https://bugs.freedesktop.org/show_bug.cgi?id=87501

            Bug ID: 87501
           Summary: [Rollit fuzzer]: FILEOPEN Calc is stuck at 100%
           Product: LibreOffice
           Version: 4.4.0.0.beta1
          Hardware: Other
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Spreadsheet
          Assignee: [email protected]
          Reporter: [email protected]

Created attachment 111052
  --> https://bugs.freedesktop.org/attachment.cgi?id=111052&action=edit
Causes CPU to go to 100%

The attached file causes soffice.bin to run at 100% CPU apparently forever (for
a couple of hours at least).
I've tested in on Debian testing with 4.4.0-beta2 and Windows 7 with 4.3.3.2.

It seems to gets stuck here:

ustring.cxx:1080

        if (n != 0) {
            (*newStr)->length = n;
            assert(i >= 0 && i < str->length);
            memcpy(
                (*newStr)->buffer, str->buffer, i * sizeof (sal_Unicode));
            memcpy(
                (*newStr)->buffer + i, to->buffer,
                to->length * sizeof (sal_Unicode));
            memcpy(
                (*newStr)->buffer + i + to->length,
                str->buffer + i + from->length,
                (str->length - i - from->length) * sizeof (sal_Unicode));
        }

This bug was found using the Rollit fuzzer.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to