To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=109325
                 Issue #|109325
                 Summary|sw: valgrind read beyond end in bookmarks importer
               Component|Word processor
                 Version|DEV300m71
                Platform|All
                     URL|
              OS/Version|All
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|PATCH
                Priority|P3
            Subcomponent|code
             Assigned to|hbrinkm
             Reported by|cmc





------- Additional comments from [email protected] Tue Feb 16 12:23:26 +0000 
2010 -------
i.e. this valgrind trace from the attached document

==12276== Invalid read of size 4
==12276==    at 0x1DD9A535: WW8PLCFspecial::SeekPosExact(long) 
(ww8scan.cxx:2203)
==12276==    by 0x1DD9B66E: WW8PLCFx_Book::SeekPos(int) (ww8scan.cxx:4067)
==12276==    by 0x1DDA56B6: WW8PLCFMan::WW8PLCFMan(WW8ScannerBase*, ManTypes,
long, bool) (ww8scan.cxx:4503)
==12276==    by 0x1DD5BBA7: SwWW8ImplReader::ReadText(long, long, ManTypes)
(ww8par.cxx:3035)
==12276==    by 0x1DD5C491: SwWW8ImplReader::Read_HdFtFtnText(SwNodeIndex
const*, long, long, ManTypes) (ww8par.cxx:1576)
==12276==    by 0x1DD5C7DE: SwWW8ImplReader::Read_HdFtText(long, long,
SwFrmFmt*) (ww8par.cxx:1683)
==12276==    by 0x1DD5CE29: SwWW8ImplReader::Read_HdFt(bool, int, SwPageDesc
const*, wwSection const&) (ww8par.cxx:1805)
==12276==    by 0x1DD5D096: wwSectionManager::SetHdFt(wwSection&, int, wwSection
const*) (ww8par.cxx:1833)
==12276==    by 0x1DD5D320:
wwSectionManager::SetSwFmtPageDesc(std::_Deque_iterator<wwSection, wwSection&,
wwSection*>&, std::_Deque_iterator<wwSection, wwSection&, wwSection*>&, bool)
(ww8par.cxx:3466)
==12276==    by 0x1DD5D70F: wwSectionManager::InsertSegments() (ww8par.cxx:3535)
==12276==    by 0x1DD5F6A1: SwWW8ImplReader::CoreLoad(WW8Glossary*, SwPosition
const&) (ww8par.cxx:4121)
==12276==    by 0x1DD602AC: SwWW8ImplReader::LoadThroughDecryption(SwPaM&,
WW8Glossary*) (ww8par.cxx:4476)
==12276==  Address 0x1588ce90 is 0 bytes after a block of size 16 alloc'd
==12276==    at 0x4A0515D: malloc (vg_replace_malloc.c:195)
==12276==    by 0x4011CA: ??? (in 
/usr/lib64/openoffice.org3/program/soffice.bin)
==12276==    by 0x4012B6: operator new[](unsigned long) (in
/usr/lib64/openoffice.org3/program/soffice.bin)
==12276==    by 0x1DD9E3DD: WW8PLCFspecial::WW8PLCFspecial(SvStream*, long,
long, long, long, bool) (ww8scan.cxx:2132)
==12276==    by 0x1DDA4BC4: WW8PLCFx_Book::WW8PLCFx_Book(SvStream*, WW8Fib
const&) (ww8scan.cxx:4011)
==12276==    by 0x1DDA6022: WW8ScannerBase::WW8ScannerBase(SvStream*, SvStream*,
SvStream*, WW8Fib const*) (ww8scan.cxx:1833)
==12276==    by 0x1DD5EEE4: SwWW8ImplReader::CoreLoad(WW8Glossary*, SwPosition
const&) (ww8par.cxx:3921)
==12276==    by 0x1DD602AC: SwWW8ImplReader::LoadThroughDecryption(SwPaM&,
WW8Glossary*) (ww8par.cxx:4476)
==12276==    by 0x1DD60D1D: SwWW8ImplReader::LoadDoc(SwPaM&, WW8Glossary*)
(ww8par.cxx:4805)
==12276==    by 0x1DD60E3B: WW8Reader::Read(SwDoc&, String const&, SwPaM&,
String const&) (ww8par.cxx:4872)
==12276==    by 0x1AA6BDEB: SwReader::Read(Reader const&) (shellio.cxx:193)
==12276==    by 0x1AB3A2B0: SwDocShell::ConvertFrom(SfxMedium&) (docsh.cxx:285)

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to