Date: prev next · Thread: first prev next last
2015 Archives by date, by thread · List index



Hi,

Please find the latest report on new defect(s) introduced to LibreOffice found with Coverity Scan.

2 new defect(s) introduced to LibreOffice found with Coverity Scan.
21 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by 
Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 2 of 2 defect(s)


** CID 1341876:  Insecure data handling  (TAINTED_SCALAR)
/sw/source/filter/ww8/ww8scan.cxx: 6372 in MSOPropertyBag::Read(SvStream &)()


________________________________________________________________________________________________________
*** CID 1341876:  Insecure data handling  (TAINTED_SCALAR)
/sw/source/filter/ww8/ww8scan.cxx: 6372 in MSOPropertyBag::Read(SvStream &)()
6366     void MSOPropertyBag::Read(SvStream& rStream)
6367     {
6368         rStream.ReadUInt16(m_nId);
6369         sal_uInt16 cProp(0);
6370         rStream.ReadUInt16(cProp);
6371         rStream.SeekRel(2); // cbUnknown
    CID 1341876:  Insecure data handling  (TAINTED_SCALAR)
    Using tainted variable "cProp" as a loop boundary.
6372         for (sal_uInt16 i = 0; i < cProp; ++i)
6373         {
6374             MSOProperty aProperty;
6375             aProperty.Read(rStream);
6376             m_aProperties.push_back(aProperty);
6377         }

** CID 1341875:  Incorrect expression  (DIVIDE_BY_ZERO)
/lotuswordpro/source/filter/lwptablelayout.cxx: 614 in LwpTableLayout::RegisterColumns()()


________________________________________________________________________________________________________
*** CID 1341875:  Incorrect expression  (DIVIDE_BY_ZERO)
/lotuswordpro/source/filter/lwptablelayout.cxx: 614 in LwpTableLayout::RegisterColumns()()
608                 dTableWidth = dDefaultColumn;
609                 assert(false);
610             }
611         }
612     
613         // justifiable columns will share the remain width averagely
    CID 1341875:  Incorrect expression  (DIVIDE_BY_ZERO)
    In expression "dTableWidth / nJustifiableColumn", division by expression 
"nJustifiableColumn" which may be zero has undefined behavior.
614         dDefaultColumn = dTableWidth/nJustifiableColumn;
615     
616         // register default column style
617         XFColStyle *pColStyle = new XFColStyle();
618         pColStyle->SetWidth(static_cast<float>(dDefaultColumn));
619     


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, 
https://scan.coverity.com/projects/libreoffice?tab=overview

To manage Coverity Scan email notifications for "libreoffice@lists.freedesktop.org", click 
https://scan.coverity.com/subscriptions/edit?email=libreoffice%40lists.freedesktop.org&token=d6481d718a775246b2340f282ebe5939


Context


Privacy Policy | Impressum (Legal Info) | Copyright information: Unless otherwise specified, all text and images on this website are licensed under the Creative Commons Attribution-Share Alike 3.0 License. This does not include the source code of LibreOffice, which is licensed under the Mozilla Public License (MPLv2). "LibreOffice" and "The Document Foundation" are registered trademarks of their corresponding registered owners or are in actual use as trademarks in one or more countries. Their respective logos and icons are also subject to international copyright laws. Use thereof is explained in our trademark policy.