diff options
| author | David Tardon <dtardon@redhat.com> | 2017-10-21 12:11:35 +0200 |
|---|---|---|
| committer | David Tardon <dtardon@redhat.com> | 2017-10-21 14:01:25 +0200 |
| commit | 3d563913b415e461781f6ed02a2cf1eceb3997c2 (patch) | |
| tree | e2d1ac99ff4d942ca055786c8f6ee35db65de635 | |
| parent | 74ea3694d6a341c9821edd958fd647fbb0458273 (diff) | |
cid#1219707 sanitize loop bound
Change-Id: Idc3ffb4f82122e228f11af4ca5c08b9b988f2c98
| -rw-r--r-- | src/lib/VSDParser.cpp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/lib/VSDParser.cpp b/src/lib/VSDParser.cpp index 31baf5a..f0a2237 100644 --- a/src/lib/VSDParser.cpp +++ b/src/lib/VSDParser.cpp @@ -824,6 +824,7 @@ void libvisio::VSDParser::readNameIDX(librevenge::RVNGInputStream *input) { std::map<unsigned, VSDName> names; unsigned recordCount = readU32(input); + sanitizeListLength(recordCount, 13, input); for (unsigned i = 0; i < recordCount; ++i) { unsigned nameId = readU32(input); |