> The reason for this crash seems to be that in wv/libole2/ms-ole.c
> msole-lseek() is broken:
> In case MsOleSeekCur newpos is used uninitialised.
> Additional the case SeekEnd was also wrong.
> 
> This is alread fixed in the libole2 at cvs.gnome.org:
> 
> 
> @@ -2146,13 +2105,13 @@ ms_ole_lseek (MsOleStream *s, MsOleSPos 
>       g_return_val_if_fail (s, -1);
>  
>       if (type == MsOleSeekSet)
> -             newpos  = bytes;
> +             newpos = bytes;
>       else if (type == MsOleSeekCur)
> -             newpos += bytes;
> +             newpos = s->position + bytes;
>       else
> -             newpos = s->size - bytes;
> +             newpos = s->size + bytes;
>  

Thanks a _lot_. This is committed.

Dom


Reply via email to