[PATCH] Fix memory errors in SwWW8ImplReader

Caolán McNamara caolanm at redhat.com
Mon Apr 2 12:40:32 PDT 2012


On Mon, 2012-04-02 at 20:50 +0200, Lubos Lunak wrote:
>  Miklos has already fixed Read_UL(), but your patch lists more places. Could 
> you check why those places needed the change and make them read the proper 
> sizes according to what the .doc spec says?

FWIW the sprm itself (for >= winword version 8) encodes into its operand
the length of its following data, see wwSprmParser::GetSprmSize and so
forth. Doesn't further break down the meaning of the tail data into its
records or anything though.

The SprmParser, in theory at least, shouldn't let any truncated data
that doesn't fulfill its length promise into a srpmHandler. 

C.



More information about the LibreOffice mailing list