https://bugs.documentfoundation.org/show_bug.cgi?id=155010
Bug ID: 155010
Summary: LibreOffice writer coredumps when opening malformed
docx file
Product: LibreOffice
Version: 7.3.7.2 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: Writer
Assignee: [email protected]
Reporter: [email protected]
Created attachment 186918
--> https://bugs.documentfoundation.org/attachment.cgi?id=186918&action=edit
Test docx that causes the stack overflow
LibreOffice 7.3.7.2 (Fedora 36) as well as v7.5 on Windows crash when trying to
open a docx file that is autogenerated by an audio transcription service.
Attached is a very simple file that causes the segfault. It seems related to
the multiple word/_rels in the docx file. If I do
`zip -d test-file.docx word/_rels/header?.xml.rels word/_rels/footer?.xml.rels`
then LibreOffice correctly opens the file.
Valgrind seems to suggest a stack overflow somewhere - if I can increase the
stack size, it does take a bit longer to crash, but it still segfaults.
Reproducability: 100%
--
You are receiving this mail because:
You are the assignee for the bug.
