To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=62092
Issue #:|62092
Summary:|crash on paste ...
Component:|Word processor
Version:|680m152
Platform:|All
URL:|
OS/Version:|All
Status:|NEW
Status whiteboard:|
Keywords:|
Resolution:|
Issue type:|PATCH
Priority:|P3
Subcomponent:|code
Assigned to:|mru
Reported by:|mmeeks
------- Additional comments from [EMAIL PROTECTED] Wed Feb 15 06:45:07 -0800
2006 -------
Paste a large chunk of simple ASCII text into writer: bang.
Valgrind trace:
==445==
==445== Invalid write of size 2
==445== at 0xC3F9B62: SwASCIIParser::ReadChars() (parasc.cxx:444)
==445== by 0xC3FA1EE: SwASCIIParser::CallParser() (parasc.cxx:246)
==445== by 0xC3FADA0: AsciiReader::Read(SwDoc&, String const&, SwPaM&, String
const&) (parasc.cxx:153)
==445== by 0xC404C0F: SwReader::Read(Reader const&) (shellio.cxx:300)
==445== by 0xC615719:
SwTransferable::_PasteFileContent(TransferableDataHelper&, SwWrtShell&, unsigned
long, unsigned char) (swdtflvr.cxx:1805)
==445== by 0xC6166CD: SwTransferable::PasteData(TransferableDataHelper&,
SwWrtShell&, unsigned short, unsigned long, unsigned short, unsigned char,
unsigned char, Point const*, signed char, unsigned char) (swdtflvr.cxx:1430)
==445== by 0xC62C346: SwEditWin::Command(CommandEvent const&)
(edtwin.cxx:4715)
==445== by 0x41EA5A4: ImplCallCommand(Window*, unsigned short, void*,
unsigned char, Point*) (in
/opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvcl680li.so)
==445== by 0x41EBFAE: ImplHandleMouseEvent(Window*, unsigned short, unsigned
char, long, long, unsigned long, unsigned short, unsigned short) (in
/opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvcl680li.so)
==445== by 0x41ED50C: ImplHandleSalMouseButtonDown(Window*, SalMouseEvent*)
(in /opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvcl680li.so)
==445== by 0x41EC357: ImplWindowFrameProc(void*, SalFrame*, unsigned short,
void const*) (in
/opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvcl680li.so)
==445== by 0x7B03469: SalFrame::CallCallback(unsigned short, void const*)
const (in
/opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvclplug_gtk680li.so)
==445== Address 0xF28D2D0 is 4,096 bytes inside a block of size 4,097 alloc'd
==445== at 0x4021259: malloc (in
/usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==445== by 0x48FC448: rtl_allocateMemory (in
/opt/OOInstall/program/libuno_sal.so.3)
==445== by 0x807F28F: (within /opt/OOInstall/program/soffice.bin)
==445== by 0x807F365: operator new[](unsigned) (in
/opt/OOInstall/program/soffice.bin)
==445== by 0xC3FA69A: SwASCIIParser::SwASCIIParser(SwDoc*, SwPaM const&,
SvStream&, int, SwAsciiOptions const&) (parasc.cxx:166)
==445== by 0xC3FAD92: AsciiReader::Read(SwDoc&, String const&, SwPaM&, String
const&) (parasc.cxx:152)
==445== by 0xC404C0F: SwReader::Read(Reader const&) (shellio.cxx:300)
==445== by 0xC615719:
SwTransferable::_PasteFileContent(TransferableDataHelper&, SwWrtShell&, unsigned
long, unsigned char) (swdtflvr.cxx:1805)
==445== by 0xC6166CD: SwTransferable::PasteData(TransferableDataHelper&,
SwWrtShell&, unsigned short, unsigned long, unsigned short, unsigned char,
unsigned char, Point const*, signed char, unsigned char) (swdtflvr.cxx:1430)
==445== by 0xC62C346: SwEditWin::Command(CommandEvent const&)
(edtwin.cxx:4715)
==445== by 0x41EA5A4: ImplCallCommand(Window*, unsigned short, void*,
unsigned char, Point*) (in
/opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvcl680li.so)
==445== by 0x41EBFAE: ImplHandleMouseEvent(Window*, unsigned short, unsigned
char, long, long, unsigned long, unsigned short, unsigned short) (in
/opt/OpenOffice/src680-m152/vcl/unxlngi6.pro/lib/libvcl680li.so)
1 trivial fix follows:
--- sw/source/filter/ascii/parasc.cxx 9 Sep 2005 05:34:16 -0000 1.21
+++ sw/source/filter/ascii/parasc.cxx 15 Feb 2006 15:12:55 -0000
@@ -163,7 +163,7 @@ SwASCIIParser::SwASCIIParser(SwDoc* pD,
: pDoc(pD), rInput(rIn), rOpt(rOpts), nScript(0), bNewDoc(bReadNewDoc)
{
pPam = new SwPaM( *rCrsr.GetPoint() );
- pArr = new sal_Char [ ASC_BUFFLEN + 1 ];
+ pArr = new sal_Char [ ASC_BUFFLEN + 2 ];
pItemSet = new SfxItemSet( pDoc->GetAttrPool(),
RES_CHRATR_FONT,
RES_CHRATR_LANGUAGE,
---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
