coverity#1242839 Untrusted loop bound

Change-Id: Ib0e96d20f18edfab53373f153bd128f725fe335a

coverity#1242839 Untrusted loop bound
Change-Id: Ib0e96d20f18edfab53373f153bd128f725fe335a
25e07649 · Caolán McNamara · aee93381 · 25e07649
Kaydet (Commit) 25e07649 authored Eki 25, 2014 tarafından Caolán McNamara
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

ww8toolbar.cxx sw/source/filter/ww8/ww8toolbar.cxx +4 -0

No files found.
--- a/sw/source/filter/ww8/ww8toolbar.cxx
+++ b/sw/source/filter/ww8/ww8toolbar.cxx
@@ -1165,6 +1165,10 @@ bool MacroNames::Read( SvStream &rS)
    rS.ReadUInt16( iMac );
    if ( iMac )
    {
+        //even an empty MacroName will take 2 bytes
+        size_t nMaxAvailableRecords = rS.remainingSize()/sizeof(sal_uInt16);
+        if (iMac > nMaxAvailableRecords)
+            return false;
        rgNames = new MacroName[ iMac ];
        for ( sal_Int32 index = 0; index < iMac; ++index )
        {