[Libreoffice-commits] core.git: sc/source

[Eike Rathke]

 sc/source/core/tool/compiler.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 07b18860ae03ecb66b5605201f34c2aef3a55ad6
Author: Eike Rathke <erack at redhat.com>
Date:   Fri Aug 22 00:11:18 2014 +0200

    out-of-bounds string access
    
    ... when parsing  ='foo'#  with no character following.
    
    Change-Id: Id65fce721cb47a4d3c947c677323bdcaa2ce957f

diff --git a/sc/source/core/tool/compiler.cxx b/sc/source/core/tool/compiler.cxx
index 93d8f19..8c3e485 100644
--- a/sc/source/core/tool/compiler.cxx
+++ b/sc/source/core/tool/compiler.cxx
@@ -426,7 +426,7 @@ static bool lcl_isValidQuotedText( const OUString& rFormula, sal_Int32 nSrcPos,
     // but '' marks an escaped '
     // We've earlier guaranteed that a string containing '' will be
     // surrounded by '
-    if (rFormula[nSrcPos] == '\'')
+    if (nSrcPos < rFormula.getLength() && rFormula[nSrcPos] == '\'')
     {
         sal_Int32 nPos = nSrcPos+1;
         while (nPos < rFormula.getLength())