Re: Thesaurus US - 752 synonyms with duplicate meanings

2016-02-16 Thread Andrea Pescetti

Marco A.G.Pinto wrote:

On 16/02/2016 22:56, Andrea Pescetti wrote:

May I know what is the definition of a "duplicate" meaning for your
tool? ...

it means for example:
apple|3:
one
two
one

It means that it would remove the "one" once becoming:
apple|2:
one
two


I see. It's funny that we have this kind of duplicates. The Italian 
thesaurus is already free from this. We maybe have stuff like


apple|2
(everyday usage)|one|two|three
(medical jargon)|two|three|four

where "two" and "three" are repeated but carry two different meanings 
(so the first line might refer to a word in everyday usage and the 
second to a word in medical jargon, where only part of the previous 
synonyms still apply).


Regards,
  Andrea.

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



RE: [DISCUSS] Release Java Bootstrap Connector via Maven

2016-02-16 Thread Dennis E. Hamilton
Carl, thanks for clearing that up. 

> -Original Message-
> From: Carl Marcum [mailto:cmar...@apache.org]
> Sent: Tuesday, February 16, 2016 15:30
> To: dev@openoffice.apache.org
> Subject: Re: [DISCUSS] Release Java Bootstrap Connector via Maven
> 
> On 02/16/2016 02:55 PM, Dennis E. Hamilton wrote:
> > Releases are releases.  (We can discuss what the longer answer should
> be.)
> >
> > I also don't understand about staging to Maven already.  Good
> question.
> >
> >   - Dennis
> >
> >
> 
> When artifacts are submitted to Apache Nexus staging area they are
> similar to release candidates.
> 
> Once there, the staging is closed and certain quality checks are run
> against repository requirements like PGP signing, valid pom.xml file
> etc. [1]
> 
> They are accessible to others for download during the voting process put
> are not in the Maven system.
> 
> Depending on the results of the vote, the artifacts can be dropped or
> released to the public and sync'd with the Maven Central Repository.
> 
> [1] http://www.apache.org/dev/publishing-maven-artifacts.html#close-
> stage
> 
> Thanks,
> Carl
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Reporting broken download link

2016-02-16 Thread Chris Kwintkiewicz



| Problembeschreibung | Download failed, via sourceforge und mirrors, 8 tries 
in total.
Download via win7/firefox stopped for a while @ ~39MB, continued to the end and 
reported failed.
FYI I then used my Linux computer to download exe with no problems at all! 
F##k MS

(Was funktioniert nicht? Was wird erwartet?) |
| Browser Variablen | Werte |
| navigator.appCodeName  | Mozilla |
| navigator.appName  | Netscape |
| navigator.appVersion  | 5.0 (Windows) |
| navigator.platform  | Win32 |
| navigator.oscpu  | Windows NT 6.1 |
| navigator.cpuClass  | undefined |
| navigator.product  | Gecko |
| navigator.productSub  | 20100101 |
| navigator.vendor  |  |
| navigator.vendorSub  |  |
| navigator.language  | en-US |
| navigator.browserLanguage  | undefined |
| navigator.userLanguage  | undefined |
| navigator.systemLanguage  | undefined |
| navigator.userAgent  | Mozilla/5.0 (Windows NT 6.1; rv:43.0) Gecko/20100101 
Firefox/43.0 |
| Debian / Ubuntu / IceWeasel ? | Nein / Nein / Nein |



Re: [VOTE] Release Java Bootstrap Connector via Maven

2016-02-16 Thread Carl Marcum

[X] +1 approve the release - Now Binding

On 02/14/2016 06:57 AM, Carl Marcum wrote:

[X] +1 approve the release - Non-Binding


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org




-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Security issues with silgraphite

2016-02-16 Thread Don Lewis
On 17 Feb, Andrea Pescetti wrote:
> Pedro Giffuni wrote:
>> I looked briefly at the issues and for good or bad the version of
>> silgraphite shipping with OpenOffice is old enough that most of the
>> vulnerabilities don't apply (at least not directly).
> 
> Thank you for setting things straight. We do use silgrahpite, but not 
> the version that is confirmed to be vulnerable.
> 
> Indeed the article you linked to does not say that OpenOffice is 
> vulnerable. It says that OpenOffice uses silgraphite (correct) and that 
> Firefox used to be vulnerable (since Firefox was using the silgraphite 
> version that is confirmed to be vulnerable).
> 
>> 1) We could update silgraphite to their latest version (at least on
>> header has disappeared so this needs tweaking).
>> 2) We could patch the older silgraphite to provide some protection
>> from vulnerabilities.
> 
> I would definitely go for option 1 but indeed they broke compatibility. 
> I don't know how complex it is to update code, but it is a good moment 
> for doing so.

