coverity#1222240 Untrusted value as argument

and coverity#1222239 Untrusted value as argument Change-Id: I48bacfd988a34d67ffa542edba7cba1bb9b0b3cc

coverity#1222240 Untrusted value as argument
and coverity#1222239 Untrusted value as argument Change-Id: I48bacfd988a34d67ffa542edba7cba1bb9b0b3cc
5e043613 · Caolán McNamara · 6fb1f934 · 5e043613
Kaydet (Commit) 5e043613 authored Tem 03, 2014 tarafından Caolán McNamara
Hide whitespace changes
Inline Side-by-side

Showing with 10 additions and 0 deletions

tocread.cxx lotuswordpro/source/filter/tocread.cxx +10 -0

No files found.
--- a/lotuswordpro/source/filter/tocread.cxx
+++ b/lotuswordpro/source/filter/tocread.cxx
@@ -67,6 +67,16 @@ CBenTOCReader::ReadLabelAndTOC()
    if ((Err = ReadLabel(&TOCOffset, &cTOCSize)) != BenErr_OK)
        return Err;

+    unsigned long nLength;
+    if ((Err = cpContainer->GetSize(nLength)) != BenErr_OK)
+        return Err;
+
+    if (TOCOffset > nLength)
+        return BenErr_ReadPastEndOfTOC;
+
+    if (cTOCSize > nLength - TOCOffset)
+        return BenErr_ReadPastEndOfTOC;
+
    if ((Err = cpContainer->SeekToPosition(TOCOffset)) != BenErr_OK)
        return Err;