worksheet: fix buffer overflow in table formula expansion

jmcnamara · jmcnamara · commit a18ee6498d95 · 2025-02-11T10:26:22.000Z
diff --git a/src/worksheet.c b/src/worksheet.c
@@ -1717,9 +1717,11 @@ _expand_table_formula(const char *formula)
 
     ptr = formula;
 
-    while (*ptr++) {
+    while (*ptr) {
         if (*ptr == '@')
             ref_count++;
+
+        ptr++;
     }
 
     if (ref_count == 0) {
