From 957b615b1fd02ca8b5d7a44c26789c1bb90afd72 Mon Sep 17 00:00:00 2001 From: Juergen Spitzmueller Date: Sun, 16 Aug 2020 17:23:16 +0200 Subject: [PATCH] Fix another crash with Grid pasting (follow-up to #11906) --- src/mathed/InsetMathGrid.cpp | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/mathed/InsetMathGrid.cpp b/src/mathed/InsetMathGrid.cpp index 0a637ec715..26dd55f7f8 100644 --- a/src/mathed/InsetMathGrid.cpp +++ b/src/mathed/InsetMathGrid.cpp @@ -1634,8 +1634,10 @@ void InsetMathGrid::doDispatch(Cursor & cur, FuncRequest & cmd) for (row_type r = 0; r < numrows; ++r) { for (col_type c = 0; c < numcols; ++c) { idx_type i = index(r + startrow, c + startcol); - cell(i).insert(c == 0 ? cur.pos() : 0, - grid.cell(grid.index(r, c))); + pos_type ipos = uint(cur.pos()) > cell(i).size() + ? cell(i).size() + : cur.pos(); + cell(i).insert(ipos, grid.cell(grid.index(r, c))); } if (hline_enabled) rowinfo_[r].lines += grid.rowinfo_[r].lines;