https://bugs.freedesktop.org/show_bug.cgi?id=79130
Priority: medium
Bug ID: 79130
Assignee: [email protected]
Summary: Crash in
writerfilter::dmapper::DomainMapper_Impl::CloseFieldCo
mmand()
Severity: critical
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: Other
Status: UNCONFIRMED
Version: 4.3.0.0.beta1
Component: Libreoffice
Product: LibreOffice
Created attachment 99648
--> https://bugs.freedesktop.org/attachment.cgi?id=99648&action=edit
Repro file
When opening a mutated DOCX file, an ASan build of LO 4.4.0.0 alpha0 will
crash:
/usr/lib64/gcc/x86_64-suse-linux/4.7/../../../../include/c++/4.7/bits/stl_stack.h:160:
error: attempt to access an element in an empty container.
Objects involved in the operation:
sequence "this" @ 0x0x61d0000cbda0 {
type =
St5stackIN5boost10shared_ptrIN12writerfilter7dmapper12FieldContextEEENSt7__debug5dequeIS5_SaIS5_EEEE;
}
Original OO file:
core.ecu.edu%2Fpsyc%2Fwuenschk%2Fdocs221%30%2FResearch-3-Sampling.docx
Mutated OO file (repro file): crash_writer-2.docx
Modified XML file: word/header2.xml
Modifications:
- in tag "w:fldChar", attribute "w:fldCharType" was switched from "begin" to
"PPPPPPPPPPPPPPPPPPPPPPPPPPPPPP..."
- in tag "w:rStyle", attribute "w:val" was switched from "PageNumber" to
"PPPPPPPPPPPPPPPPPPPPPPPPPPPPPP..."
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
