To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=100942
------- Additional comments from c...@openoffice.org Thu Apr 9 22:27:58 +0000 2009 ------- Still didn't get it, the outer tests are to super-protect against an overflow in lower-level allocation, so should deal in terms of what gets allocated, while the inner ones are in terms of what gets read to ensure data will be available. Given that, then we probably should be using SAL_MAX_SIZE rather than SAL_MAX_UINT32 for those tests. (btw, a Point is a Pair of longs, and longs are 8bytes on 64bit linux so even for the EMR_POLYPOLYGON case where its two sal_uInt32 that get read, then ( nGesPoints * sizeof(Point) ) <= ( nEndPos - pWMF->Tell() ) wouldn't do the right thing as a Point would be twice as big) --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@graphics.openoffice.org For additional commands, e-mail: issues-h...@graphics.openoffice.org --------------------------------------------------------------------- To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
