filter/source/msfilter/msdffimp.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 04121e1740ee41b4689e1854f146c250c1d6074b
Author:     Melove <[email protected]>
AuthorDate: Wed Feb 4 23:30:24 2026 +0530
Commit:     Ilmari Lauhakangas <[email protected]>
CommitDate: Fri Feb 13 13:08:42 2026 +0100

    tdf#114441 msfilter: use sal_uInt64 for stream end position
    
    The stream end position may exceed the range of 32-bit
    integer types when parsing large MS documents.
    
    Using a smaller type can lead to overflow and incorrect
    parsing results.
    
    Switch to sal_uInt64 to safely handle large values and
    avoid data loss during import.
    
    Change-Id: Ie8a4213007f1d902e98c2fd0895efb64045c8080
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/198702
    Tested-by: Jenkins
    Reviewed-by: Ilmari Lauhakangas <[email protected]>

diff --git a/filter/source/msfilter/msdffimp.cxx 
b/filter/source/msfilter/msdffimp.cxx
index 954cbccab006..0776fcca92f0 100644
--- a/filter/source/msfilter/msdffimp.cxx
+++ b/filter/source/msfilter/msdffimp.cxx
@@ -3286,7 +3286,7 @@ bool SvxMSDffManager::SeekToShape( SvStream& rSt, 
SvxMSDffClientData* /* pClient
                 rSt.Seek( nOfs );
                 DffRecordHeader aEscherF002Hd;
                 bool bOk = ReadDffRecordHeader( rSt, aEscherF002Hd );
-                sal_uLong nEscherF002End = bOk ? 
aEscherF002Hd.GetRecEndFilePos() : 0;
+                sal_uInt64 nEscherF002End = bOk ? 
aEscherF002Hd.GetRecEndFilePos() : 0;
                 while (rSt.good() && rSt.Tell() < nEscherF002End)
                 {
                     DffRecordHeader aEscherObjListHd;

Reply via email to