Option 1 would be my preference, but it looks non-trivial.

>> Independent of (1) or (2) I think it's likely we may want to stop
>> shipping libgraphite.
> 
> I don't think this is the best solution, see below.
> 
>> One one side the support from SIL for this
>> event has been unacceptable: AFAICT there was no advance notice
> 
> I confirm OpenOffice received no information in advance; on the other 
> side, the vulnerability as such does not apply to the version we use. So 
> maybe we didn't receive a notification since there was nothing to fix.
> 
>> On the other hand graphite is not very important
>> nowadays: Adobe donated a fine CFF rasterizer to the freetype
>> project which fills the hole graphite meant to cover.
> 
> We do have a niche (at least I think it's a niche) of users who love 
> Graphite-enabled fonts. So this might need some longer evaluation, at 
> least to understand if these users would be damaged. This is why I would 
> prefer to use option 1 for 4.2.0 and (unless they broke compatibility 
> too much) go for the update. Of course, if this turns out to be too 
> complex or risky, deprecating silgrahpite is an option too.

After looking at the code, it appears that the version of silgraphite
that we are using is subject to one of the four vulnerabilities
mentioned: .

The patch below is similar to the upstream graphite2 fix and I
believe it closes the hole.  I've tested it with the GentiumPlus font
and it didn't break anything obvious.

One concern that I have is that silgraphite has been deprecated upstream
and its last release was in February 2009, so there may be quite a few
old bugs lurking there.

--- engine/src/font/TtfUtil.cpp.orig2009-01-29 08:33:19 UTC
+++ engine/src/font/TtfUtil.cpp
@@ -1106,7 +1106,7 @@ size_t LocaLookup(gr::gid16 nGlyphId, 
// CheckTable verifies the index_to_loc_format is valid
if (read(pTable->index_to_loc_format) == 
Sfnt::FontHeader::ShortIndexLocFormat)
{ // loca entries are two bytes and have been divided by two
-   if (nGlyphId <= (lLocaSize >> 1) - 1) // allow sentinel value 
to be accessed
+   if (lLocaSize >= 2 && nGlyphId <= (lLocaSize >> 1) - 1) // 
allow sentinel value to be accessed
{
const uint16 * pTable = reinterpret_cast(pLoca);
return (read(pTable[nGlyphId]) << 1);
@@ -1115,7 +1115,7 @@ size_t LocaLookup(gr::gid16 nGlyphId, 

if (read(pTable->index_to_loc_format) == 
Sfnt::FontHeader::LongIndexLocFormat)
{ // loca entries are four bytes
-   if (nGlyphId <= (lLocaSize >> 2) - 1)
+   if (lLocaSize >= 4 && nGlyphId <= (lLocaSize >> 2) - 1)
{
const uint32 * pTable = reinterpret_cast(pLoca);
return read(pTable[nGlyphId]);


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: [DISCUSS] Release Java Bootstrap Connector via Maven

2016-02-16 Thread Carl Marcum

On 02/16/2016 02:55 PM, Dennis E. Hamilton wrote:

Releases are releases.  (We can discuss what the longer answer should be.)

I also don't understand about staging to Maven already.  Good question.

  - Dennis




When artifacts are submitted to Apache Nexus staging area they are 
similar to release candidates.


Once there, the staging is closed and certain quality checks are run 
against repository requirements like PGP signing, valid pom.xml file 
etc. [1]


They are accessible to others for download during the voting process put 
are not in the Maven system.


Depending on the results of the vote, the artifacts can be dropped or 
released to the public and sync'd with the Maven Central Repository.


