarantee of leaving this'
state unaltered.

Concatenation in BASIC now checks for bad string allocation
(previously SIGSEGV was generated).

Unit test included.

Change-Id: I1513311d3d58eac43b2d2ec9a230e22dff0b4245
Reviewed-on: https://gerrit.libreoffice.org/37965
Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
Tested-by: Jenkins <ci@libreoffice.org>
This commit is contained in:
Mike Kaganski
2017-05-23 23:57:50 +03:00
parent 9d1edef89b
commit ef117cad3a
4 changed files with 43 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
basic/source/sbx/sbxvalue.cxx
View File

@@ -875,14 +875,19 @@ bool SbxValue::Compute( SbxOperator eOp, const SbxValue& rOp )
// #30576: To begin with test, if the conversion worked
if( aL.pOUString != nullptr && aR.pOUString != nullptr )
{
*aL.pOUString += *aR.pOUString;
// tdf#108039: catch possible bad_alloc
try {
*aL.pOUString += *aR.pOUString;
}
catch (const std::bad_alloc&) {
SetError(ERRCODE_SBX_OVERFLOW);
}
}
// Not even Left OK?
else if( aL.pOUString == nullptr )
{
aL.pOUString = new OUString();
}
Put( aL );
}
else
SetError( ERRCODE_SBX_CONVERSION );