> > 
> > http://www.stud.uni-karlsruhe.de/~uhwe/abi/
>

I had a short look at Uni-Bewerbung.doc:

The reason for this crash seems to be that in wv/libole2/ms-ole.c
msole-lseek() is broken:
In case MsOleSeekCur newpos is used uninitialised.
Additional the case SeekEnd was also wrong.

This is alread fixed in the libole2 at cvs.gnome.org:


@@ -2146,13 +2105,13 @@ ms_ole_lseek (MsOleStream *s, MsOleSPos 
        g_return_val_if_fail (s, -1);
 
        if (type == MsOleSeekSet)
-               newpos  = bytes;
+               newpos = bytes;
        else if (type == MsOleSeekCur)
-               newpos += bytes;
+               newpos = s->position + bytes;
        else
-               newpos = s->size - bytes;
+               newpos = s->size + bytes;
 

Reply via email to