To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=104525


User hdu changed the following:

                What    |Old value                 |New value
================================================================================
                  Status|NEW                       |STARTED
--------------------------------------------------------------------------------
                Keywords|                          |aqua
--------------------------------------------------------------------------------
        Target milestone|---                       |OOo 3.3
--------------------------------------------------------------------------------




------- Additional comments from h...@openoffice.org Wed Aug 26 16:18:25 +0000 
2009 -------
To reproduce the problem one just needs to unpack the attached ZIP file. Then 
open it with e.g. 
TextEdit, which will result in a crash. Also OpenOffice.org is affected.

The root cause of the problem is probably that the 0xFC byte in the filename is 
misinterpreted as an 
UTF-8 six-byte sequence leading byte. Since such overlong sequences are illegal 
(since RFC3629) and 
also the following bytes of the file name don't follow the UTF-8 convention of 
having their MSBs==10 
this might explain why the CFStringGetLength function crashes.

Here is a typical stack for this problem (for TextEdit):
0   com.apple.CoreFoundation            0x90e59947 CFStringGetLength + 39
1   com.apple.Metadata                  0x96d322bb _MDItemMarkAsUsedForPath + 
191
2   com.apple.LaunchServices            0x90cb8b70 _LSAddRecentItem + 368
3   com.apple.AppKit                    0x9166a716 -[NSDocumentController 
_notePendingRecentDocumentURLsForKey:] + 1419
4   com.apple.Foundation                0x9326d88e __NSFireDelayedPerform + 382
5   com.apple.CoreFoundation            0x90e428f5 CFRunLoopRunSpecific + 4469
6   com.apple.CoreFoundation            0x90e42aa8 CFRunLoopRunInMode + 88
7   com.apple.HIToolbox                 0x91df42ac RunCurrentEventLoopInMode + 
283
8   com.apple.HIToolbox                 0x91df40c5 ReceiveNextEventCommon + 374
9   com.apple.HIToolbox                 0x91df3f39 
BlockUntilNextEventMatchingListInMode + 106
10  com.apple.AppKit                    0x913556d5 _DPSNextEvent + 657
11  com.apple.AppKit                    0x91354f88 -[NSApplication 
nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
12  com.apple.AppKit                    0x9134df9f -[NSApplication run] + 795
13  com.apple.AppKit                    0x9131b1d8 NSApplicationMain + 574
14  com.apple.TextEdit                  0x00001df6 0x1000 + 3574



---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@porting.openoffice.org
For additional commands, e-mail: issues-h...@porting.openoffice.org


---------------------------------------------------------------------
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org

Reply via email to