[Libreoffice-commits] core.git: Branch 'libreoffice-6-0' - sc/source

[Caolán McNamara]

 sc/source/core/data/column3.cxx |    2 ++
 1 file changed, 2 insertions(+)

New commits:
commit 0213fc80c7bf8022fc2781c5a230d169eaa2c885
Author: Caolán McNamara <caolanm at redhat.com>
Date:   Mon Mar 26 12:50:20 2018 +0100

    forcepoint #31 check validity of another group range
    
    Change-Id: I82ff3e47a033c91581b108e1685b1ff4d5865895
    Reviewed-on: https://gerrit.libreoffice.org/51882
    Tested-by: Jenkins <ci at libreoffice.org>
    Reviewed-by: Miklos Vajna <vmiklos at collabora.co.uk>

diff --git a/sc/source/core/data/column3.cxx b/sc/source/core/data/column3.cxx
index a50856290c35..855f82c39423 100644
--- a/sc/source/core/data/column3.cxx
+++ b/sc/source/core/data/column3.cxx
@@ -3115,6 +3115,8 @@ public:
             {
                 // Previous cell is a regular cell and current cell is a group.
                 nRow += xCurGrp->mnLength;
+                if (xCurGrp->mnLength > std::distance(it, itEnd))
+                    throw css::lang::IllegalArgumentException();
                 std::advance(it, xCurGrp->mnLength);
                 pPrev->SetCellGroup(xCurGrp);
                 xCurGrp->mpTopCell = pPrev;