[Libreoffice-commits] core.git: Branch 'libreoffice-5-2-0' - stoc/source

[Markus Mohrhard]

 stoc/source/invocation/invocation.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 208eea3f99cf9742abd2d76ba615b07240fac664
Author: Markus Mohrhard <markus.mohrhard at googlemail.com>
Date:   Mon Jul 18 15:19:32 2016 +0200

    don't write past the end of the array
    
    Found through
    http://crashreport.libreoffice.org/stats/crash_details/6ba2edbd-d268-4074-8b87-590a5694cc26
    
    Change-Id: Ic95d472fd117c2d286fabb775ef49e287a2874fa
    (cherry picked from commit b944e498a3053497394963b4e7bda2951ddcbcc1)
    Reviewed-on: https://gerrit.libreoffice.org/27287
    Reviewed-by: Caolán McNamara <caolanm at redhat.com>
    Tested-by: Caolán McNamara <caolanm at redhat.com>
    (cherry picked from commit 90dc4409ef01b81dae0b3a8ba3ecfc027921a9fd)
    Reviewed-on: https://gerrit.libreoffice.org/27289
    Reviewed-by: Miklos Vajna <vmiklos at collabora.co.uk>

diff --git a/stoc/source/invocation/invocation.cxx b/stoc/source/invocation/invocation.cxx
index 0d405d5..e33a307 100644
--- a/stoc/source/invocation/invocation.cxx
+++ b/stoc/source/invocation/invocation.cxx
@@ -996,7 +996,7 @@ Sequence< Type > SAL_CALL Invocation_Impl::getTypes() throw( RuntimeException, s
     static Sequence< Type > const * s_pTypes = nullptr;
     if (! s_pTypes)
     {
-        Sequence< Type > types( 4 +8 );
+        Sequence< Type > types( 4 + 10 );
         Type * pTypes = types.getArray();
         sal_Int32 n = 0;