[Libreoffice-commits] core.git: vcl/source

[Caolán McNamara]

 vcl/source/gdi/svmconverter.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 5885a5da36828434bc80c6dde0334f74f1de1195
Author: Caolán McNamara <caolanm at redhat.com>
Date:   Thu Mar 16 16:07:28 2017 +0000

    ofz: reject invalid fraction negative nYNum
    
    Change-Id: I9f86dba2408bdd1e2678c3165386cc99fd94a5a7

diff --git a/vcl/source/gdi/svmconverter.cxx b/vcl/source/gdi/svmconverter.cxx
index 55e1faf5b7c1..edd844df4749 100644
--- a/vcl/source/gdi/svmconverter.cxx
+++ b/vcl/source/gdi/svmconverter.cxx
@@ -159,7 +159,7 @@ bool ImplReadMapMode(SvStream& rIStm, MapMode& rMapMode)
     sal_Int32 nXNum(0), nXDenom(0), nYNum(0), nYDenom(0);
     rIStm.ReadInt32(nXNum).ReadInt32(nXDenom).ReadInt32(nYNum).ReadInt32(nYDenom);
 
-    if (!rIStm.good() || nXDenom == 0 || nYDenom == 0)
+    if (!rIStm.good() || nXDenom == 0 || nYDenom == 0 || nYNum < 0)
     {
         SAL_WARN("vcl.gdi", "Parsing error: invalid mapmode fraction");
         return false;