[Libreoffice-commits] core.git: vcl/source

[Caolán McNamara (via logerrit)]

 vcl/source/fontsubset/sft.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 49066fcc969167e0744407b064ecb4b66c059705
Author:     Caolán McNamara <caolanm at redhat.com>
AuthorDate: Wed Mar 31 20:19:00 2021 +0100
Commit:     Caolán McNamara <caolanm at redhat.com>
CommitDate: Thu Apr 1 11:35:33 2021 +0200

    cid#1222237 Untrusted loop bound
    
    Change-Id: I7c82a0e3febda2903f1ef0fe5e1145554876bb81
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/113443
    Tested-by: Jenkins
    Reviewed-by: Caolán McNamara <caolanm at redhat.com>

diff --git a/vcl/source/fontsubset/sft.cxx b/vcl/source/fontsubset/sft.cxx
index bd5cb5c188c6..86946799a001 100644
--- a/vcl/source/fontsubset/sft.cxx
+++ b/vcl/source/fontsubset/sft.cxx
@@ -1824,7 +1824,7 @@ static void DumpSfnts(FILE *outf, sal_uInt8 *sfntP, sal_uInt32 sfntLen)
                     break;
                 }
 
-                sal_uInt32 l = nEndOffset - nStartOffset;
+                sal_uInt32 l = pSubRecordEnd - pSubRecordStart;
                 HexFmtBlockWrite(h, pSubRecordStart, l);
             }
         }