To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=111356
                 Issue #|111356
                 Summary|svtools: uninitialized buffer in pict format detect
               Component|Drawing
                 Version|DEV300m77
                Platform|All
                     URL|
              OS/Version|Linux
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|PATCH
                Priority|P3
            Subcomponent|code
             Assigned to|sj
             Reported by|cmc





------- Additional comments from [email protected] Tue May  4 08:35:30 +0000 
2010 -------
load the xpm from
http://www.openoffice.org/nonav/issues/showattachment.cgi/34969/ImageColor.xpm

BYTE sBuf[4];
rStm.Seek( nStmPos + 522 );
rStm.Read( sBuf, 3 );

the .xpm is shorter than this length, so the sBuf is uninitialized afterwards.


==23551== Conditional jump or move depends on uninitialised value(s)
==23551==    at 0x686E7D4: GraphicDescriptor::ImpDetectPCT(SvStream&, unsigned
char) (filter2.cxx:1210)
==23551==    by 0x686F02D: GraphicDescriptor::Detect(unsigned char)
(filter2.cxx:168)
==23551==    by 0x1C62C487: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libsddlx.so)
==23551==    by 0x1C410E11: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfilterconfig1.so)
==23551==    by 0x1C41217F: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfilterconfig1.so)
==23551==    by 0x1C413DC4: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfilterconfig1.so)
==23551==    by 0x1B25419B: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfwklx.so)
==23551==    by 0x1B25D279: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfwklx.so)
==23551==    by 0x1B250FC4: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfwklx.so)
==23551==    by 0x1B2515C7: ??? (in
/usr/lib64/openoffice.org/basis3.2/program/libfwklx.so)

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to