To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=99526 Issue #|99526 Summary|Using "up" to position salulation in mail merge wizard | can place it out of range and crash Component|Word processor Version|OOo 3.0.1 Platform|All URL| OS/Version|Linux Status|NEW Status whiteboard| Keywords| Resolution| Issue type|PATCH Priority|P3 Subcomponent|code Assigned to|ama Reported by|cmc
------- Additional comments from c...@openoffice.org Mon Feb 23 11:56:37 +0000 2009 ------- If you press up more than 19 times in the mail merge wizard (e.g. 25 times) then the salutation will be placed at a offset of -25 added to 19 in an unsigned calculation, i.e. resulting in a massive 32bit number which is out of range of the document, which may crash horribly. Attached is a fix to the mailmerge wizard to only record successful up attempts to clip it to the valid amount, and a patch to the MoveParagraph to fail on an invalid up amount --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org --------------------------------------------------------------------- To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
