<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><span class="vcard"><a class="email" href="mailto:sbergman@redhat.com" title="Stephan Bergmann <sbergman@redhat.com>"> <span class="fn">Stephan Bergmann</span></a>
</span> changed
          <a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Safe mode: Show user profile fails to open the folder"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=130216">bug 130216</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">CC</td>
           <td>
                
           </td>
           <td>mikekaganski@hotmail.com
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Safe mode: Show user profile fails to open the folder"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=130216#c4">Comment # 4</a>
              on <a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Safe mode: Show user profile fails to open the folder"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=130216">bug 130216</a>
              from <span class="vcard"><a class="email" href="mailto:sbergman@redhat.com" title="Stephan Bergmann <sbergman@redhat.com>"> <span class="fn">Stephan Bergmann</span></a>
</span></b>
        <pre>So looks like the call to

<span class="quote">> if (SHGetFileInfoW(
>         o3tl::toW(pathname.getStr()), 0, &info, sizeof info, SHGFI_ATTRIBUTES)
>     == 0)</span >

in CSysShExec::execute at
<<a href="https://cgit.freedesktop.org/libreoffice/core/tree/shell/source/win32/SysShExec.cxx?id=d59ec4cd1660410fa1b18c50d2d83b1417a82ddc#n334">https://cgit.freedesktop.org/libreoffice/core/tree/shell/source/win32/SysShExec.cxx?id=d59ec4cd1660410fa1b18c50d2d83b1417a82ddc#n334</a>>
fails with zero when pathname contains a ".." segment.

Mike, any idea whether that is actually the case
(<<a href="https://docs.microsoft.com/en-us/windows/win32/api/shellapi/nf-shellapi-shgetfileinfow">https://docs.microsoft.com/en-us/windows/win32/api/shellapi/nf-shellapi-shgetfileinfow</a>>
doesn't appear to mention something like that), and whether there is a
workaround?</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>