[1] http://www.apache.org/dev/publishing-maven-artifacts.html#close-stage

Thanks,
Carl

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Security issues with silgraphite

2016-02-16 Thread Andrea Pescetti

Pedro Giffuni wrote:

I looked briefly at the issues and for good or bad the version of
silgraphite shipping with OpenOffice is old enough that most of the
vulnerabilities don't apply (at least not directly).


Thank you for setting things straight. We do use silgrahpite, but not 
the version that is confirmed to be vulnerable.


Indeed the article you linked to does not say that OpenOffice is 
vulnerable. It says that OpenOffice uses silgraphite (correct) and that 
Firefox used to be vulnerable (since Firefox was using the silgraphite 
version that is confirmed to be vulnerable).



1) We could update silgraphite to their latest version (at least on
header has disappeared so this needs tweaking).
2) We could patch the older silgraphite to provide some protection
from vulnerabilities.


I would definitely go for option 1 but indeed they broke compatibility. 
I don't know how complex it is to update code, but it is a good moment 
for doing so.



Independent of (1) or (2) I think it's likely we may want to stop
shipping libgraphite.


I don't think this is the best solution, see below.


One one side the support from SIL for this
event has been unacceptable: AFAICT there was no advance notice


I confirm OpenOffice received no information in advance; on the other 
side, the vulnerability as such does not apply to the version we use. So 
maybe we didn't receive a notification since there was nothing to fix.



On the other hand graphite is not very important
nowadays: Adobe donated a fine CFF rasterizer to the freetype
project which fills the hole graphite meant to cover.


We do have a niche (at least I think it's a niche) of users who love 
Graphite-enabled fonts. So this might need some longer evaluation, at 
least to understand if these users would be damaged. This is why I would 
prefer to use option 1 for 4.2.0 and (unless they broke compatibility 
too much) go for the update. Of course, if this turns out to be too 
complex or risky, deprecating silgrahpite is an option too.


Regards,
  Andrea.

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Thesaurus US - 752 synonyms with duplicate meanings

2016-02-16 Thread Marco A.G.Pinto

Hello!

On 16/02/2016 22:56, Andrea Pescetti wrote:

I have tested the new "unduplicate simple meanings" on the US thesaurus
and it found duplicated meanings in 752 synonyms:


(moving the conversation to BCC for l10n and QA; interested people can 
follow-up on dev)


May I know what is the definition of a "duplicate" meaning for your 
tool? It looks interesting. I may want to test it on the Italian 
dictionary too.




Andrea, it means for example:
apple|3:
one
two
one

It means that it would remove the "one" once becoming:
apple|2:
one
two




Not sure if I should convert the thesaurus to UTF-8 and then remove the
duplicates... what do you suggest?


I converted the Italian dictionary to UTF-8 long ago without any 
reported issues. I fail to see how/this is related to a de-duplication 
of some kind.




Converting the dictionary to UTF-8 wouldn't remove the duplicates. I 
just mentioned it because my tool uses UTF-8 and warns that opening 
non-UTF-8 files may lead to damaged characters :-[


To make sure (100%) that no data is lost, I would first need to convert 
it to UTF-8.


:-P

Andrea, on Friday I am planning an official release for PTG (Windows and 
Linux) but you can download a Windows only version from my Dropbox:

https://dl.dropboxusercontent.com/u/30674540/ProofingToolGUI_V0092.zip

It has all the files in the ZIP including the source, images, etc. and 
the two executables for Windows (x64 and x86).


Thanks!

Kind regards,
 >Marco A.G.Pinto
   

--


Re: Thesaurus US - 752 synonyms with duplicate meanings

2016-02-16 Thread Andrea Pescetti

I have tested the new "unduplicate simple meanings" on the US thesaurus
and it found duplicated meanings in 752 synonyms:


(moving the conversation to BCC for l10n and QA; interested people can 
follow-up on dev)


May I know what is the definition of a "duplicate" meaning for your 
tool? It looks interesting. I may want to test it on the Italian 
dictionary too.



Not sure if I should convert the thesaurus to UTF-8 and then remove the
duplicates... what do you suggest?


I converted the Italian dictionary to UTF-8 long ago without any 
reported issues. I fail to see how/this is related to a de-duplication 
of some kind.


Regards,
  Andrea.

