[gnumeric] Fuzzed file fix. [#751271]



commit e606a65be3973f2866d52a1677cd60cfb3a3450a
Author: Jean Brefort <jean brefort normalesup org>
Date:   Mon Jun 22 09:16:01 2015 +0200

    Fuzzed file fix. [#751271]

 NEWS                          |    2 +-
 plugins/excel/ChangeLog       |    4 ++++
 plugins/excel/ms-excel-read.c |    1 +
 3 files changed, 6 insertions(+), 1 deletions(-)
---
diff --git a/NEWS b/NEWS
index 6caea89..4dc36a9 100644
--- a/NEWS
+++ b/NEWS
@@ -14,7 +14,7 @@ Andreas:
 Jean:
        * Fix xlsx import of plot area manual layout. [#748016]
        * Fix out of bounds read. [#749121]
-       * Fuzzed file fixes.  [#750042] [#751270]
+       * Fuzzed file fixes.  [#750042] [#751270] [#751271]
 
 Morten:
        * Fix import/export of graph backplane.
diff --git a/plugins/excel/ChangeLog b/plugins/excel/ChangeLog
index f9fe655..6f9e7f8 100644
--- a/plugins/excel/ChangeLog
+++ b/plugins/excel/ChangeLog
@@ -1,5 +1,9 @@
 2015-06-22  Jean Brefort  <jean brefort normalesup org>
 
+       * ms-excel-read.c (excel_read_PANE): check data size. [#751271]
+
+2015-06-22  Jean Brefort  <jean brefort normalesup org>
+
        * ms-chart.c (end): skip NULL excel series. [#751270]
 
 2015-06-21  Jean Brefort  <jean brefort normalesup org>
diff --git a/plugins/excel/ms-excel-read.c b/plugins/excel/ms-excel-read.c
index fb90730..8bdda75 100644
--- a/plugins/excel/ms-excel-read.c
+++ b/plugins/excel/ms-excel-read.c
@@ -5033,6 +5033,7 @@ excel_read_ITERATION (BiffQuery *q, GnmXLImporter *importer)
 static void
 excel_read_PANE (BiffQuery *q, ExcelReadSheet *esheet, WorkbookView *wb_view)
 {
+       XL_CHECK_CONDITION (q->length == 10);
        if (esheet->freeze_panes) {
                guint16 x = GSF_LE_GET_GUINT16 (q->data + 0);
                guint16 y = GSF_LE_GET_GUINT16 (q->data + 2);


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]