[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 User tm changed the following: What|Old value |New value Status|VERIFIED |CLOSED --- Additional comments from t...@openoffice.org Thu Mar 11 10:13:42 + 2010 --- closed ! - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 User tm changed the following: What|Old value |New value Status|RESOLVED |VERIFIED --- Additional comments from t...@openoffice.org Mon Jul 20 10:08:35 + 2009 --- Checked and verified in cws fwk114 - OK ! - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 User mav changed the following: What|Old value |New value Assigned to|mav |tm --- Additional comments from m...@openoffice.org Wed Jul 8 14:14:10 + 2009 --- mav-tm: Please verify the issue. - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 User mav changed the following: What|Old value |New value Status|NEW |RESOLVED Resolution| |FIXED --- Additional comments from m...@openoffice.org Tue May 26 08:38:24 + 2009 --- Fixed in fwk114. - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=101418
User mba changed the following:
What|Old value |New value
Assigned to|mba |mav
Target milestone|--- |OOo 3.2
--- Additional comments from m...@openoffice.org Wed May 13 12:26:05 +
2009 ---
The document is damaged on zip level; the manifest.xml stream is not accessible.
Here's a call stack where OOo hangs:
ntdll.dll!7c90eb94()
[Frames below may be incorrect and/or missing, no symbols loaded for
ntdll.dll]
ntdll.dll!7c90e288()
kernel32.dll!7c801875()
kernel32.dll!7c8399f3()
sal3.dll!_osl_readFile() + 0x25 bytes C++
ucpfile1.dll!osl::File::read() + 0x16 bytesC++
ucpfile1.dll!fileaccess::ReconnectingFile::read() + 0x1f bytes C++
ucpfile1.dll!fileaccess::XInputStream_impl::readBytes() + 0x57 bytes
C++
xstor.dll!SwitchablePersistenceStream::readBytes() + 0x60 bytes
C++
package2.dll!XUnbufferedStream::readBytes() + 0x3c7 bytes C++
package2.dll!XUnbufferedStream::readSomeBytes() + 0x12 bytes C++
sax.uno.dll!sax_expatwrap::XMLFile2UTFConverter::readAndConvert(com::sun::star::uno::Sequencesigned
char seq={...}, long nMaxToRead=16384) Line 66 + 0x30 bytes C++
sax.uno.dll!sax_expatwrap::SaxExpatParser_Impl::parse() Line 707 +
0x2b bytes C++
sax.uno.dll!sax_expatwrap::SaxExpatParser::parseStream(const
com::sun::star::xml::sax::InputSource structSource={...}) Line 511 C++
package2.dll!ManifestReader::readManifestSequence() + 0x138 bytes
C++
package2.dll!ZipPackage::parseManifest() + 0x26c bytes C++
package2.dll!ZipPackage::getZipFileContents() + 0x2f6 bytesC++
package2.dll!ZipPackage::initialize() + 0x6e4 bytesC++
cppuhelper3MSC.dll!cppu::OSingleFactoryHelper::createInstanceWithArgumentsAndContext()
+ 0x4c bytes C++
cppuhelper3MSC.dll!cppu::OFactoryComponentHelper::createInstanceWithArgumentsAndContext()
+ 0x97 bytes C++
cppuhelper3MSC.dll!cppu::ORegistryFactoryHelper::createInstanceWithArgumentsAndContext()
+ 0xa2 bytes C++
bootstrap.uno.dll!stoc_smgr::OServiceManager::createInstanceWithArgumentsAndContext()
+ 0x183 bytes C++
bootstrap.uno.dll!stoc_smgr::OServiceManager::createInstanceWithArguments() +
0x29 bytes C++
xstor.dll!OStorage_Impl::OpenOwnPackage() + 0x366 bytesC++
xstor.dll!OStorage_Impl::ReadContents() + 0x38 bytes C++
xstor.dll!OStorage_Impl::FindElement() + 0x4f bytesC++