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Buildbots update

2016-02-16 Thread Andrea Pescetti

Kay Schenk wrote:

On 02/13/2016 11:45 AM, Andrea Pescetti wrote:

it seems that buildbots are having issues with network in general

Do we have any additional news on the download failures specifically
from the buildbots to SourceForge downloads?


Why SourceForge? Look at
https://ci.apache.org/builders/openoffice-linux64-nightly/builds/243/steps/retry%20bootstrap/logs/stdio
to see that ALL downloads in ./bootstrap are failing; sure, most of them 
are from SourceForge, but this is irrelevant, since downloads from 
Mozilla and other sources are failing too.


The problem is most likely on the buildbot side. For some reason, be it 
a full disk or a firewall restriction, it can't download stuff, and this 
should be checked with someone who has shell access to that machine.



The following, failed from buildbot, were OK with my test script


I confirm I've run ./boostrap without any problems too last weekend. 
Again, the problem is on the buildbots and not elsewhere.


Regards,
  Andrea.

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Buildbots update

2016-02-16 Thread Kay Schenk


On 02/13/2016 11:45 AM, Andrea Pescetti wrote:
> Damjan Jovanovic wrote:
>> The buildbots are all failing to download 15 dependencies every night
>> now. I think something is wrong with access to SourceForge :-(.
> 
> Well, from what I see for example here
> https://ci.apache.org/builders/openoffice-linux64-nightly/builds/240/steps/retry%20bootstrap/logs/stdio
> 
> it seems that buildbots are having issues with network in general
> (or maybe it was a temporary network issue).
> 
> The failure in jpegsrc.v8d.tar.gz is expected, but URL1 is failing
> not only for cases where it is, by chance, on SourceForge, but also
> for vigra1.6.0.tar.gz and for the files from Mozilla. So it really
> seems that the buildbot was not able to download from anywhere.
> Maybe a forced re-run will fix it.
> 
> And thank you Damjan for your buildbot work! Improved error handling
> and built-in download retry in ./bootstrap will surely help in
> diagnosing build issues in general.
> 
> Regards,
>   Andrea.

Do we have any additional news on the download failures specifically
from the buildbots to SourceForge downloads?
Has anyone contacted SourceForge?

I am not experiencing these problems in my local build. And I made a
very stripped down "download_external_dependencies.pl" to just try
some out manually by just supplying the URL.

The following, failed from buildbot, were OK with my test script--

http://sourceforge.net/projects/oooextras.mirror/files/2ab442d169156f34c379c968f3f482dd-zlib-1.2.7.tar.bz2


http://sourceforge.net/projects/oooextras.mirror/files/52654eb3b2e60c35731ea8fc87f1bd29-jpeg-8d.tar.gz

http://sourceforge.net/projects/oooextras.mirror/files/dd7dab7a5fea97d2a6a43f511449b7cd-expat-2.1.0.tar.gz

I kind of gave up on boost because it was taking a very long time.

...and I didn't continue since my preliminary testing seemed to go OK.

On a related matter, we do have quite a number of download errors
with the URL1 values for some of our older external packs.



-- 

MzK

"Though no one can go back and make a brand new start,
 anyone can start from now and make a brand new ending."
-- Carl Bard

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Thesaurus US - 752 synonyms with duplicate meanings

2016-02-16 Thread Marco A.G.Pinto

Hello!

Today I have finished coding a bit more of my software Proofing Tool GUI.

I have tested the new "unduplicate simple meanings" on the US thesaurus 
and it found duplicated meanings in 752 synonyms:



Not sure if I should convert the thesaurus to UTF-8 and then remove the 
duplicates... what do you suggest?


I am exhausted and tomorrow I will try to resume the coding and attempt 
to release an official build of PTG for Windows and Linux on Friday.


The good news is that I have fixed the pause issue in Linux by 
converting the remaining of the code into dynamic arrays (the thesaurus 
part) instead of loading all synonyms into the ListIconGadget. I have 
been postponing this for a couple of years or so but I have finally done 
it (it took a long time because I would have to make changes all over 
the code).


Just to share the news!

Thanks for your time!

Kind regards,
  >Marco A.G.Pinto
---

--


RE: [DISCUSS] Release Java Bootstrap Connector via Maven

2016-02-16 Thread Dennis E. Hamilton
Releases are releases.  (We can discuss what the longer answer should be.)

I also don't understand about staging to Maven already.  Good question.

 - Dennis

> -Original Message-
> From: Kay Schenk [mailto:kay.sch...@gmail.com]
> Sent: Tuesday, February 16, 2016 09:56
> To: dev@openoffice.apache.org
> Subject: Re: [DISCUSS] Release Java Bootstrap Connector via Maven
> 
> 
> On 02/15/2016 04:45 PM, Dennis E. Hamilton wrote:
> > In case it is useful in this case, be aware that it is the last
> > vote cast by any individual that matters when you finally count
> > them.
> >
> > It is not necessary to end the voting if you fall short of the
> > votes you need.  You can leave the [VOTE] open and see how one
> > can assist in obtaining necessary affirmative binding votes.
> >
> > - Dennis
> 
> I still fail to understand why we need to vote on this at all. Sorry
> about that. If this vote falls short, what does it mean since this
> is already staged to the Maven repository? And, devtools is NOT part
> of our official release so I still don't understand the problem with
> putting it there.
> 
> >
> >> -Original Message- From: Carl Marcum
> >> [mailto:cmar...@apache.org] Sent: Monday, February 15, 2016
> >> 14:47 To: dev@openoffice.apache.org Subject: Re: [DISCUSS]
> >> Release Java Bootstrap Connector via Maven
> >>
> >> On 02/15/2016 05:21 PM, Marcus wrote:
> >>> +0
> >>>
> >>> I'm sorry but I cannot test anything with your RC as I'm not
> >>> a developer and therefore don't know how to handle this. So,
> >>> I cannot give you a positive vote for it.
> >>>
> >>> However, I would like to express at least my positive opinion
> >>> with a "0+" and not with a "-1".
> >>>
> >>> I hope you can understand my dilemma.
> >>>
> >>> Marcus
> >>>
> >> Marcus,
> >>
> >> Of course I do.
> >>
> >> Thanks for your input !
> >>
> >> Carl
> >>
> >> -
> >>
> >>
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> >> For additional commands, e-mail:
> >> dev-h...@openoffice.apache.org
> >
> >
> > -
> >
> >
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> > For additional commands, e-mail: dev-h...@openoffice.apache.org
> >
> 
> --
> 
> MzK
> 
> "Though no one can go back and make a brand new start,
>  anyone can start from now and make a brand new ending."
> -- Carl Bard
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Reporting broken download link

2016-02-16 Thread Marcus
Normally the downloads should go through without problems. But maybe 
there is a temporary hickup with the mirror server you are using.


As it seems that you are coming from Germany the following is a download 
link for a server from the ISP NetCologne (Köln) [1].


Otherwise you can choose another one when you click on the blue "miror" 
link on the download page from SourceForge (the one that countdown from 
5 seconds to 0).


[1] 
http://downloads.sourceforge.net/project/openofficeorg.mirror/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Linux_x86-64_install-rpm_de.tar.gz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fopenofficeorg.mirror%2Ffiles%2F4.1.2%2Fbinaries%2Fde%2FApache_OpenOffice_4.1.2_Linux_x86-64_install-rpm_de.tar.gz%2Fdownload=1455651361_mirror=netcologne


HTH

Marcus



Am 02/16/2016 04:39 PM, schrieb frohlinde.weberdr:

*Problembeschreibung* *Ersetze diesen Text und beschreibe das Problem

(Was funktioniert nicht? Was wird erwartet?)Der Download bleibt nach 19
bzw. 22 MB von 157 MB hängen oder hört auf.
*
*Browser Variablen* *Werte*
[...]


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: [DISCUSS] Release Java Bootstrap Connector via Maven

2016-02-16 Thread Kay Schenk

On 02/15/2016 04:45 PM, Dennis E. Hamilton wrote:
> In case it is useful in this case, be aware that it is the last
> vote cast by any individual that matters when you finally count
> them.
> 
> It is not necessary to end the voting if you fall short of the
> votes you need.  You can leave the [VOTE] open and see how one
> can assist in obtaining necessary affirmative binding votes.
> 
> - Dennis

I still fail to understand why we need to vote on this at all. Sorry
about that. If this vote falls short, what does it mean since this
is already staged to the Maven repository? And, devtools is NOT part
of our official release so I still don't understand the problem with
putting it there.

