To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=109325
------- Additional comments from c...@openoffice.org Tue Feb 16 12:27:18 +0000 2010 ------- There are three bookmarks in this .doc. For some reason I can't understand we bump the nIMax for the end bookmark positions by one with bNoEnd set. But we have only 3 positions in there, so claiming that there are 4 is a bit silly as we go on to use nIMax as the maximum valid index. So obviously we're going to read invalid memory. This code smells like I wrote it, but it's present back in revision 1.1 of ww8scan.cxx so maybe there's some cvs log present back in the old StarOffice cvs which might explain why its there. After this change I still see the same three bookmarks in the import which existed before the change. --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org --------------------------------------------------------------------- To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
