worksheet: fix buffer overflow in table formula expansion

jmcnamara · Feb 11, 2025 · a18ee64 · a18ee64
1 parent 69e5c5e
commit a18ee64
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/worksheet.c b/src/worksheet.c
@@ -1717,9 +1717,11 @@ _expand_table_formula(const char *formula)
 
     ptr = formula;
 
-    while (*ptr++) {
+    while (*ptr) {
         if (*ptr == '@')
             ref_count++;
+
+        ptr++;
     }
 
     if (ref_count == 0) {