From a35d4ce9ccb3eb5903df3d221fdfd9a0d1fb5c37 Mon Sep 17 00:00:00 2001 From: Jay Berkenbilt Date: Fri, 21 Jun 2019 17:36:59 -0400 Subject: Fix bounds error in utf16_to_utf8 conversion --- libqpdf/QUtil.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libqpdf/QUtil.cc') diff --git a/libqpdf/QUtil.cc b/libqpdf/QUtil.cc index c8c23f6a..607c28f7 100644 --- a/libqpdf/QUtil.cc +++ b/libqpdf/QUtil.cc @@ -1955,7 +1955,7 @@ QUtil::utf16_to_utf8(std::string const& val) } // If the string has an odd number of bytes, the last byte is // ignored. - for (size_t i = start; i < len; i += 2) + for (size_t i = start; i + 1 < len; i += 2) { // Convert from UTF16-BE. If we get a malformed // codepoint, this code will generate incorrect output -- cgit v1.2.3-54-g00ecf