[Libreoffice-bugs] [Bug 119136] FILEOPEN: DOCX from TextMaker freezes Writer

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119136

Justin L <jluth at mail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
           Assignee|libreoffice-bugs at lists.free |jluth at mail.com
                   |desktop.org                 |

--- Comment #6 from Justin L <jluth at mail.com> ---
Hmm, a style with a blank name.
<w:style w:type="character" w:styleId="" w:customStyle="1">
  <w:name w:val="Нижний колонтитул Знак"/>
  <w:basedOn w:val="Absatz-Standardschriftart"/>
</w:style>

And of course every "parent" style defaults to a blank string, so that actually
matches a real, live style in this case.

Surprisingly, this is not illegal... "If this attribute is not specified, then
a style ID can be assigned in any manner desired." But leaving it as a blank
seems like a really bad idea, and has exposed an existing vulnerabilty in
GetPropertyFromStyleSheet().

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180807/6f5d3753/attachment.html>