From 5208370de8cee52e585cc375c9307d1e4d0e65e6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= Date: Wed, 23 Sep 2026 20:01:06 +0000 Subject: [PATCH] ofz#563849779 Integer-overflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit writerfilter::rtftok::RTFDocumentImpl::dispatchValue writerfilter::rtftok::RTFDocumentImpl::dispatchValue writerfilter::rtftok::RTFTokenizer::dispatchKeyword \brdrw2147483647 overflowed int converting twips to 1/8 pt Signed-off-by: Caolán McNamara Change-Id: I150e3d0227e8fd4d6f1125d0c27078f43f1f0f9d Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/13414 Tested-by: Jenkins CPCI Reviewed-by: Noel Grandin (cherry picked from commit 68c853c46592d3ac4c79d8dede0dd88b5a080b3e) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/211526 Reviewed-by: Xisco Fauli Tested-by: Jenkins --- sw/source/writerfilter/rtftok/rtfdispatchvalue.cxx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sw/source/writerfilter/rtftok/rtfdispatchvalue.cxx b/sw/source/writerfilter/rtftok/rtfdispatchvalue.cxx index b677d68efb5d..408a586fbc59 100644 --- a/sw/source/writerfilter/rtftok/rtfdispatchvalue.cxx +++ b/sw/source/writerfilter/rtftok/rtfdispatchvalue.cxx @@ -1022,7 +1022,7 @@ RTFError RTFDocumentImpl::dispatchValue(RTFKeyword nKeyword, int nParam) if (nParam == 2) nParam = 1; else if (nParam > 1) - nParam = nParam * 2 / 5; + nParam = sal_Int64(nParam) * 2 / 5; auto pValue = new RTFValue(nParam); putBorderProperty(m_aStates, NS_ooxml::LN_CT_Border_sz, pValue); }