Merge pull request 'fix bug #79272' (#594) from fix/bug79272 into release/v9.3.0

Reviewed-on: https://git.onlyoffice.com/ONLYOFFICE/core/pulls/594
This commit is contained in:
Elena Subbotina
2026-01-12 11:45:21 +00:00

View File

@ -62,7 +62,7 @@ void ShapePropsStream::readFields(CFRecord& record)
_UINT32 cb=0;
record >> cb;
if (cb > 0)
if (cb > 0 && cb + record.getRdPtr() <= record.getDataSize())
{
xml_ = std::string( record.getCurData<char>(), cb);
record.skipNunBytes(cb);