ensure OUString::copy is within bounds

Change-Id: I7b8c2e764da01e38fb9f7048bcaeca93a72fafa3

ensure OUString::copy is within bounds
Change-Id: I7b8c2e764da01e38fb9f7048bcaeca93a72fafa3
c86a23b9 · Caolán McNamara · 28c9207d · c86a23b9
Kaydet (Commit) c86a23b9 authored Eyl 22, 2013 tarafından Caolán McNamara
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

parse.cxx starmath/source/parse.cxx +1 -1

No files found.
--- a/starmath/source/parse.cxx
+++ b/starmath/source/parse.cxx
@@ -441,7 +441,7 @@ void SmParser::NextToken()
        }
        else if (aRes.TokenType & KParseType::ONE_SINGLE_CHAR)
        {
-            if (m_aBufferString.copy(nRealStart, 2) == "%%")
+            if (nRealStart + 2 <= nBufLen && m_aBufferString.copy(nRealStart, 2) == "%%")
            {
                //SkipComment
                m_nBufferIndex = nRealStart + 2;