Commit 92ce31e0 authored by Jean Bréfort's avatar Jean Bréfort

Fix array size issue in Guppi plot parser. [#751383]

parent 0a0056a1
2015-06-24 Jean Brefort <jean.brefort@normalesup.org>
* src/sheet-object-graph.c (dim_start): fix index test. [#751383]
2015-06-23 Jean Brefort <jean.brefort@normalesup.org>
* src/xml-sax-read.c (gnm_xml_finish_obj), (xml_sax_read_obj),
......
......@@ -14,7 +14,8 @@ Andreas:
Jean:
* Fix xlsx import of plot area manual layout. [#748016]
* Fix out of bounds read. [#749121]
* Fuzzed file fixes. [#750042] [751217] [#751270] [#751271]
* Fuzzed file fixes. [#750042] [#751217] [#751270] [#751271]
[#751383]
Morten:
* Fix import/export of graph backplane.
......
......@@ -954,7 +954,7 @@ dim_start (GsfXMLIn *xin, xmlChar const **attrs)
else if (0 == strcmp (attrs[i], "ID"))
id = strtoul (attrs[i+1], NULL, 10);
if (!desc ||
id > state->data->len || g_ptr_array_index (state->data, id) == NULL)
id >= state->data->len || g_ptr_array_index (state->data, id) == NULL)
return;
if (0 == strcmp (name, "values"))
type = GOG_MS_DIM_VALUES;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment