[dev] Re: does anybody still use tcsh to build OOo?
I guess it shouldn't make a big difference for anyone whether he uses bash or tcsh for building OOo, so killing tcsh support is fine, IMO. Malte. Michael Stahl wrote, On 05.04.2011 13:04: hi all, currently configure generates 2 shell scripts for the environment, one for Bourne shell and one for tcsh. the tcsh file is known to ... annoy people. would anybody complain if the tcsh file were gone? -- - To unsubscribe send email to dev-unsubscr...@openoffice.org For additional commands send email to sy...@openoffice.org with Subject: help
Re: [dev] where can i get the WORDSTAR source??
You are kidding, aren't you? vaishnav kumarT.C wrote, On 02/14/11 14:48: hi everyone, i m currently doing a project in OPENOFFICE WRITER 3.2, i m in need of the old word processor 'WORDSTAR' s *source code.* Do anyone know where can i get the wordstar source code? i am very thankful to the one who helps me to sort it out. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] An image editing extension for Open office writer
Hi Lakmal, I didn't try the extension yet, but the demo video indeed looks promising! :) Malte. lakmal padmakumara wrote, On 01/17/11 16:55: Hi all , I'm engaging in developing an extension for OO writer which allows users to * Re-size/Zoom images with different parameters * Rotate images by 90 degrees (right or left) * Rotate images from 0 degrees to 360 degrees * Crop images effectively * Compress Images * Download images to the app directly from Flickr.com * Take screen shots/web-cam snaps and edit them * Add text/watermarks to images You need Java Run Time (JRE) in order to use this product .And as it involves some system calls this is more suitable for Windows users( I will update with a complete Linux version soon).This is still in beta phase with lot of possible improvements .And I also have my own To Do list which I'm hoping implement ASAP .You can visit Google project hosting page http://code.google.com/p/pixelplus/ Open Office Extensions Page http://extensions.services.openoffice.org/en/project/pixelpluz Youtube Introduction Video http://www.youtube.com/watch?v=WOGvHHYBSgs As this is my first step towards this wonderful and giant Open source developing community ,I will be really glad if you can hit me back with any feed backs .Please comment on the above pages mentioning any drawbacks/bugs/improvements . Thanks in advance ! - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] OOo starts working after installing VS 2008 C++ Express
Hi Knut, actually, it should work out of the box when doing a regular OOo installation, as that would install the runtimes automatically. I just verified with OOo 3.3 RC on a plain Windows XP system, where I didn't install anything Except vanilla XP. How did you install OOo? (And which version was it?) Malte. Knut Olav Bøhmer wrote, On 11/26/10 13:30: Thanks. It worked On Nov 26, 2010 12:32 PM, Konstantin Tokarev annu...@yandex.ru wrote: 26.11.2010, 14:29, Knut Olav Bøhmer boh...@gmail.com: Hi, I had a problem with OOo, that when you start OOo it opens a restore-document-window, and crashes. When I use the -norestore option it just crashed. I tried several users on the same computer, and they (includeing Administrator) all failed. I tried removing the user profile, but still the same. Reinstalling OOo has also been tried, with no luck. Then I installed Visual Studio C++ 2008 Express to debug this. When VSC2008 was installed, OOo started working as it should. (for all users on the computer) So, the problem is probably some DLL files that's not good on this system. There are more computers and users that have this problem. How can I find out what the problem is and which DLL files should be installed? I think this can help you: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=9b2da534-3e03-4391-8a4d-074b9f2bc1bfdisplaylang=en -- Regards, Konstantin - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] OOo starts working after installing VS 2008 C++ Express
Makes sense, thanks for clarification :) Malte. Knut Olav Bøhmer wrote, On 11/26/10 14:21: Hi, I did not install it ( but I know who did ). They made their own distributable package, which have had several flaws. The company who made the package did not know what they was doing, and my customer have paid a lot of money to patch a broken installation. A lot of registry settings was also incorrect. On 26 November 2010 13:59, Malte Timmermann malte.timmerm...@oracle.com wrote: Hi Knut, actually, it should work out of the box when doing a regular OOo installation, as that would install the runtimes automatically. I just verified with OOo 3.3 RC on a plain Windows XP system, where I didn't install anything Except vanilla XP. How did you install OOo? (And which version was it?) Malte. Knut Olav Břhmer wrote, On 11/26/10 13:30: Thanks. It worked On Nov 26, 2010 12:32 PM, Konstantin Tokarev annu...@yandex.ru wrote: 26.11.2010, 14:29, Knut Olav Břhmer boh...@gmail.com: Hi, I had a problem with OOo, that when you start OOo it opens a restore-document-window, and crashes. When I use the -norestore option it just crashed. I tried several users on the same computer, and they (includeing Administrator) all failed. I tried removing the user profile, but still the same. Reinstalling OOo has also been tried, with no luck. Then I installed Visual Studio C++ 2008 Express to debug this. When VSC2008 was installed, OOo started working as it should. (for all users on the computer) So, the problem is probably some DLL files that's not good on this system. There are more computers and users that have this problem. How can I find out what the problem is and which DLL files should be installed? I think this can help you: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=9b2da534-3e03-4391-8a4d-074b9f2bc1bfdisplaylang=en -- Regards, Konstantin - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Slowness on UNC path
Hi Camille, seems the configurations have been very different, so comparing didn't help much. But I just tried to set all existing file and printer sharing rules to block, which did the trick. (While adding a new rule for blocking it didn't help - seems the firewall simply stops processing rules when one matches, so my blocking rule didn't overrule the allowing rules...) See my comments in the issue. Seems I should have simplified the stack traces - I didn't expect them to look so ugly because of automatic line breaks (not sure where they come from). I won't have time to work on a solution myself, but at least the issue is understood now, confirmed, and assigned to an appropriate developer. Best regards, Malte. MOULIN Camille wrote, On 10/13/10 15:12: Dear OOo Dev, I'd like to have your opinion on the issue 105283. http://www.openoffice.org/issues/show_bug.cgi?id=105283 In a nutshell, when working with a file using a UNC path, OOo sends a request on port 80 and waits for an answer (at the opening and closing of the file). A problem occurs when the port is in stealth mode, OOo waits till the timeout, which means the application is frozen for 30 seconds or so, which is not acceptable from a user pov. I became aware of the problem when one of our client switched his servers to Win 2008 server, where stealth mode is set by default. So I imagine that the problem will spread quickly. Are you already aware of this? (the issue is not confirmed at the moment) Could any of yous give me a rough estimate of the efforts to fix that? If you can also quickly explain why OOo behaves this way, that would also help. Thanks, Camille - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Slowness on UNC path
Hi Camille, I would like to look at that, but need help reproducing it. See my comments in the issue... Malte. MOULIN Camille wrote, On 10/13/10 15:12: Dear OOo Dev, I'd like to have your opinion on the issue 105283. http://www.openoffice.org/issues/show_bug.cgi?id=105283 In a nutshell, when working with a file using a UNC path, OOo sends a request on port 80 and waits for an answer (at the opening and closing of the file). A problem occurs when the port is in stealth mode, OOo waits till the timeout, which means the application is frozen for 30 seconds or so, which is not acceptable from a user pov. I became aware of the problem when one of our client switched his servers to Win 2008 server, where stealth mode is set by default. So I imagine that the problem will spread quickly. Are you already aware of this? (the issue is not confirmed at the moment) Could any of yous give me a rough estimate of the efforts to fix that? If you can also quickly explain why OOo behaves this way, that would also help. Thanks, Camille - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Missing vcl resource
3.2.1.4 sounds like ooo-build, not vanilla OOo, so please use the ooo-build mailing list for such questions... Malte. Soohong Min wrote, On 08.09.10 21:09: Hello, After building Openoffice 3.2.1.4, I tried to operate Openoffice by some scripts. I got error message as follows: Missing vcl resource. This indicates that files vital to localization are missing. You might have a corrupt installation. How can I fix this problem? Any help is appreciated. Thanks - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Two exploitable OpenOffice.org bugs!
Will be handled by the OOo Security Team. http://www.openoffice.org/security/ Malte / OOo Security Team. Kálmán „KAMI” Szalai wrote, On 08/06/10 12:10: Hi Developers, Today I got a mail about this documentation about two OpenOffice.org bug in the latest version (3.2.1): http://securityevaluators.com/files/papers/CrashAnalysis.pdf Have you also received? Published by: Charlie Miller Independent Security Evaluators http://securityevaluators.com - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] FASTBOOL macro vs bool - decrease memory usage
+1 for removing this ancient thing. Not for memory reasons (I doubt it would really make a difference), but for code cleanup reasons. I don't know how risky this is when it comes to the binfilter module. If the old binary filters simply stream FASTBOOL variables, the document format would become incompatible. But IIRC we seldom used stream operators in our filters, but used SvStream::Read/WriteType(...), which would be fine then. So you should first check if this is the case... Malte. Stephan Bergmann wrote, On 06/24/10 11:32: On 06/24/10 11:17, Bartosz wrote: Maybe we should change it to (or remove this macro): typedef bool FASTBOOL; Yes, best would certainly be to remove the typedef and change occurrences of FASTBOOL to plain bool (watching out for potential misuses that tunnel values other than true/false through a variable of type FASTBOOL). -Stephan - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] SfxItemSet assumptions and assertions
Mathias Bauer wrote, On 06/16/10 10:11: On 15.06.2010 11:47, Björn Michaelsen wrote: Well, the implementation in new_itemsets only checks for the which id being 0 and never checks for the type being an SfxVoidItem (outside assertions). So an disabled item is consistently defined as any item returning an which id of 0 in the new itemset implementation. That's an improvement and it allows to use the API consistently. OTOH it is still ugly. :-) I consider the way how the ItemSet codes the disabled status an implementation detail. Now the interesting part is finding the clients of the itemset that rely on void items being interpreted as disabled by the itemset and fixing those Question is if that is more effort then replacing all code that puts items with ID = 0 with code calling DisableItem instead. That would make putting an item with ID=0 an invalid action. BTW: I don't remember if any of the two ItemSet implementations returns an VoidItem in a GetItem call for a disabled item or if NULL is returned then. IMHO it always should be the latter. We have const SfxPoolItem Get() and const SfxPoolItem* GetItem(...) Not sure why we have two different Get Methods, but the first doesn't allow to return NULL, so I assume the second one would also have to return the same VoidItem for consistency. Back to your primary topic. If we identify the places where a VoidItem with ID != 0 is put, and if the developers state that this is by intent, we can remove that assertion and make putting VoidItems with ID != 0 a valid action that does not disable that item. Yes, I guess it would be better to keep allowing VoidItems with Which != 0. Or we search for all places where we might have != 0 VoidItems. Places I found: EditEngine has some, but that could be changed. I have no clue here: http://svn.services.openoffice.org/opengrok/xref/DEV300_m81/sfx2/source/control/sfxstatuslistener.cxx#233 if ( pType == ::getVoidCppuType() ) 232 { 233 pItem = new SfxVoidItem( m_nSlotID ); 234 eState = SFX_ITEM_UNKNOWN; 235 } I don't think the slot id would be zero... But this looks like we really would mix up slot and which ids. Some more such things in sfx2/source/control/ SW: rReq.SetReturnValue(SfxVoidItem(bLabel ? FN_LABEL : FN_BUSINESS_CARD)); rSet.Put( SfxVoidItem( SID_ATTR_ZOOMSLIDER ) ); rReq.SetReturnValue( SfxVoidItem( rReq.GetSlot() ) ); SVX: new SfxVoidItem(SDRATTR_SHADOW3D ); new SfxVoidItem(SDRATTR_SHADOWPERSP ); I didn't check the [all...] links in OpenGrok, but with these hits I already feel that we simply should keep the old behavior... The question why ItemSet::Put must allow that nWhich differs from the item's which is still open. I assume that it's related to different pools having different WhichIds for the same item. But knowing it for sure would perhaps allow us to define a less fuzzy interface. Putting them on a different ID than it's own ID doesn't sound right to me. For the different which ID stuff we have the SlotID mechanism. But that would probably need cloning the item and changing the which when putting it into a pool/itemset where different which ids are use. So the situations where we put items on different IDs should be investigated more closely. But again, looking at pItem = new SfxVoidItem( m_nSlotID ); rReq.SetReturnValue( SfxVoidItem( rReq.GetSlot() ) ); it seems to be a supported and wanted scenario. Malte. Regards, Mathias - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] SfxItemSet assumptions and assertions
And now that I just read Bjoerns last mail wrt old/current behavior: At least for the EditEngine I am quite sure these items have been in some ItemPool, but never in an ItemSet. So that might be the reason why I never had an issue with that. Not sure what would happen with the VoidItems listed below in other places. Malte. Malte Timmermann wrote, On 06/16/10 11:07: Mathias Bauer wrote, On 06/16/10 10:11: On 15.06.2010 11:47, Björn Michaelsen wrote: Well, the implementation in new_itemsets only checks for the which id being 0 and never checks for the type being an SfxVoidItem (outside assertions). So an disabled item is consistently defined as any item returning an which id of 0 in the new itemset implementation. That's an improvement and it allows to use the API consistently. OTOH it is still ugly. :-) I consider the way how the ItemSet codes the disabled status an implementation detail. Now the interesting part is finding the clients of the itemset that rely on void items being interpreted as disabled by the itemset and fixing those Question is if that is more effort then replacing all code that puts items with ID = 0 with code calling DisableItem instead. That would make putting an item with ID=0 an invalid action. BTW: I don't remember if any of the two ItemSet implementations returns an VoidItem in a GetItem call for a disabled item or if NULL is returned then. IMHO it always should be the latter. We have const SfxPoolItem Get() and const SfxPoolItem* GetItem(...) Not sure why we have two different Get Methods, but the first doesn't allow to return NULL, so I assume the second one would also have to return the same VoidItem for consistency. Back to your primary topic. If we identify the places where a VoidItem with ID != 0 is put, and if the developers state that this is by intent, we can remove that assertion and make putting VoidItems with ID != 0 a valid action that does not disable that item. Yes, I guess it would be better to keep allowing VoidItems with Which != 0. Or we search for all places where we might have != 0 VoidItems. Places I found: EditEngine has some, but that could be changed. I have no clue here: http://svn.services.openoffice.org/opengrok/xref/DEV300_m81/sfx2/source/control/sfxstatuslistener.cxx#233 if ( pType == ::getVoidCppuType() ) 232 { 233 pItem = new SfxVoidItem( m_nSlotID ); 234 eState = SFX_ITEM_UNKNOWN; 235 } I don't think the slot id would be zero... But this looks like we really would mix up slot and which ids. Some more such things in sfx2/source/control/ SW: rReq.SetReturnValue(SfxVoidItem(bLabel ? FN_LABEL : FN_BUSINESS_CARD)); rSet.Put( SfxVoidItem( SID_ATTR_ZOOMSLIDER ) ); rReq.SetReturnValue( SfxVoidItem( rReq.GetSlot() ) ); SVX: new SfxVoidItem(SDRATTR_SHADOW3D ); new SfxVoidItem(SDRATTR_SHADOWPERSP ); I didn't check the [all...] links in OpenGrok, but with these hits I already feel that we simply should keep the old behavior... The question why ItemSet::Put must allow that nWhich differs from the item's which is still open. I assume that it's related to different pools having different WhichIds for the same item. But knowing it for sure would perhaps allow us to define a less fuzzy interface. Putting them on a different ID than it's own ID doesn't sound right to me. For the different which ID stuff we have the SlotID mechanism. But that would probably need cloning the item and changing the which when putting it into a pool/itemset where different which ids are use. So the situations where we put items on different IDs should be investigated more closely. But again, looking at pItem = new SfxVoidItem( m_nSlotID ); rReq.SetReturnValue( SfxVoidItem( rReq.GetSlot() ) ); it seems to be a supported and wanted scenario. Malte. Regards, Mathias - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] SfxItemSet assumptions and assertions
Hi Bjoern, Björn Michaelsen wrote, On 06/14/10 13:34: Hi all, while testing the new SfxItemSets in cws new_itemsets I came across a few interesting uses of itemsets which I had considered to be illegal (but I might be wrong there). I assumed: - non-void items should only be put at the same which id in a set as the which id on the item itself. - void items should always have a which id of 0 and are allowed to be put anywhere. Who says they would need to have which ID 0 ? Here are a few examples where these assumptions fail: Opening an empty writer document for examples fires the assertion at: http://hg.services.openoffice.org/cws/new_itemsets/file/5d3400d7452f/svl/inc/svl/itemset.hxx#l74 The backtrace shows the first call triggering this is coming in from SwDoc::GetTxtCollFromPool(..), followed by calls from SwFmt::SetFmtAttr(..). Is there any reason why a non-void, non-invalid item is put at a different which id in the set than the which id of the item itself? Sound like the road to perdition to me ... When typing in a number in a cell in calc the assertion at: http://hg.services.openoffice.org/cws/new_itemsets/file/5d3400d7452f/svl/source/items/itemset.cxx#l98 The backtrace shows the call triggering this is coming in from EditView::GetAttribs(..). Is there any reason why a void item should have a which id 0 set? And if yes, what is the reason for using such semantics? E.g. how are a void item with which id 0 and a void item with which id 0 differing in behaviour? The EditEngine is using VoidItems for some attributes which are only markers. SW at least did the same, don't know if it still does. And because I mainly use which IDs when working with attributes, and not RTTI, they have non zero which IDs... Malte. Best Regards, Bjoern - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] SfxItemSet assumptions and assertions
Björn Michaelsen wrote, On 06/14/10 16:09: Am Mon, 14 Jun 2010 15:11:57 +0200 schrieb Malte Timmermann malte.timmerm...@sun.com: Hi Bjoern, Björn Michaelsen wrote, On 06/14/10 13:34: Hi all, while testing the new SfxItemSets in cws new_itemsets I came across a few interesting uses of itemsets which I had considered to be illegal (but I might be wrong there). I assumed: - non-void items should only be put at the same which id in a set as the which id on the item itself. - void items should always have a which id of 0 and are allowed to be put anywhere. Who says they would need to have which ID 0 ? Well, as I said I can be wrong here. But a SfxVoidItem with which id set to 0 is interpreted as disabled. However, some functions only test for the type being SfxVoidItem, while others test only for the which id being 0. Thus having a half-disabled item might lead to interesting results. See for example: http://svn.services.openoffice.org/opengrok/xref/DEV300_m82/svl/source/items/itemset.cxx#542 (SfxItemSet::GetItemState) http://svn.services.openoffice.org/opengrok/xref/DEV300_m82/svl/source/items/itemset.cxx#589 (SfxItemSet::Put) http://svn.services.openoffice.org/opengrok/xref/DEV300_m82/svl/source/items/itemset.cxx#2040 (SfxItemSet::DisableItem) So, when you used SfxVoidItems, did you intend them to be interpreted as disabled? No - but it doesn't matter, because I only use them for character attributes (single items), not for paragraph attributes (item set). They probably only get into the item sets because the SfxItemPool has default items, I don't think that I put them in some SfxItemSet explicitly. Of course they get into the SfxItemPool... BTW - they are also used in the binary document format, SfxItemSet load/store, so I also don't know what would happen here if the IDs where 0. Malte. Best Regards, Bjoern - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Not so free version of Openoffice
Tor is right, see http://wiki.services.openoffice.org/wiki/SellingOOo#FAQ:_Is_it_Legal_to_sell_OpenOffice.org_Software.3F Malte. Tor Lillqvist wrote, On 04/14/10 11:40: Is somebody trying to earn money by distributing Openoffice without the consentment of SunMicrosystems? Nothing in the license prohibits that, as far as I know. Sure, it is unethical. --tml - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Should assertions abort?
Christian Lippka wrote, On 02/12/10 12:34: Assertions are the first, cheapest and easiest way of defense in the fight for software quality. My 2c, assertions must not abort, developer must use non pro builds, assertions should be used in every new peace of code. I fully agree. -1 for assertions to abort +1 for developers to use non-pros -1 for discussing here whether or not QA should use non-pros, because it IMHO has absolutely no influence on how assertions should behave. And if you want QA to use non-pros, they for sure would give up quite soon when assertions always abort. Malte. Christian Lippka wrote, On 02/12/10 12:34: Am 12.02.2010 12:05, schrieb bjoern michaelsen - Sun Microsystems - Hamburg Germany: On Fri, 12 Feb 2010 09:11:21 +0100 Frank Schoenheit, Sun Microsystems Germanyfrank.schoenh...@sun.com wrote: - Developers should use non-product builds *only*. That's a very apparent measure, still, a lot of people don't do. If you ask why, often the answer is it's unusable 'cause of the many assertions. Hmm? I am one of the devs that rarely use a non-pro build, but not because it's unusable 'cause of the many assertions, but because there are simply to many differences from the product build in them, causing issues (first of all: annoying build breakers). I do, however build with DEBUG=true to see assertions. So you see OSL_ASSERTS from your code, but you never see asserts from code that your code uses. Or things you break with your code in other places. Can you elaborate on the issues that bother you? And I may be wrong but DEBUG=true in pro does not give DBG_ASSERTs. On the topic of what is an assertion: Yes, assertions should abort. Otherwise, they are not an assertion, but something that is better covered by OSL_TRACE. Assertions are different to build breakers enforced by the changes for warning free code. You can very easy verify that you have not introduced any compiler warning with your changing by simply build the complete office (yes not 100% I know, but you can be very sure). But you can never be 100% sure that you didn't introduced assertions since you can't check every code path there is that may be affected by your changes. Therefore assertions will pop up in the master and an abort will render non pro unusable so people will stop introducing them. Assertions are the first, cheapest and easiest way of defense in the fight for software quality. My 2c, assertions must not abort, developer must use non pro builds, assertions should be used in every new peace of code. Regards, Christian (using non pro builds for his daily work since 1999) - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Security
Cool :) I guess you should visit the OOo Security Project, and subscribe to that mailing list: http://security.openoffice.org Malte. Ravipriya Thushara wrote, On 10/21/09 06:26: Hi, Im developing a File format fuzzer for Open Office.org. So It'll be easier to find vulnerabilities using it. I'll be able to release in few weeks. Cheers, Ravipriya Thushara - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Drawing layer performance problem.
Hi zhiyong xue, for the first question: You are right that there shouldn't be too many SdrObject::RecalcBoundRect. I guess calls to RecalcBoundRect are not avoidable, because the ODF file only contains the object size, which doesn't have to be the same like the real text area. But it should only be done on demand, for the objects that become visible on the screen. If Draw (still) does it for all pages when loading the document, that needs to be changed. You might want to continue this discussion in the performance project: d...@performance, http://performance.openoffice.org/. Don't forget to register for the mailing list of the project :) Best, Malte. zhiyong xue wrote, On 08/24/09 10:28: There are two performance problems in Drawing layer: 1) Load a Presentation document. A Presentation document contains many text object, So it will spend too many time to calculate object bound rectangle in loading. (The function is SdrObject::RecalcBoundRect ). The first question is: can we return the snap rectangle directly for text object when getting its bound rectangle? 2) Drawing Gradient/Hatching/Bitmap. a) Insert a shape and fill it with Gradient/Hatching/Bitmap b) Insert another shape and insert some text, set a text animation to it. Move the shape to overlap with previous shape. The OpenOffice CPU usage is very high. The text animation will paint both two shapes, and draw Gradient/Hatching/Bitmap consume many CPU time. The second question is: Can we replace drawing Gradient/Hatching algorithm to system API? I know Windows and Mac OS X support drawing Gradient/Hatching API. Thanks. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Bug (fix attached) related to document signatures
Hi Tomas, thanks for this - IIRC I already saw similar effects with other ID cards. May I ask you to file an issues for this, and attach the patch (which was cut off by the mailing list anyway)? The owner would be jl. Thanks and best regards, Malte. PS: You might want to look at our new security project security.openoffice.org, and subscribe to the corresponding mailing list disc...@security.openoffice.org Tomas GARCIA-MERAS CAPOTE wrote, On 07/12/09 23:12: Hello, we're working on a project for promoting the use of the new (smartcard and certificate based) Spanish National ID Card (called DNIe) on Open Source environments. The project is promoted by CENATIC, a working group of Spanish public administration organisms (Spanish Ministry of Industry and some local and regional governments among others) and some private corporations (Atos Origin Spain, Sun Microsystems Spain, etc.). Within the scope of our project, we've found a few interoperability problems between the DNIe and OpenOffice.org (OOo). I'll try to describe the problem and how we're trying to fix it (you can find our patch attached): Problem description: When parsing RFC 2253 DN's for showing the available certificates for signing the current document to the user, OOo does the tokenizer directly using the ',' character as separator, but the Spanish National ID Card (smartcard-based) has certificates with their principals according to the following format: CN=NAME SURNAME1, SURNAME2 (CERTUSE),givenNAME=NAME,SN=SURNAME,serialNumber=... So, instead of showing the Common Name as: NAME SURNAME1, SURNAME2 (CERTUSE) OOo shows: NAME SURNAME1 Because the ',' between SURNAME1 and SURNAME2 is interpreted as token separator. The bug is critical, since there are two certificates on the Spanish ID card, one for digital signature and the other for authentication, with CNs as: NAME SURNAME1, SURNAME2 (SIGNATURE) NAME SURNAME1, SURNAME2 (AUTHENTICATION) But OOs shows them as: NAME SURNAME1 NAME SURNAME1 That is, with the same description for both certificates, which leads users to confusion, because you cannot identify which certificate is for signing and which is for authentication. Our Fix: Now, ',' characters enclosed between a pair of '' characters are not interpreted as token separators. We've changed only the String GetContentPart( const String _rRawString ) method of the OOO310_m11/xmlsecurity/source/dialogs/resourcemanager.cxx file, but not the other variants (there's at least another variant that allows to choose which RDN to retrieve, String GetContentPart( const String _rRawString, const String _rPartId )), mainly because only the changed one was used for showing certificate descriptions (CNs) to the users. We've contacted Peng Chandler (author of the patched code), and although he finds the patch right, since he's no longer involved on OOo development he suggested we should send the patch and bug description to OOo directly. Please, don't hesitate to ask for any other information or change you need. Also, it would be nice to know if the bug and patch are being accepted or not ¿Can you please keep us updated? TIA. Best regards: Tomás -- This e-mail and the documents attached are confidential and intended solely for the addressee; it may also be privileged. If you receive this e-mail in error, please notify the sender immediately and destroy it. As its integrity cannot be secured on the Internet, the Atos Origin group liability cannot be triggered for the message content. Although the sender endeavours to maintain a computer virus-free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted. Este mensaje y los ficheros adjuntos pueden contener informacion confidencial destinada solamente a la(s) persona(s) mencionadas anteriormente pueden estar protegidos por secreto profesional. Si usted recibe este correo electronico por error, gracias por informar inmediatamente al remitente y destruir el mensaje. Al no estar asegurada la integridad de este mensaje sobre la red, Atos Origin no se hace responsable por su contenido. Su contenido no constituye ningun compromiso para el grupo Atos Origin, salvo ratificacion escrita por ambas partes. Aunque se esfuerza al maximo por mantener su red libre de virus, el emisor no puede garantizar nada al respecto y no sera responsable de cualesquiera danos que puedan resultar de una transmision de virus. -- - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional
Re: [dev] OpenOffice running on Windows 7
Mechtilde wrote, On 06/12/09 10:48: What happens with the system dialogs under Windows 7? Do we expect the similar problems as with Vista? We expected, and people are already working on this. At least on the file picker, not sure about other dialogs. Malte. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] [ClassRoom] Log available : introduction to git tool
Jens-Heiner Rechtien wrote, On 06/12/09 15:33: Gi Eric, eric.bachard wrote: Hi, FYI, we had a nice ClassRoom, about git introduction, made by Jérémie Laval (from UTBM). As usual the log is available at : http://wiki.services.openoffice.org/wiki/Education_ClassRoom/Previous_Logs/git Thanks again to Jérémie and the attendees ! Regards, Eric Bachard P.S. : the choice of explain git tool has been proposed long time ago by Jérémie, and is completely orthogonal to the current choice to use mercurial. Last but not least, we'd be happy to have a ClassRoom about mercurial. Heiner, do you read me ? :-) Yup, have read this :-) We can setup a mercurial classroom as well, after I'm back from vacation (July, 6th). Let's say at sometime in mid July? Well - maybe we can use that classroom as a kick-off for using mercurial only then? ;) Malte. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Please fix these security flaws that could be considered bugs ...
Well, Rene is right, but I also agree that it should be easy for people to delete the list. Instead of some config item in a dialog, which nobody will find, an extra menu item at the end of the list (with a separator above) would be nice: Clear list Or introduce some config in the dialog where the user also can configure the entry count for that list. FWIK the value is in some xcu file, but there is no UI for changing it. (BTW, Nathanael - I guess with changing that value to 0 you can disable the list) I am not aware of what other kind of private data OOo collects while being used. If it's more than just this, I would prefer an other solution: Clear private data like in FireFox. Wrt the wish to automatically remove entries where the document is no longer available: This is not so obvious for me. I sometimes open documents from encrypted containers or network shares which I mount on demand only, or from USB devices, so opening the menu in the wrong time would remove these items (not that I would care about it... ). It can also be a time consuming task to figure out whether or not the document still exists, even for file URLs (because of slow network connections, auto mounts, ..). Malte. PS: Nathanael - please avoid so many all-capital-letters words in your email. I and probably many other people don't read such mails if people are 'shouting' that much. I only did read it because it had the word security flaws in the heading... Rene Engelhard wrote, On 04/16/09 10:08: Hi, Nathanael Kennedy wrote: There are serious problems, even at a security level, with OpenOffice... There is no EASY OR STRAIGHTFORWARD WAY to DELETE the entire list of Recent Documents. Documents I no longer care about, I of course delete. DOCUMENTS REMAIN ON THE RECENT DOCUMENTS LIST LONG AFTER THEY'VE BEEN DELETED (FOR MONTHS, SOMETIMES!) This is a serious annoyance could even be considered a serious security flaw on a computer used by several individuals. Nonsense. For this, you have separate accounts for the people and each person has its own local configuration - no problem when sharing the pc. No security thing at all, an annoyance maybe, yes, but if yu can't set up your computer *properly* for multi-user Regards, Rene - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Please fix these security flaws that could be considered bugs ...
Rail Aliev wrote, On 04/16/09 11:00: On Thursday 16 April 2009 12:28:04 Malte Timmermann wrote: Well, Rene is right, but I also agree that it should be easy for people to delete the list. BTW, there is History Manager extension [1] where you can tweak your recently used document count (history) using GUI. 1. http://extensions.services.openoffice.org/project/histmngr Didn't know that, thanks for the hint :) Malte. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Qt as a valid replacement for VCL
When reading the announcement, I also though that Qt would be a valid option now :) The reason that I didn't post it here was that I didn't want to discuss it when nobody would work on a VCL replacement now. Sun Team in Hamburg not working on it of course doesn't mean that not somebody else could do, but: I think it's reasonable to wait what the project renaissances (http://wiki.services.openoffice.org/wiki/Renaissance) will bring us. If the outcome of that project is that almost all UI would be created from scratch, than changing the toolkit is not so much (extra) work compared to just switching to a new toolkit. And just for clarification: Qt could be something for the _widget_ part of VCL. Exchanging the output device part of VCL probably wouldn't be very reasonable, because a lot of magic for CTL, RTL, Font stuff, meta file recording etc. is built in there. At least it would be a (very) big additional chunk of work. Malte. Éric Bischoff wrote, On 01/16/09 16:31: Le vendredi 16 janvier 2009 16:08:40 eric b, vous avez écrit : I don't know the API, but I got several questions : The API is really a programmer's relief. Simple, straightforward, clean. - I know the Linux/ Mac side could be ok, but how does it work on windows ? Short answer: very well. BTW, one of the advantages of such a change would be that all widgets would have the native look and feel of the platform. - vcl has a lot of deep roots in OOo, land this will be a long and difficult task to change. Yes. But it's been years that VCL replacement is discussed, now OOo has an opportunity to delegate the graphical lowest layers to a rock-solid, C++, toolbox. There's of course the intermediary solution to have a VCL-Qt driver (vclplug) that would do the job in the intermediary phase. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
Re: [dev] Qt as a valid replacement for VCL
An other thing that just came to my mind: Accessibility implications on different platforms have to be considered There is much work in progress with ATK and switching to D-BUS, so that non-gnome environments can use ATK. That will take some time. And I am also not sure about the status of Qt's IAccessible2 implementation on Windows - which then would also mean that all OOo UAA implementations would need to be bridged to IA2 then, instead of to Java Accessibility APIs. Without Accessibility issues solved/solvable, every toolkit change is a no-go. Malte. Malte Timmermann wrote, On 01/16/09 16:44: When reading the announcement, I also though that Qt would be a valid option now :) The reason that I didn't post it here was that I didn't want to discuss it when nobody would work on a VCL replacement now. Sun Team in Hamburg not working on it of course doesn't mean that not somebody else could do, but: I think it's reasonable to wait what the project renaissances (http://wiki.services.openoffice.org/wiki/Renaissance) will bring us. If the outcome of that project is that almost all UI would be created from scratch, than changing the toolkit is not so much (extra) work compared to just switching to a new toolkit. And just for clarification: Qt could be something for the _widget_ part of VCL. Exchanging the output device part of VCL probably wouldn't be very reasonable, because a lot of magic for CTL, RTL, Font stuff, meta file recording etc. is built in there. At least it would be a (very) big additional chunk of work. Malte. Éric Bischoff wrote, On 01/16/09 16:31: Le vendredi 16 janvier 2009 16:08:40 eric b, vous avez écrit : I don't know the API, but I got several questions : The API is really a programmer's relief. Simple, straightforward, clean. - I know the Linux/ Mac side could be ok, but how does it work on windows ? Short answer: very well. BTW, one of the advantages of such a change would be that all widgets would have the native look and feel of the platform. - vcl has a lot of deep roots in OOo, land this will be a long and difficult task to change. Yes. But it's been years that VCL replacement is discussed, now OOo has an opportunity to delegate the graphical lowest layers to a rock-solid, C++, toolbox. There's of course the intermediary solution to have a VCL-Qt driver (vclplug) that would do the job in the intermediary phase. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.org For additional commands, e-mail: dev-h...@openoffice.org
[dev] OOo BoundsChecker How-To
Hi, it's been a while (6 years) that I had created an OOo BoundsChecker How-To, and I had to figure out that it was not 100% up to date anymore ;) Some changes had been necessary to reflect 3-Layer-Office and new Memory Manager. Instead of updating the html file in the tools project, I decided to create a Wiki page for this, which will make it easier for further changes: http://wiki.services.openoffice.org/wiki/Error_Detection_with_BoundsChecker The old html file will point you to that direction. HTH, Malte. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Re: XUL to replace VCL?
Alan Lord wrote, On 11/20/08 02:51 PM: Jan Holesovsky wrote: snip / The ongoing work is internally called 'Layout', and Michael Meeks had a presenatation about that on this year's OOoCon (unfortunately the slides are not uploaded yet). They are now. http://www.gnome.org/~michael/data/2008-11-20-layout.pdf Any reason why it's not submitted to OOo, to be available at http://marketing.openoffice.org/ooocon2008/programme/friday_1470.odp ? Malte - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] SVN-ignored files
In short: Can we please add the platform-dependent output tree names as svn:ignore property to all modules? +1 Malte. Frank Schönheit - Sun Microsystems Germany wrote, On 10/16/08 10:53 AM: Hi, now that we start working with SVN-based CWSes, those module output trees (common[.pro], unxlngi6[.pro], wntmsci12[.pro] etc.) become somewhat inconvenient, as they clutter your svn status output, for example. http://wiki.services.openoffice.org/wiki/OOo_and_Subversion#Ignoring_output_trees discusses this, and suggests to add those names to the global ignore list, claiming this is better than adding them as per-directory property. I beg to disagree, for the following reasons: The global ignore list applies to each and every location in the source tree, where we actually want to ignore those output trees only in the module directories. So, using the global list is overkill, and makes using files/folders, which match the respective pattern, in other locations unnecessarily difficult. Second, using the global ignore list for that purpose is something which everybody needs to do for himself (and for those of us working on different Windows machines without roaming profiles, it means doing it on every machine). Third, The Book, in http://svnbook.red-bean.com/en/1.5/svn.advanced.props.special.ignore.html, has a sentence which also suggests we should use svn:ignore instead of the global ignore list: The global list of ignore patterns tends to be more a matter of personal taste and ties more closely to a user's particular tool chain than to the details of any particular working copy's needs. Surely the our output tree names/locations are a facet equal across all working copies, so we should address the issue in the repository. In short: Can we please add the platform-dependent output tree names as svn:ignore property to all modules? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] SVN-ignored files
Any explanation for -1? My explanation for +1: People shouldn't have to care. If working on some SVN repository based project, all the tweaks should be automatically there, w/o urging the developer to create any global svn settings. If many different projects would start urging the developer to do so, it would be a PITA - so why should we do? Malte. Jens-Heiner Rechtien wrote, On 10/16/08 12:34 PM: bjoern michaelsen - Sun Microsystems - Hamburg Germany wrote: On 10/16/08 11:00, Malte Timmermann wrote: In short: Can we please add the platform-dependent output tree names as svn:ignore property to all modules? +1 +1 -1 Heiner - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Certificate database architecture for NSS in Openoffice
Since it's 100% the same question you asked yesterday: See my answer from yesterday, or rephrase. Make sure to be subscribed to the list, otherwise per default you won't get the answers... Malte. Ruchi Lohani wrote, On 02.07.08 18:07: Hi, Can anybody explain me how Open office uses the certificate database for NSS ssl communication? I see that initially it used the cert8.db from the Mozilla or Thunderbird profile directory and there was a bug filed to improve this as it can be erroneous from Berkeley db point of view. Can anybody give me some insight on how it has been changed and where does open office keep the copy of the cert8.db files. I installed open office but could not find the cert files anywhere in the open office profile directory. Thanks - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Certificate database architecture for NSS in Openoffice
OOo isn't intended to manage certificates. IMHO every user should have only *one* key store for being used from all apps, with central/system management tools. Unfortunately we don't have the ideal situation anywhere: Windows offers such a central place, but at least Mozilla doesn't make use of it. Linux/Solaris doesn't have the central store, so we have to rely on something else. So we simply use the stores managed by some NSS application, or the Windows Certificate MMC. We don't store anything there but only read them, so I think this should work fine. Malte. Ruchi Lohani wrote, On 02.07.08 19:08: Thanks for the reply. I am subscribed now. One more thing I couldn't understand is if open office uses the same database files from thunderbird, mozilla or say firefox, will it be good to do that? As far as I understood from NSS, since these databases are not sharable its not recommended to use those for other applications also and applications should have their own copy of db. Any specific reasons for the way why open office is doing it? Thanks -Ruchi Date: Tue, 01 Jul 2008 12:14:16 +0200 From: Malte Timmermann [EMAIL PROTECTED] Content-type: text/plain; charset=ISO-8859-1 Subject: [dev] Certificate database architecture in OpenOffice No copy - simply using your default/current mozilla profile. Search order for profiles is thunderbird-mozilla-firefox http://wiki.services.openoffice.org/wiki/Certificate_Detection On Windows, the personal Windows key store is used, instead of Mozilla. Malte. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 02, 2008 9:19 AM To: dev@openoffice.org Cc: Ruchi Lohani Subject: Re: [dev] Certificate database architecture for NSS in Openoffice Since it's 100% the same question you asked yesterday: See my answer from yesterday, or rephrase. Make sure to be subscribed to the list, otherwise per default you won't get the answers... Malte. Ruchi Lohani wrote, On 02.07.08 18:07: Hi, Can anybody explain me how Open office uses the certificate database for NSS ssl communication? I see that initially it used the cert8.db from the Mozilla or Thunderbird profile directory and there was a bug filed to improve this as it can be erroneous from Berkeley db point of view. Can anybody give me some insight on how it has been changed and where does open office keep the copy of the cert8.db files. I installed open office but could not find the cert files anywhere in the open office profile directory. Thanks - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Certificate database architecture in OpenOffice
No copy - simply using your default/current mozilla profile. Search order for profiles is thunderbird-mozilla-firefox http://wiki.services.openoffice.org/wiki/Certificate_Detection On Windows, the personal Windows key store is used, instead of Mozilla. Malte. Ruchi Lohani wrote, On 01.07.08 02:35: Hi, Can anybody explain me how Open office uses the certificate database for NSS ssl communication? I see that initially it used the cert8.db from the Mozilla or Thunderbird profile directory and there was a bug filed to improve this as it can be erroneous from Berkeley db point of view. Can anybody give me some insight on how it has been changed and where does open office keep the copy of the cert8.db files. I installed open office but could not find the cert files anywhere in the open office profile directory. Thanks - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] digital signature questions - multiple signatures, etc
Jurgis, multiple signatures already work, all are contained in the same documentsignature.xml. We already have on our list to offer fields for displaying signature information, but IMHO no concrete plans to start such an implementation because we also have many many other things to do. Signing parts of a doc is a very complex issue when it comes to user interaction, automatic styles, and how to display/manage different things. We are aware of this valid feature request, but Anyway, it's open source - maybe you volunteer to work on something, for example the fields? Malte. Jurgis Pralgauskis wrote, On 22.05.08 13:57: Hello, we are looking for such digital signature functionality for odf: * ability for several persons to sign the same document (the signatures can be hierarchically contained or independant) now I see documentsignature.xml, which is replaced when signing again.. * ability to sign parts of document (again, by different persons) * or to have some fields of document, which are ignored when hashing where should I look/ask for more info? Thanks in advance ps.: one more thing which we are thinking about in future is ability to show signee info in special fields -- for example physical signature picture :) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] List of 2730 uncallable methods in DEV300_m10
Methods with very strange names, hard to speak ;) No just kidding - it means that very likely (100%?) these methods are never used/called from somewhere. Malte. Frank Schönheit - Sun Microsystems Germany wrote, On 06.05.08 09:51: Hi Caolan, See http://people.redhat.com/caolanm/callcatcher/DEV300_m10/ for full list. Top three offenders are... sorry for the dumb question, but what are uncallable methods? Ciao Frank - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] RFC: java 1.5
My point of view: Most people agree that OOo mustn't loose (meta) data when Java is not available, but plug ins for working with meta data can rely on Java. Changing OOo's Java base line from 1.4 to 1.5 is fine for most people then. Malte. Charles-H. Schulz wrote, On 03/06/08 18:02: Hi, well, I was wondering where we were standing on this issue.. Best, Charles. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Digital signatures in OOo. What about OOo 3.0?
Having a Plugin doing the signature verification is one thing. The Plugin could even alert the user in case the signature is broken. But right now there is no way to get that information into the OOo framework, which then makes sure that the status occurs in the status bar, and that the signature status can be used for the macro security level stuff Malte. Joachim Lingner wrote, On 03/04/08 17:08: I learned that there are document load and document save events which could be received by an extension. This could be some kind of entry point for a signature service in an extension. But then again you need to provide your own dialog. You could of cause use the low level services (unpublished) but with the risk that the implementation breaks later. Or you may also try to disentangle the code of the document signature service to have a clearly separated GUI packed into a UNO service. Then you could use this GUI as well from your extension. -Joachim Joachim Lingner wrote: Giuseppe Castagno wrote: Hi Joachim, Joachim Lingner wrote: Giuseppe Castagno wrote: Hi all, ... The idea was to write an extension to sign, but it seems that ATM OOo lacks the needed stuff, e.g. it doesn't seem possible to sign a document with a 3rd part signature method. Thats true. There is currently no way of plugin in a different mechanismn let alone something to switch between the them. Actually I found a bunch of services in that area (an example [1]), but almost all are tagged as 'unpublished'. True. 'unpublished' because not supported or what? unpublished interfaces can be changed, removed at any time. So if you write an extension you should use always published ones. Are there any plan to implement this in 3.x codeline? No, afaik. I see, lack of resources or some other reason? Well, you are the first to ask for such a pluggable signature framework AFAIK. Given that it is a useful feature, and I think it is, there is still the question of who is going to do it. In that sense it is always a question of priority and resources. There is also the problem that the GUI code is mixed up signing logic. This needs to be separated. One could also think of an options page where the user could select different signing methods. However, there is nothing planned yet. I had a look to the code stuff. It seems all inside xmlsec module. If I have specific questions to the current code, is there a dedicated ML to ask for? Please ask on [EMAIL PROTECTED] -Joachim Giuseppe. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] RFC: java 1.5
Thorsten Behrens wrote, On 03/03/08 17:21: On Mon, Mar 03, 2008 at 04:08:16PM +0100, Charles-H. Schulz wrote: On Mon, 2008-03-03 at 15:37 +0100, Michael Stahl wrote: what are your opinions on making java 1.5 a requirement for OOo 3.0? Unfavorable. (this is a personal opinion) If -and only if- this question is framed in that way, I am also unfavorable. AFAICT java is not required for OOo to run. Yep. The party line up to now was to have Java used for non-essential, non-core features. Yes. That's the way it works nowadays, and we shouldn't change that. Requiring Java for an OOo core feature like ODF 1.2 Meta Data support is a no-no, IMHO. Malte. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] I Want to get involved in Flash-SWF format export utility from within OpenOffice desktop software
Radheevar, for which document types are you considering the Flash export? Right now we have one for Presentations. Not sure if people need one for Text documents or Spreadsheets. I think there is some space for improvement in the export of presentations, so if you like to work on that, it would be very appreciated, IMHO :) Malte. [EMAIL PROTECTED] wrote, On 01/27/08 10:43: Hello All, Greetings !!! I am a Software developer basically working on Multimedia applications. I am very good at c++. I was thinking whether I can get involved in writing a exporting utility from OpenOffice Document format to Flash SWF format. I am very much intrested in doing this for OpenOffice. I love opensource software and see that future is full of opportunities for man kind. Flash is a openformat and ppl love to see flash files out of their documents so that they can easily use it on web. with a export utility like this openoffice would become a very popular tool :) beleive in my words. Currenlty I know ways of acheiving flash Player version 6 to 8 format SWF files. However This would be sufficient for ages to come. I want to help all those ppl struggling to get Flash SWF files for use on web. I am from the garden city Bangalore, India. I can contribute in my free time for this module of Openoffice. Currently OpenOffice creates PDF exports from the ODF files, I want to write a similar utility which would export to SWF files. Please let me know how I can get involved in this vision of mine. I would like to have more info or help on this from you guys. I am an independent developer and currently working as a software consultant in bangalore on multimedia technologies. I would be intrested to know if I can get some remuneration of my work on this, if possible, else also I am prepared to do this job. I shall be waiting for your replies. Thanks Regards Radheevar http://www.vajrasoftech.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] how to sign a document macro ?
Open the doc, choose tools / macros / digital signatures Malte. Oliver Brinzing wrote, On 01/16/08 09:46: Hi, i have a question about how to sign a document macro (*only* the macro, *not* the document content). For example a user should be able to edit the document but not allowed to change the macro ... if i sign a macro and edit the document i get a message that the signature will be removed on save ... BTW: i set the macro security to high any hints ? Oliver - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] how to sign a document macro ?
Then something is broken - file an issue please. Malte. Oliver Brinzing wrote, On 01/16/08 13:55: Hi Malte, Open the doc, choose tools / macros / digital signatures that's exactly what i did. After signing i can reload the document and execute the macros ... but if i edit the document (*not* the macro) the macro signature got lost and reloading leads to an error cause the macros are unsigned now ... i am using oo 2.3.1 (vista) Oliver - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Disabled Record macro menu in Impress and Draw
If it's not implemented, I wonder if it wouldn't be better to remove the menu item instead of disabling it... Malte. Mathias Bauer wrote, On 08/20/07 08:44: KAMI wrote: Hi! Few minutes ago someone said on IRC channel the Record Macro menu elements in the Tools are disabled in Impress and Draw. I can confirm it hoewer it works well in Writer and Calc. What is the problem with it? Why is it disabled? .. Because it is not implemented. The macro recorder builds upon some functionality of the old sfx2 framework. This part was never implemented reliably in Draw/Impress and the residues have been removed after we moved to the new UNO based API. Writer and Calc where a bit more lazy removing that parts and so it was possible to use it again. Ciao, Mathias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] A question about the destructor
Andreas... Andreas Martens wrote: Hi Malte, Malte Timmermann wrote: IMHO there should be some notification, so the Layouts are simply listeners and we don't need the parameter. That's what I meant. My question was: why do we need this parameter in SwDoc::DeleteSection(..)? But I am not sure - you are the expert ;) So if a broadcast is used, no Layout access is needed. But if the layouts have to be notified directly, you are right and we might need a list of layouts. I do not understand this. Broadcasting will work with lists (of layouts), too. So there where is the difference? It was meant: If there is no broadcasting, then we might need the list... So seams we don't need that. Right now we don't have that, and normally we didn't want that, because we are just moving away the layout from the SwDoc to the ViewShell... Yes, so again, why do we need this layout parameter for DeleteSection(..)? Right now, the SwDoc has the Layout, but this will move to the ViewShell. Seems the Layout is used in DeleteSection for some reason, or in an other methods called from there. By quickly looking in the code, I can't see why it's needed - LiuTao, can you clarify? Malte. Any comments/ideas? No, only questions ;-) Regards Andreas Malte. Andreas Martens wrote: Hi LiuTao, liutao wrote: Hello all, I am absorbed in modularization of ODFToolkit project about 2 months. But now I face a question as follows: SwRedline::~SwRedline() { .. if( !GetDoc()-IsInDtor() ) GetDoc()-DeleteSection( pCntntSect-GetNode(),rLayout ); .. } The parameter rLayout in function DeleteSection is added by me and this parameter is passed from a view class(ViewShell). Why does DeleteSection(..) needs a dedicated layout? This function removes some nodes from the Writer model. If these functions needs access to a layout, I assume this is e.g. for notification. But then I think _all_ layouts need to be notified. So you don't need a parameter, you need the access to all layouts?! What do you think? That means the destructor don't know this patameter.but the modularization work require I to add this parameter.how to deal with it and make the destructor can disposal this function. Best Regards, LiuTao Kindly regards Andreas --- Andreas Martens (ama) - OpenOffice.org Writer OpenOffice.org Engineering at Sun: http://blogs.sun.com/GullFOSS - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] A question about the destructor
IMHO there should be some notification, so the Layouts are simply listeners and we don't need the parameter. But I am not sure - you are the expert ;) So if a broadcast is used, no Layout access is needed. But if the layouts have to be notified directly, you are right and we might need a list of layouts. Right now we don't have that, and normally we didn't want that, because we are just moving away the layout from the SwDoc to the ViewShell... Any comments/ideas? Malte. Andreas Martens wrote: Hi LiuTao, liutao wrote: Hello all, I am absorbed in modularization of ODFToolkit project about 2 months. But now I face a question as follows: SwRedline::~SwRedline() { .. if( !GetDoc()-IsInDtor() ) GetDoc()-DeleteSection( pCntntSect-GetNode(),rLayout ); .. } The parameter rLayout in function DeleteSection is added by me and this parameter is passed from a view class(ViewShell). Why does DeleteSection(..) needs a dedicated layout? This function removes some nodes from the Writer model. If these functions needs access to a layout, I assume this is e.g. for notification. But then I think _all_ layouts need to be notified. So you don't need a parameter, you need the access to all layouts?! What do you think? That means the destructor don't know this patameter.but the modularization work require I to add this parameter.how to deal with it and make the destructor can disposal this function. Best Regards, LiuTao Kindly regards Andreas --- Andreas Martens (ama) - OpenOffice.org Writer OpenOffice.org Engineering at Sun: http://blogs.sun.com/GullFOSS - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] about devpartner
The BoundsChecker UI might have changed a little bit, since my how-to is 4 year olds, based on version 6 or what ever. Similar settings should still be available, I will try to update the how-to next time I use BoundsChecker. Probably I will move it into the Wiki then... Malte. zhaosheng wrote, On 07/16/07 08:31: Malte Timmermann wrote: Should work. I didn't test latest devpartner suites, only boundschecker for C++. Make sure your version supports native/unmanaged code. For MLK detection, make sure to disable OOo memory manager. See http://tools.openoffice.org/files/documents/15/872/BoundsChecker.html for details. Malte. thanks, and I have downloaded the trial version of product *DevPartner for Visual C++ BoundsChecker Suite 8.0 and I couldn't find *'BoundsChecker/Settings...' menu in Visual Studio, is this the wrong version? besides I disabled OOomemory manager and installed the non product builds - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[dev] OOo Accessibility on WIndows via IAccessible2
Hi, I am not sure if all of you are aware of IAccessible2 (IA2, http://www.linux-foundation.org/en/Accessibility/IAccessible2 ), and the influence that it will have on Assistive Technology (AT) on Windows. Right now, OOo is not well accessible (with screen readers) on Windows. OOo itself has a very rich Accessibility API, and is offering all needed information via this API. But the AT vendors don't make use of that, because this would mean implementing something only for OpenOffice.org. So the only way to get their support is by implementing some API that also other important applications are implementing. For this reason OOo currently bridges the UNO Accessibility API (UAA) to Java Accessibility API (JAA), because some AT tools at least support Java. This helps for the user interface, and for some standard things in the documents, but currently the AT products don't make use of all interfaces which are needed to expose the content of complex documents. For AT, the situation on Windows is worse than on Linux/Solaris with GNOME. GNOME comes with a full featured Accessibility Architecture. AT tools can quite easily support any GNOME application, because of the architecture they don't have to know anything about the applications! They (basically) just track the focus events, and ask for roles and interfaces of the focused elements. On Windows, there is nothing like this. There is some API (MSAA - Microsoft Active Accessibility), but this is not a complete architecture. That API is only a complement to Win32 API to fill some gaps, but still doesn't support exposure of document content. Microsoft started UIAutomation with Windows Vista, but it seems that this is also not very sufficient. Supporting this would also be quite difficult (requires managed instead of native code) and expensive (lot's of new development) for AT vendors. For this reason, IBM has created IAccessible2. Mainly they looked into OOo's Accessibility API, and extracted all things that are not covered by the Win32/MSAA combo. They brought this to theFree Standards Group (nowadays Linux Foundation) for further standardization, and the major AT vendors are working on IA2 support. One of the benefits from IA2 for them is that it's not something completely new, but only complements existing API. This means they can keep all their working MSAA implementations, and exchange/enhance some implementations with IA2. The AT vendors already start replacing some custom or ugly implementations with clean solutions based on IA2. This means, if OOo would support IA2, it could benefit from these efforts, and quite soon we should have a very well accessible OOo even on Windows! For the same reason people are already working on IA2 support in FireFox and Thunderbird. Implementing IA2 would be similar to what we are doing on GNOME now. A small bridge layer maps our UAA implementations to the systems Accessibility Architecture. In this case, this would mean implementing a bridge for MSAA and IA2. A lot of code should be very similar to our GNOME bridge, so I think we could make quite fast progress if we started this. Now I wonder - are there any volunteers for this? This would be great! Best regards, Malte. -- http://openoffice.org/access http://blogs.sun.com/Malte - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] word bounding boxes in Impress?
This information is only available for things rendered to the screen. There you can use the Uno Accessibility API (XAccessibleText for char glyphs) But I don't know if you can query XAccessibleText from XShape directly. See openoffice.org/access for details. Malte. Laurent Denoue wrote, On 03/27/07 04:08: I can get the text, position and size of all shapes on each page of an Impress document. However, I need the position of individual words that are inside text-based shapes. How can I do this? Laurent. int npages = PageHelper.getDrawPageCount( xComponent ); for (int i=0;iMath.min(2,npages);i++) { XDrawPage xPage = PageHelper.getDrawPageByIndex( xComponent,i); XShapes xShapes = (XShapes)UnoRuntime.queryInterface( XShapes.class, xPage); int nshapes = xShapes.getCount(); for (int j=0;jnshapes;j++) { XShape xShape = (XShape)UnoRuntime.queryInterface( XShape.class, xShapes.getByIndex( j )); System.out.println(xShape.getShapeType()); XText xText = (XText) UnoRuntime.queryInterface( XText.class, xShape ); System.out.println(xText.getString()); System.out.println(xShape.getPosition().X + , + xShape.getPosition().Y + , + xShape.getSize().Width + , + xShape.getSize ().Height); } } - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Finding automatic page breaks
The soft page break thing is also needed for DAISY export. Therefor, after investigating into Accessibility related things in ODF, optionally exporting soft page breaks is now defined in ODF 1.1. See my OOo conference presentation http://marketing.openoffice.org/ooocon2006/presentations/wednesday_o4.pdf page 22 (ff). So ODF 1.1 is an OASIS standard now, and we started implementing the different things, but I can't promise which feature will make it into which release. For now, Ashok's recommendation below is a good work around. Malte. ashok _ wrote, On 03/04/07 08:50: I hope you are using an XML XSLT filter to write the export filter rather than use a basic macro to iterate through the document. The issue of soft page breaks, i suspect you will have to use XSL-FO to identify the point of the page break.. since page length is captured in terms of length (in cms) as part of page layout... my point is, the soft page break is never recorded on the opendocument but rather determined at the point of display by writer. (you can look at this page-layout attribute by unzipping an openoffice document with soft page breaks and viewing the styles.xml and searching for style:page-layout Maybe a way out for you could be to use both a macro and an XSLT filter. First use the macro to convert soft page breaks to hard page breaks using a cursor to iteratively mark end of page for the writer document (you can generate a temporary copy of the document since you dont want to change your original...). Then run an XSLT filter on this document to transform to xhtml... page breaks should now be easy to identify since the manual page breaks are recorded in content.xml On 3/2/07, ianmcr [EMAIL PROTECTED] wrote: Hi, I'm fairly new to OOo. I'm working on an export filter to produce accessible html. I'm iterating over the text and identifying paragraphs, tables etc. However, I need a reliable method of identifing soft page breaks. (At the minute I use the page cursor to insert a marker string at the end of each page. However, this causes problems with renumbering lists, headings etc). Is there a recommended method? -- View this message in context: http://www.nabble.com/Finding-automatic-page-breaks-tf417.html#a9268943 Sent from the openoffice - dev mailing list archive at Nabble.com. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Extending the binfilter Module
Armin Le Grand wrote, On 02/07/07 11:40: Freeze means: Add all still missing and urgently necessary C++ dependencies methodically: Link without the standard modules and add missing code. Yes, this might take a while and is not easy but might have been done by one person methodically, not costing man-years of bandwidth, service, maintaining, bulding, adapting, developer time, ... With the suggested steps we move to that target, so i am happy about them. Comparing the costs spent up to now by all and that will be spent until the goal is reached, i again have to suggest (as years ago) to do it once, by one person and for the next public release. The resulting binfilter module will be an UNO-API only module, independent of 'living' C++ code and can then rest on that version. I also prefer making binfilters completely independent from any other OOo code. Constrain is to keep it as small as possible. It might be difficult to duplicate ( or better get rid of) VCL. In theory, only font and output device code should be in use if you can really throw away everything not needed for a filter. For a converter even that should not be needed, because there shouldn't be any layout calculation. But to get all of that done, you need more than one person, or a lot more time than you estimate. And my suggestion would be to start with throwing away all unused code in binfilters, to avoid unnecessary dependencies. This is IMHO not the job for one person alone, but for one person of each application who knows what can be removed. Probably also someone for DrawingEngine code - hey, that IMHO would be you ;) Malte. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[dev] OOo Security Enhancements?
Based on the article In-depth analysis of the viral threats with OpenOffice.org documents, published in Journal in Computer Virology, I had some discussions on how OOo security can be further improved. I have put some information here: http://wiki.services.openoffice.org/wiki/Security_Enhancements As I state there, I support the idea of not implicitly trusting macros located in the OOo installation, but I don't think that the basic integrity checks for documents are worth implementing. What are your opinions on this? Best regards, Malte. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] OO.o / Win32 startup profiles ...
I don't have any current numbers, sorry. A good profiler for Windows is Intel VTune, evals can be downloaded. Does the Novell build contain more optimizations than the standard build? Is it compiled/linked differently? Would you like to also measure the standard build on your machine? Thanks, Malte. Michael Meeks wrote, On 11/02/06 12:47: Hi Malte, Just looking at startup performance on Win32 / Linux, and I have the following numbers; was wondering if you see the same thing: cold warm WinXP OO.o 14.5 4.0 [ OO.o 2.0.4 Sun build ] Linux OO.o 10.8 2.4 [ OO.o 2.0.2 Novell build ] MS Word 2.7 0.9 All times in seconds, all on the same hardware - Win32 times: wall-clock + average of 3, time is to start a blank Writer document. So - I've been focusing on Linux optimisation, and we appear to have left Windows behind. That's pretty interesting. Do you have any good profiling tools that break-down the 4 seconds of warm start on Win32 ? [ or any free ones you can recommend ] on Linux of course the configmgr is a big chunk of the profile, and I suspect that on WinXP locking (which we hammer a lot there) is way more expensive, but it's just a hunch :-) do you have good numbers here ? Thanks, Michael. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] OOo Digital Signatures
You might be true about Apple (which is not in my personal focus - any volunteers?), but some GNOME stuff doesn't help for people using KDE or other things... Malte. Oliver Braun wrote, On 10/19/06 08:55: Hi Malte, Malte Timmermann wrote: On other platforms there is no global key store, that's the reason why we have chosen to rely on a Mozilla profile. what about GNOME keyring, Apple KeyChain, .. ? I think this assumption is no longer valid. - Oliver - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] interested to contribute in openoffice.org
Cool :) What's your main interest - core, components, helping on bug fixes? If your answer is writing a helpful component for OOo from scratch, I would suggest writing the Creative Commons component. http://www.openoffice.org/servlets/ReadMsg?list=devmsgNo=17284 I think there is a lot of interest in such a component, but nobody volunteered to write that (right now). Interested? Malte. mukhilarasu arasuanbu wrote, On 07/31/06 12:39: Hi, I am a developer having 3+ years of experience in various development projects and having development experience in OOAD, C++,Java2 and J2EE technologies. I am very much interested to participate in openoffice.org project guide me to start... Thanks Anbu - Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail Beta. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[dev] Volunteer(s) for a Creative Commons component?
Hi, it seems that there is some interest in a component for easily integrating Creative Commons licenses into ODF documents. There where some postings on this list, and Nathan Yergler already did some entries for this in the CC wiki: http://wiki.creativecommons.org/OpenOfficeOrg_Addin I wonder if any developer here would like to create such a component for OpenOffice.org! The component developer should be/make familiar with the OOo build environment and how to create components. I volunteer to be something like a mentor for that person, if desired. We can together work on the specification and I can help out with hints for design and implementation. Best regards, Malte. -- Malte Timmermann [EMAIL PROTECTED] Sun Microsystems GmbH Technical Architect Software Engineering Nagelsweg 55 http://blogs.sun.com/roller/page/malte 20097 Hamburg, Germany - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Volunteer(s) for a Creative Commons component?
Laurent, thanks for offering mentoring on the OOo basics. That might convince people to start working on an OOo component, who otherwise feared the barrier of entrance :) Malte. Laurent Godard wrote, On 07/13/06 11:21: Hi Malte You are right, OOo build environment might not be an issue here. ok :) What I really wanted to say with that: I am willing to help on the component specific things, but I don't want to spend a lot of time in teaching how to write OOo components in general. there should be enough documentation and examples available. can i propose a dual-mentoring ? i may help for starters (and propose him to write its experience in the OooWiki or as a Article for the contest) Moreover, there are connex points to solve such as GUI translation and Extension Translation Framework This may be an other project I made a call on the french lists Best Laurent - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Creative Commons support in OpenOffice.org
Nathan, I am also looking into this. My feeling is that it should be in the standard office installation, not an extension. Reason: If I attach a license to my document, I want that everybody is aware of that when opening the doc, not just people who have the extension. License must be contained in the document container, and OOo might show a little symbol in the status bar, like for a signed document. But I didn't look deeper into the details right now... Malte. Nathan R. Yergler wrote, On 07/06/06 18:39: Hello, You may have recently seen that Microsoft developed and released an Addin for Microsoft Office that allows Creative Commons license information to be embedded in Word, Excel and PowerPoint documents (http://wiki.creativecommons.org/Microsoft_Office_Addin). We're very interested in supporting open source and open formats by providing similar functionality for OpenOffice.org. I've placed a stub page in the wiki at http://wiki.creativecommons.org/OpenOfficeOrg_Addin which lists some requirements and ideas for the project. We're interested in hearing feedback about the project -- is it possible to do as an extension (if that's the right terminology)? Any suggestions on starting points? Anyone interested in helping out? :) Any feedback, suggestions or ideas other developers have would be very welcome. Thanks for your help, Nathan - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Creative Commons support in OpenOffice.org
I took a quick look into the MS solution: They simply place some text and links into the document, that's all. This, of course, can be done as a component, and people w/o that component will also see the license. Such a component shouldn't be to hard to implement - any volunteers? ;) Malte. Nathan R. Yergler wrote, On 07/07/06 13:21: My feeling is that it should be in the standard office installation, not an extension. Well that would obviously be preferred, we were just trying to go for the shortest time to implement/deploy (path of least resistance, if you will). Is there a formalized mechanism for suggesting features such as this? I'm not familiar enough with the development model to know if its possible to develop something as an extension and be able to significantly reuse the code in the standard installation. Reason: If I attach a license to my document, I want that everybody is aware of that when opening the doc, not just people who have the extension. License must be contained in the document container, and OOo might show a little symbol in the status bar, like for a signed document. Right; I guess if it weren't integrated into the standard installation, it would be desirable for the license metadata to survive document manipulation by people who do not have the extension installed. But I didn't look deeper into the details right now... Malte. Nathan R. Yergler wrote, On 07/06/06 18:39: Hello, You may have recently seen that Microsoft developed and released an Addin for Microsoft Office that allows Creative Commons license information to be embedded in Word, Excel and PowerPoint documents (http://wiki.creativecommons.org/Microsoft_Office_Addin). We're very interested in supporting open source and open formats by providing similar functionality for OpenOffice.org. I've placed a stub page in the wiki at http://wiki.creativecommons.org/OpenOfficeOrg_Addin which lists some requirements and ideas for the project. We're interested in hearing feedback about the project -- is it possible to do as an extension (if that's the right terminology)? Any suggestions on starting points? Anyone interested in helping out? :) Any feedback, suggestions or ideas other developers have would be very welcome. Thanks for your help, Nathan - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Creative Commons support in OpenOffice.org
Yes, they also embed, but the point is that the display of the license is normal text/graphic in the document content, so people don't need the component to be aware of that... Malte. Nathan R. Yergler wrote, On 07/07/06 16:16: Actually they also embed information in the document, albeit not in the greatest way. If you go to File - Creative Commons a second time (in the same document), you'll notice that it warns you that you have previously selected a license and asks if you'd like to overwrite it. If you go to File - Properties (I think; not @ a Windows box), you can look at the custom document properties and see that they also embed the information re: derivatives, commercial use, etc. NRY Malte Timmermann wrote: I took a quick look into the MS solution: They simply place some text and links into the document, that's all. This, of course, can be done as a component, and people w/o that component will also see the license. Such a component shouldn't be to hard to implement - any volunteers? ;) Malte. Nathan R. Yergler wrote, On 07/07/06 13:21: My feeling is that it should be in the standard office installation, not an extension. Well that would obviously be preferred, we were just trying to go for the shortest time to implement/deploy (path of least resistance, if you will). Is there a formalized mechanism for suggesting features such as this? I'm not familiar enough with the development model to know if its possible to develop something as an extension and be able to significantly reuse the code in the standard installation. Reason: If I attach a license to my document, I want that everybody is aware of that when opening the doc, not just people who have the extension. License must be contained in the document container, and OOo might show a little symbol in the status bar, like for a signed document. Right; I guess if it weren't integrated into the standard installation, it would be desirable for the license metadata to survive document manipulation by people who do not have the extension installed. But I didn't look deeper into the details right now... Malte. Nathan R. Yergler wrote, On 07/06/06 18:39: Hello, You may have recently seen that Microsoft developed and released an Addin for Microsoft Office that allows Creative Commons license information to be embedded in Word, Excel and PowerPoint documents (http://wiki.creativecommons.org/Microsoft_Office_Addin). We're very interested in supporting open source and open formats by providing similar functionality for OpenOffice.org. I've placed a stub page in the wiki at http://wiki.creativecommons.org/OpenOfficeOrg_Addin which lists some requirements and ideas for the project. We're interested in hearing feedback about the project -- is it possible to do as an extension (if that's the right terminology)? Any suggestions on starting points? Anyone interested in helping out? :) Any feedback, suggestions or ideas other developers have would be very welcome. Thanks for your help, Nathan - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] PKCS#11 support on Openoffice
Problem within OOo is that OOo currently only supports one security environment. As Jochen said, that should change soon. If you want to see if your implementation will (probably) work with OOo, you can use some of our test tools: xmlsecurity/tools/demo = signdemo and verifydemo There you can choose which security environment to use. Hope this helps, Malte. Joachim Lingner wrote: PKCS11 will be supported by means of mozilla. That is, the PKCS11 module must be added to mozilla. This may be implemented in OOo2.0.4 --Joachim - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] Implementing Document Restrictions in Star Office and Open Office
Valden, I personally wouldn't implement access control. Everybody can modify OOo and get rid of all security checks. So the only thing I would do is encrypting the session key with users public keys, so only certain people can open the document. That is all you can guarantee! Once somebody has access to the session key, you can't hinder him doing with the document what he wants. If you want rights management in an open source application, you need a trusted platform, signed applications, and probably some rights management server. This is also true for closed source software, with the difference that modifying close source software is much more difficult. Malte. PS: Some of my thoughts on this topic can be found here: http://openmediacommons.org/workshop/presentations/Day1/3.Malte-OpenOffice.pdf Valden Longhurst wrote: Second attempt because it seems the PDF didn't come through After talking with Malte Timmermann from Sun, he mentioned I might want to bring my ideas to this group. Is this the correct group for this idea? Attached are two OOo files on how we can use both symmetric and asymmetric encryption--WITHOUT using a Rights Management or Licensing server to enforce business-justified document restrictions. My possible solution involves what is called the digital envelope or cryptolope. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] warnings01: Windows C4355 'this' : used in base member initializer list
I don't understand the not look too safe example: Class B will never be able to call a virtual method which is implemented in C. Not within the CTOR. And when talking about Dialogs: Moving member initialization with 'this' to the body is not easily done. You must change all Window members to Window* members, which means lot of code to change, and memory fragmentation. Malte. Nikolai Pretzell wrote: Hi Carsten and all, warning: test.cxx(18) : warning C4355: 'this' : used in base member initializer list class A { public: A() {} }; class B { A _a; public: B( A a ) : _a(a) {} }; class C : public A { B _b; public: C() : _b( *(A*)this ) {} }; int main() { C c; } Using 'this' in the ctor initializer list can be dangerous, if you don't know what you do. The above example uses a safe way to provide this. This example does not look too safe to me, because: It is quite possible that - for example - the maintainer of B one day wants to use a virtual funtion of A that is implemented in C. And that functionality of B may be called in the constructor body of C. Pro warning: In cases like this, generally the maintainer of B has no chance to know that he must not use some functions of A (or C), because the instance of A (or C) is not yet completely constructed. So the warning is a valid hint to a potential maintainability nightmare. Contra warning: The normal workaround would be to move the this from the initialization section into the constructor body. This removes the warning, but not always removes the danger, because still the receiver of this may use it while not all construction is done. So one could argue, fixing the warning does not necessarily fix the problem, so we can remove the warning anyway. I think we have two possible ways to solve this problem. - Turn of the warning for every occurrence in the code. - Switch of C4355 for Windows globally. I'd suggest to take the warning serious and to re-look on each occurrence about this way: 1. Can the construction be re-worked so no self-reference is necessary? Sometimes this is easy by clarifying a hierarchy that could be a directed graph but currently is a non-directed one. If yes, do so. 2. If not, is the use of this safe including maintainenance in later times? If yes, see X. 3. If no, make sure there is a comment at all places, using the partly-initialized instance that it may be only partly initialized! Then goto X. X. See, if moving this from initialization section into c'tor body does any harm. (In case of dialogues, the painting takes so much time, that one could assume, the minor performance drawback of moving the initialisation into the body is negligible - but I don't know that code, so it's just an assumption.) If yes, do so. If no, disable the warning locally. If we just generally disable the warning, we may overlook occurrences where the use indeed is questionable. Nikolai - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[dev] New OOo mailing list for Accessibility
Hi, I have introduced a new mailing list for Accessibility on OpenOffice.org: [EMAIL PROTECTED] I wanted to have [EMAIL PROTECTED] (without ui.), but was told that new mailing lists have to be assigned to a project :( If you want some details about me and the list, you might have a look into my welcome posting: http://ui.openoffice.org/servlets/ReadMsg?list=accessibilitymsgNo=1 Best regards, Malte. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[dev] [Fwd: Do we need an OOo Accessibility mailing list?]
FYI, seems my cross posting didn't work... Malte. Original Message Subject: Re: [ui-dev] Do we need an OOo Accessibility mailing list? Date: 14 Nov 2005 21:27:28 +0100 From: Peter Korn [EMAIL PROTECTED] Reply-To: dev@ui.openoffice.org Organization: StarOffice / Sun Microsystems, Inc. To: dev@ui.openoffice.org Newsgroups: openoffice.ui.dev References: [EMAIL PROTECTED] Hi Malte, I think this is an excellent idea, thanks for proposing it. I suggest [EMAIL PROTECTED] unless it is too long to type (our [EMAIL PROTECTED] alias gets a surprising number of messages from folks wanting card-key access to a particular building...). If address length is an issue, 'a11y' is becomming a common abbreviation, like 'i18n' is for 'internatinalization'. So another choice would be [EMAIL PROTECTED]. Regards, Peter Korn Accessibility Architect, Sun Microsystems, Inc. Malte Timmermann wrote: Sorry for cross posting, but I want to catch people on the different lists. Please follow-up to dev@openoffice.org, I assume all people read that... OOo Accessibility is a very important thing, but we don't have a central mailing list for this. - Some people discuss on dev@ui.openoffice.org, mostly the developers, some QA members will not recognize... - Some start discussions on dev@qa.openoffice.org in the moment they find some problems, while not all developers read them... - Other people don't know which list to use, and simply use [EMAIL PROTECTED] I would prefer to have *one* mailing list for *all* accessibility related things. Also it's hard for people new on OOo to find the 'entry point' for accessibility related information. So the next step would be to introduce something like openoffice.org/access, to help people finding the information they need. This page would contain the information you need for a 'quick start': - Links to OOo/AT how-tos and other stuff from http://ui.openoffice.org/accessibility/ - Which mailing list to use = the new accessibility mailing list. Very great would be a link to openoffice.org/access on the main page :) Any opinions? - Would the list be helpful / welcome? - Should it be [EMAIL PROTECTED], or [EMAIL PROTECTED] Thanks, Malte. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] proposal: rtl::LeakGuard
We should talk about the LeakGuard when consolidating the debug macros, as Frank suggested. Please don't introduce before. I also suggest to have a macro for it, which simply expands to nothing in product builds. If we do anything in this direction, I think it shouldn't be only leak detection, but statistics and logging too. For leak detection, there are enough tools which don't require any code changes. We already fixed a lot of memory leaks for 2.0.1 with this tools, which means that - it's possible - it's more easy now, because not so many leaks are reported - you find them for all objects, not only for special objects Malte. Frank Schönheit - Sun Microsystems Germany wrote: Hi Daniel, IMO it is better to separate those statistics into another class, so the purpose of LeakGuard remains clear: finding leaks, not doing statistics. Well, at least the last point of the statistics (the only one I ever used: the number of leaked objects) serves exactly this purpose. It would, for instance, enabled QA to regularily do leak tests on certain usage scenarios. Definately yes. If the diagnostics-consolidation is ever going to happen, and if we have a mature set of full-fledged diagnostic tools in OSL then, I'd appreciate this class being moved to OSL, too. Why osl? IMO rtl is the right place for this. One could think of salhelper (because of the C++ notion), but then we cannot use this in sal... Uhm, don't really care. Just assumed OSL because I think it could be part of a diagnostics framework, and today's diagnostics are in OSL. Ciao Frank - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] proposal: rtl::LeakGuard
I like leak detection, but I think inheritance is not so useful here, because you can't simply add leak detection to a class 'on demand', without compiling all following modules. We already have some leak detection in tools/debug.hxx: DBG_CTOR and DBG_DTOR. Together with DBG_CHECKTHIS, you can also use it to check if your object is still valid. Advantage: No inheritance (Small) Disadvantage: Manually put DBG_CTOR/DTOR in all ctors and dtors. So maybe you would like to extend the things we already have in tools... Malte. Daniel Boelzle wrote: Hello, I'd like to present/discuss a recent helper, called rtl::LeakGuard which helps to find leaking free store objects. The helper works by embracing the CRTP (curiously recurring template pattern), e.g. you use it like class MyClass : private rtl::LeakGuardMyClass {...}; This creates static informtation about created and destructed MyClass objects. In non-pro builds, the LeakGuard OSL_ASSERTs any undestroyed (leaking) objects while in product builds the LeakGuard class is just plain empty (and does not hurt performance). The LeakGuard class has three modes: - LEAKGUARD_COUNT (default): just counts the number of instances - LEAKGUARD_STORE_ADDRESSES: stores all addresses of created objects [- LEAKGUARD_NONE: empty LeakGuard class for product builds] LEAKGUARD_STORE_ADDRESSES has the advantage to iterate over all instances using your debugger, but the disadvantage of using more memory. You can explicitly switch the mode in your code, e.g. class MyClass : private rtl::LeakGuardMyClass, rtl::LEAKGUARD_STORE_ADDRESSES or override the default mode placing a CDEFS += -DRTL_LEAKGUARD_DEFAULT_MODE=LEAKGUARD_STORE_ADDRESSES in your makefile.pmk (or similar). If you are interested in checking the current (static) object count of a LeakGuard-ed class, you can do so by calling the (static) member function: static bool checkObjectCount( ::std::size_t nExpected = 0 ); which asserts if the observed object count is not the expected. You can have a look at the implementation on cws presfixes10 (tag cws_src680_presfixes10): sal/inc/rtl/leakguard.hxx I have added the header to sal, because I think such a guard can be useful for lots of code, also in very basic libraries. IMO, there is currently the problem, that headers of sal/cppu/etc will get a (published into the concrete) part of the SDK. So I have tagged all of leakguard's inner definitions as @internal, thus nobody ought to rely on it staying compatible. We ought to expand the concept of public/published API to the fields of C/C++/Java API, do we? leakguard.hxx depends on e.g. osl/diagnose.h, so I can not put it into a lower module than sal. So what do you think? Comments, please. regards, -Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] OOo Performance Activities
Caolan, thanks for that :) I will keep that in mind, but maybe the patches will not be needed. We plan to have a native loader on Linux/Solaris soon. The loader will also be responsible to show the slash screen ASAP (native implementation, no VCL), so users have quick feedback that OOo was started... Malte. Caolan McNamara wrote: On Thu, 2005-11-03 at 19:12 +0100, Malte Timmermann wrote: http://tools.openoffice.org/performance/performance-activities-overview.html If I missed something, please let me know and I will update the document. I have some prelink data and custom-prelink optimizations and some timings at #i53397# FWIW. C. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] warnings01: -Wnon-virtual-dtor
Also +1 for switching this warning off from within idlc-generated headers only Malte. Tino Rachui - Sun Germany - Development - Software Engineer wrote: Stephan Bergmann wrote: Thus, we can either switch off -Wnon-virtual-dtor globally, or switch off *all* warnings from within idlc-generated headers (#pragma GCC system_header). The second option is probably preferable, as -Wnon-virtual-dtor might point to real issues in other places of the code base, and it is unlikely that there would be other warnings from any idlc-generated header that we would thus suppress---the idlc-generated headers are pretty boiler-plate. +1 for switching this warning off from within idlc-generated headers only -Tino - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[dev] OOo Performance Activities
Hi, as some of you might know, we are currently doing a lot of things for OOo performance. Automatic performance tests on each CWS here in Hamburg will prevent further performance regressions. I plan to provide these automatic performance tests somewhere on OOo soon. But avoiding performance regressions is one thing, an other thing is becoming faster... Most urgent areas for performance improvements are startup and loading/saving OpenDocument files, but we have identified more areas where performance improvements might possible. I have talked with a lot of people in the last weeks and compiled a list of things that will or might be done. This list can be found here: http://tools.openoffice.org/performance/performance-activities-overview.html If I missed something, please let me know and I will update the document. I will provide (commented) results when more of the STARTED tasks are finished. If somebody would like to work on one of the things on the list, please write me an email so he can provide more details and/or can point you to people who are the experts in that specific area. Please consider working on tasks with status PLANNED or LATER, because STARTED tasks might be finished soon. Or perhaps someone identifies something that's not on the list, where he would like to work on? Best regards, Malte. Malte Timmermann [EMAIL PROTECTED] Sun Microsystems GmbH Technical Architect Software Engineering Sachsenfeld 4 StarOffice / OpenOffice.org 20097 Hamburg, Germany - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] non-xml files in 2.0 format?
See them as redundant information. Metafile for displaying content of OLE objects, without having to launch the needed application, which might not be available on your system. This is a general mechanism, which doesn't make any differene between known and unknown document formats. You always have the real document somewhere (format depends on OLE object). Malte. Matthew L. Avizinis wrote: Greetz, Do my eyes deceive me? Do I see non-xml files in the 2.0 format now? Namely, mimetype, and particularly those pesky files in the ObjectReplacements folder. Those seem to be character replacements for the formula editor and seem to be binary files. If I am creating a Writer file from the bottom up how can those be generated (easily)? or are they even necessary? Please fill me in. Thanks in advance, Matthew L. Avizinis Software Developer Gleim Publications, Inc. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [dev] detecting unused code
Coalan, output of your tool looks nice, think I should have a look at that for some code clean ups I want to do :) Thanks, Malte. Caolan McNamara wrote: I updated my callcatcher tool (http://www.skynet.ie/~caolan/pub/callcatcher/callcatcher-1.0.1.tar.gz) to be easier to use. It attempts to find unused code and have a low false positive rate. Sample output of unused non-virtuals in binfilter at http://people.redhat.com/caolanm/callcatcher/link.log if there's any volunteers to take a look at the symbols and start checking if they can be removed, put inside if OSL_DEBUG whateverlevel_they_are_actually_sed, or are some bugs in the tool :-) C. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]