xstor.dll!OStorage::hasByName() + 0xc6 bytes C++
xomi.dll!XMLVersionListPersistence::load() + 0x66 bytesC++
sfxmi.dll!SfxMedium::GetVersionList(const
com::sun::star::uno::Referencecom::sun::star::embed::XStorage
xStorage={...}) Line 3536 + 0x1c bytes C++
sfxmi.dll!sfx2::FileDialogHelper_Impl::updateVersions() Line 670 +
0x13 bytes C++
sfxmi.dll!sfx2::FileDialogHelper_Impl::handleFileSelectionChanged(const
com::sun::star::ui::dialogs::FilePickerEvent __formal={...}) Line 214
C++
sfxmi.dll!sfx2::FileDialogHelper::FileSelectionChanged(const
com::sun::star::ui::dialogs::FilePickerEvent aEvent={...}) Line 2721 C++
sfxmi.dll!sfx2::FileDialogHelper_Impl::fileSelectionChanged(const
com::sun::star::ui::dialogs::FilePickerEvent aEvent={...}) Line 165 + 0x18
bytes C++
fps_office.uno.dll!SvtFilePicker::notify() + 0xd9 bytesC++
fps_office.uno.dll!SvtFileDialog::FileSelect() + 0x17 bytesC++
fps_office.uno.dll!SvtFileDialog::SelectHdl_Impl() + 0x22a bytes
C++
fps_office.uno.dll!SvtFileDialog::LinkStubSelectHdl_Impl() + 0xe bytes
C++
tlmi.dll!Link::Call() + 0x11 bytes C++
svtmi.dll!SvtFileView_Impl::LinkStubSelectionMultiplexer() + 0xe bytes
C++
tlmi.dll!Link::Call() + 0x11 bytes C++
svtmi.dll!SvLBox::SelectHdl() + 0x32 bytes C++
svtmi.dll!SvTreeListBox::Select() + 0xba bytes C++
svtmi.dll!SvImpLBox::SetCursor() + 0x11e bytes C++
svtmi.dll!ImpLBSelEng::SetCursorAtPoint() + 0x33 bytes C++
vclmi.dll!SelectionEngine::SelMouseButtonDown() + 0x1ec bytes C++
svtmi.dll!SvImpLBox::MouseButtonDown() + 0x266 bytes C++
svtmi.dll!SvTreeListBox::MouseButtonDown() + 0x2a bytesC++
vclmi.dll!ImplHandleMouseEvent() + 0xc15 bytes C++
vclmi.dll!ImplHandleSalMouseButtonDown() + 0x3a bytes C++
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 User volkerme changed the following: What|Old value |New value Ever confirmed| |1 Status|UNCONFIRMED |NEW --- Additional comments from volke...@openoffice.org Wed Apr 29 06:55:59 + 2009 --- Both files hang my OOo 3.1-RC2 on XP - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 --- Additional comments from mechti...@openoffice.org Wed Apr 29 07:53:28 + 2009 --- @ volkerme please use a plattform independed and free compressing format (like zip). - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 Issue #|101418 Summary|Special .odt sample cause openoffice Infinite Loop Den |ial of Service Component|xml Version|OOO300m9 Platform|All URL| OS/Version|Windows XP Status|UNCONFIRMED Status whiteboard| Keywords| Resolution| Issue type|DEFECT Priority|P3 Subcomponent|code Assigned to|mba Reported by|weiwang1985 --- Additional comments from weiwang1...@openoffice.org Wed Apr 29 02:12:24 + 2009 --- A sample which can cause OpenOffice infinite loop DOS. the problem is in package2.dll, ver: 2.0.500.0 - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[xml-issues] [Issue 101418] Special .odt sample cause openoffice Infinite Loop Denial of Service
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=101418 --- Additional comments from weiwang1...@openoffice.org Wed Apr 29 02:14:57 + 2009 --- Created an attachment (id=61877) The sample - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@xml.openoffice.org For additional commands, e-mail: issues-h...@xml.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
