[Libreoffice-bugs] [Bug 51112] Created RTF-crashes

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=51112

Michael Meeks <michael.meeks at novell.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |michael.meeks at novell.com,
                   |                            |vmiklos at suse.cz

--- Comment #5 from Michael Meeks <michael.meeks at novell.com> 2012-07-06 05:00:55 PDT ---
No crash here either, but running under valgrind I see some things of interest
(though this is a slightly old build) Miklos ?

==2648== Invalid read of size 4
==2648==    at 0x12941410:
writerfilter::dmapper::DomainMapperTableManager::endOfRowAction()
(DomainMapperTableManager.cxx:492)
==2648==    by 0x129466BC:
writerfilter::TableManager<com::sun::star::uno::Reference<com::sun::star::text::XTextRange>,
boost::shared_ptr<writerfilter::dmapper::TablePropertyMap>
>::endParagraphGroup() (TableManager.hxx:791)
==2648==    by 0x1291E568:
writerfilter::dmapper::DomainMapper::lcl_endParagraphGroup()
(DomainMapper.cxx:3247)
==2648==    by 0x11FBDE24: writerfilter::LoggedStream::endParagraphGroup()
(LoggedResources.cxx:132)
==2648==    by 0x12AD3B36: writerfilter::rtftok::RTFDocumentImpl::tableBreak()
(rtfdocumentimpl.cxx:481)
==2648==    by 0x12AD9AEF:
writerfilter::rtftok::RTFDocumentImpl::dispatchSymbol(writerfilter::rtftok::RTFKeyword)
(rtfdocumentimpl.cxx:1582)
==2648==    by 0x12AF3ECE:
writerfilter::rtftok::RTFTokenizer::dispatchKeyword(rtl::OString&, bool, int)
(rtftokenizer.cxx:299)
==2648==    by 0x12AF416F: writerfilter::rtftok::RTFTokenizer::resolveKeyword()
(rtftokenizer.cxx:260)
==2648==    by 0x12AF4460: writerfilter::rtftok::RTFTokenizer::resolveParse()
(rtftokenizer.cxx:123)
==2648==    by 0x12AD35EF:
writerfilter::rtftok::RTFDocumentImpl::resolve(writerfilter::Stream&)
(rtfdocumentimpl.cxx:596)
==2648==    by 0x11FAC00B:
RtfFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>
const&) (RtfFilter.cxx:100)
==2648==    by 0x47AD572: SfxObjectShell::ImportFrom(SfxMedium&, bool)
(objstor.cxx:2240)
==2648==  Address 0xe4bc7b4 is 4 bytes before a block of size 16 alloc'd
==2648==    at 0x4028C39: operator new(unsigned int) (in
/usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==2648==    by 0x12943C4E: std::vector<long, std::allocator<long>
>::push_back(long&&) (vector.tcc:102)
==2648==    by 0x129420DF:
writerfilter::dmapper::DomainMapperTableManager::sprm(writerfilter::Sprm&)
(DomainMapperTableManager.cxx:230)
==2648==    by 0x129289AD:
writerfilter::dmapper::DomainMapper::lcl_sprm(writerfilter::Sprm&)
(DomainMapper.cxx:1444)
==2648==    by 0x11FBDF77:
writerfilter::LoggedProperties::sprm(writerfilter::Sprm&)
(LoggedResources.cxx:311)
==2648==    by 0x12AF47C7:
writerfilter::rtftok::RTFReferenceProperties::resolve(writerfilter::Properties&)
(rtfreferenceproperties.cxx:56)
==2648==    by 0x1291E4A1:
writerfilter::dmapper::DomainMapper::lcl_props(boost::shared_ptr<writerfilter::Reference<writerfilter::Properties>
>) (DomainMapper.cxx:3456)
==2648==    by 0x11FBE0D7:
writerfilter::LoggedStream::props(boost::shared_ptr<writerfilter::Reference<writerfilter::Properties>
>) (LoggedResources.cxx:224)
==2648==    by 0x12AD9ADE:
writerfilter::rtftok::RTFDocumentImpl::dispatchSymbol(writerfilter::rtftok::RTFKeyword)
(rtfdocumentimpl.cxx:1580)
==2648==    by 0x12AF3ECE:
writerfilter::rtftok::RTFTokenizer::dispatchKeyword(rtl::OString&, bool, int)
(rtftokenizer.cxx:299)
==2648==    by 0x12AF416F: writerfilter::rtftok::RTFTokenizer::resolveKeyword()
(rtftokenizer.cxx:260)
==2648==    by 0x12AF4460: writerfilter::rtftok::RTFTokenizer::resolveParse()
(rtftokenizer.cxx:123)

I guess that might turn into a crash-on-load under windows :-)

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.