https://bugs.freedesktop.org/show_bug.cgi?id=67313
Priority: medium
Bug ID: 67313
Keywords: regression
Assignee: [email protected]
Summary: Other: libreoffice 4.1 fails to start soffice.bin
(4.0.4 was still ok) on multiple winxp systems with
very old and odd store.dll file in windows\system\
path
Severity: normal
Classification: Unclassified
OS: Windows (All)
Reporter: [email protected]
Hardware: Other
Whiteboard: BSA
Status: UNCONFIRMED
Version: 4.1.0.4 release
Component: Libreoffice
Product: LibreOffice
Problem description:
Steps to reproduce:
1. have an old windowsxp installation with who-knows-what kind of misc. odd
DLLs installed
this will be hard to repro, but I immediately found two previously
unproblematic windowsxp professional 32bit machines, that ran many of the
recent years worth of libreoffice just fine. today came the upgrade to
libreoffice 4.1 via the official signed installer packages (.msi), and the 4.1
would not start up, as a popup would complain that soffice.bin was reporting
that c:\windows\system\STORE.DLL was not a valid application or file or
something.
that store.dll file existed on both of those machines, and uploading it to a
virus checker (virustotal) showed that it was previously unknown to the online
database there.
filedate of store.dll dates back to 1993! although there are plenty of rather
old files in windows\system\ (not NOT system32) on windowsxp machines, for
compatibility reasons and other things, this store.dll file was almost the
oldest in there, the file properties say that its supposedly by microsoft mail
store layers from the year 1993
sha256 of store.dll file is:
757019059f3ca83aeb182385403a461342005423605b6502231ac6fcdf130598
analysis report can be found:
<https://www.virustotal.com/en/file/757019059f3ca83aeb182385403a461342005423605b6502231ac6fcdf130598/analysis/>
after renaming this file to something else, soffice.bin and the whole app
starts up normally.
Expected Behavior:
Libreoffice code should make sure its not loading arbitrary DLLs accidentally
or on purpose but only its own or well known legit DLLs and libraries and
components.
When searching google for libreoffice and store.dll there is actually some
source code or source code filenames and paths coming up that are named
storedllapi.h or similar stuff, I wonder if thats maybe got to do something
with this bug
<https://www.archlinux.org/packages/extra/x86_64/libreoffice-sdk/files/>
....
usr/include/libreoffice/store/
usr/include/libreoffice/store/store.h
usr/include/libreoffice/store/store.hxx
usr/include/libreoffice/store/storedllapi.h
usr/include/libreoffice/store/types.h
....
Operating System: Windows XP
Version: 4.1.0.4 release
Last worked in: 4.0.4.2 release
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
