[Libreoffice] [PUSHED] Re: [PATCH] Fix replacement of $filename$ in GTK SaveAs dialogs

Caolán McNamara caolanm at redhat.com
Thu Feb 24 12:54:18 PST 2011


On Thu, 2011-02-24 at 14:30 -0500, Kevin Hunter wrote:
> Interesting.  From a different background, I worry about _all_ input.  I 
> don't know the API or internals well enough to say one way or the other, 
> but there's no (mild) security concern here?  Like giving a potentially 
> unsanitized string to GTK, or in the replacement routines of OString?

Oh sure, feel free to add some hardening around it, e.g. checking
HasError, but instead of return 0 and skipping the showing of the
overwrite dialog and aborting the save as, instead fallback to the old
generic overwrite dialog text.

> In any event, I've done as you suggested.  How does this round of the 
> patch work?

Looks good to me, pushed.

C.



More information about the LibreOffice mailing list