To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=95408 Issue #|95408 Summary|package: lack of checks for invalid file names Component|framework Version|OOo 3.0 Platform|All URL| OS/Version|All Status|NEW Status whiteboard| Keywords| Resolution| Issue type|DEFECT Priority|P3 Subcomponent|code Assigned to|mav Reported by|mst
------- Additional comments from [EMAIL PROTECTED] Fri Oct 24 10:41:09 +0000 2008 ------- there are two places in module package that do not check whether a ZIP file entry's file name is valid. as a consequence, ooo may write invalid ZIP files. ZipFile.cxx: function ZipFile::readCEN: reads invalid filenames from a ZIP file (which are later stored again...) line 761: aEntries[aEntry.sName] = aEntry; ZipPackageEntry.cxx: function ZipPackageEntry::setName: accepts invalid file names as parameter. imho it should throw an exception in such a case. in case the parameter contains ascii characters that are not allowed, these characters are stored. in case the parameter contains non-ascii characters, the result is completely bogus. --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
