[framework-issues] [Issue 95408] package: lack of checks fo r invalid file names

2009-01-16 Thread mav
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=95408


User mav changed the following:

What|Old value |New value

  Status|RESOLVED  |VERIFIED





--- Additional comments from m...@openoffice.org Fri Jan 16 08:36:49 + 
2009 ---
The Name is now checked in the mentioned methods as well as in the storage
implementation. The Storage API related tests look ok.
Development issue, setting to verified by myself.


-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@framework.openoffice.org
For additional commands, e-mail: issues-h...@framework.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[framework-issues] [Issue 95408] package: lack of checks fo r invalid file names

2009-01-13 Thread mav
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=95408


User mav changed the following:

What|Old value |New value

  Status|NEW   |RESOLVED

  Resolution|  |FIXED





--- Additional comments from m...@openoffice.org Tue Jan 13 16:34:15 + 
2009 ---
should be fixed in mav44 now

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: issues-unsubscr...@framework.openoffice.org
For additional commands, e-mail: issues-h...@framework.openoffice.org


-
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org



[framework-issues] [Issue 95408] package: lack of checks fo r invalid file names

2008-11-05 Thread fs
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=95408


User fs changed the following:

What|Old value |New value

  CC|''|'fs'





--- Additional comments from [EMAIL PROTECTED] Wed Nov  5 11:10:04 + 
2008 ---
this issue makes the difference between corrupting a user's document and an
error message presented to the user, while preserving her data. See issue 95865.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[framework-issues] [Issue 95408] package: lack of checks fo r invalid file names

2008-10-24 Thread mst
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=95408
 Issue #|95408
 Summary|package: lack of checks for invalid file names
   Component|framework
 Version|OOo 3.0
Platform|All
 URL|
  OS/Version|All
  Status|NEW
   Status whiteboard|
Keywords|
  Resolution|
  Issue type|DEFECT
Priority|P3
Subcomponent|code
 Assigned to|mav
 Reported by|mst





--- Additional comments from [EMAIL PROTECTED] Fri Oct 24 10:41:09 + 
2008 ---
there are two places in module package that do not check whether a ZIP file
entry's file name is valid.
as a consequence, ooo may write invalid ZIP files.

ZipFile.cxx:
function ZipFile::readCEN:
reads invalid filenames from a ZIP file (which are later stored again...)
line 761:   aEntries[aEntry.sName] = aEntry;

ZipPackageEntry.cxx:
function ZipPackageEntry::setName:
accepts invalid file names as parameter.
imho it should throw an exception in such a case.
in case the parameter contains ascii characters that are not allowed, these
characters are stored.
in case the parameter contains non-ascii characters, the result is completely 
bogus.

-
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]