https://bugs.freedesktop.org/show_bug.cgi?id=79129
Priority: medium
Bug ID: 79129
Assignee: [email protected]
Summary: Crash in oox::drawingml::LayoutNode::setupShape
Severity: critical
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: Other
Status: UNCONFIRMED
Version: 4.3.0.0.beta1
Component: Libreoffice
Product: LibreOffice
Created attachment 99645
--> https://bugs.freedesktop.org/attachment.cgi?id=99645&action=edit
Repro file
When opening a mutated DOCX file, an ASan build of LO 4.4.0.0 alpha0 will
crash:
/usr/lib64/gcc/x86_64-suse-linux/4.7/../../../../include/c++/4.7/debug/safe_iterator.h:278:
error: attempt to dereference a past-the-end iterator.
Objects involved in the operation:
iterator "this" @ 0x0x7ffffffe1850 {
type =
N11__gnu_debug14_Safe_iteratorISt23_Rb_tree_const_iteratorISt4pairIKN3rtl8OUStringEPN3oox9drawingml3dgm5PointEEENSt7__debug3mapIS4_SA_St4lessIS4_ESaISB_EEEEE
(constant iterator);
state = past-the-end;
references sequence with type
`NSt7__debug3mapIN3rtl8OUStringEPN3oox9drawingml3dgm5PointESt4lessIS2_ESaISt4pairIKS2_S7_EEEE'
@ 0x0x7ffffffe1850
}
Original OO file: SmartArt_O12_Word_TextWrapping.docx
Mutated OO file (repro file): crash-30908.docx
Modified XML file: word/diagrams/data6.xml
Modifications:
- in tag "dgm:pt", attribute "modelId" was switched from
"{3F7ADC05-450D-4E79-A95B-8ED0E6BDF414}" to "%s%n%s%n%s%n%s%n%s%n"
- in tag "dgm:prSet", attribute "phldrT" was switched from "[Text]" to
"%s%n%s%n%s%n%s%n%s%n"
- in tag "dgm:pt", attribute "cxnId" was switched from
"{0FB7E5E5-D6BB-4789-AFA2-9E9DD009D957}" to "Abc123"
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