> 
>> -Original Message- From: Carl Marcum
>> [mailto:cmar...@apache.org] Sent: Monday, February 15, 2016
>> 14:47 To: dev@openoffice.apache.org Subject: Re: [DISCUSS]
>> Release Java Bootstrap Connector via Maven
>> 
>> On 02/15/2016 05:21 PM, Marcus wrote:
>>> +0
>>> 
>>> I'm sorry but I cannot test anything with your RC as I'm not
>>> a developer and therefore don't know how to handle this. So,
>>> I cannot give you a positive vote for it.
>>> 
>>> However, I would like to express at least my positive opinion
>>> with a "0+" and not with a "-1".
>>> 
>>> I hope you can understand my dilemma.
>>> 
>>> Marcus
>>> 
>> Marcus,
>> 
>> Of course I do.
>> 
>> Thanks for your input !
>> 
>> Carl
>> 
>> -
>>
>> 
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
>> For additional commands, e-mail:
>> dev-h...@openoffice.apache.org
> 
> 
> -
>
> 
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org
> 

-- 

MzK

"Though no one can go back and make a brand new start,
 anyone can start from now and make a brand new ending."
-- Carl Bard

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: How to work with the gbuild branch in SVN?

2016-02-16 Thread Kay Schenk

On 02/15/2016 05:07 PM, Damjan Jovanovic wrote:
> Hi
> 
> I am thinking of merging some changes from our gbuild branch
> (https://svn.apache.org/repos/asf/openoffice/branches/gbuild) and
> wondering how best to do it.
> 
> The gbuild branch and trunk have drifted apart, so my preferred
> workflow would be to diff specific files and then copy and paste small
> changes into trunk, testing on as many platforms as possible, and
> committing in many fine-grained commits. This would however lose the
> SVN history, and lose the fact those commits even came from that
> branch.
> 
> Would that be ok? If not, what else should I do?
> 
> Thank you
> Damjan

>From what you say here, I'm assuming you mean applying "diffs" from
gbuild to trunk on your development system, then submitting patches
for others to test?

You could use "merge" as Pedro suggests or submit patches as is our
usual way.

-- 

MzK

"Though no one can go back and make a brand new start,
 anyone can start from now and make a brand new ending."
-- Carl Bard

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Mac Dev. Builds?

2016-02-16 Thread Louis Suárez-Potts

> On 16 Feb 16, at 12:40, Kay Schenk  wrote:
> 
> 
> On 02/16/2016 05:50 AM, Louis Suárez-Potts wrote:
>> So, what's going on with the OS X dev builds? They have not been there for 
>> some time now.
>> 
>> louis
> 
> We don't have a Mac buildbot up and running. The last non-release
> you saw were probably referenced on the wiki page for the last release.
> 
> We could use a volunteer for Mac building. ;)

I can also broadcast the desire for such. What requirements? They are, I'm 
guessing stipulated on the dev pages?
louis
> 
> -- 

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Mac Dev. Builds?

2016-02-16 Thread Kay Schenk

On 02/16/2016 05:50 AM, Louis Suárez-Potts wrote:
> So, what's going on with the OS X dev builds? They have not been there for 
> some time now.
> 
> louis

We don't have a Mac buildbot up and running. The last non-release
you saw were probably referenced on the wiki page for the last release.

We could use a volunteer for Mac building. ;)

-- 

MzK

"Though no one can go back and make a brand new start,
 anyone can start from now and make a brand new ending."
-- Carl Bard

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



RE: review requested: [Issue 67103] check in OpenOffice NetBeans integration : [Attachment 85289] unfixed defect

2016-02-16 Thread Dennis E. Hamilton
Yes, the attachment is a .docx file named Great Thoughts [;<).  I also marked 
it obsolete pending complete removal.

> -Original Message-
> From: Marcus [mailto:marcus.m...@wtnet.de]
> Sent: Tuesday, February 16, 2016 03:43
> To: dev@openoffice.apache.org
> Subject: Re: review requested: [Issue 67103] check in OpenOffice
> NetBeans integration : [Attachment 85289] unfixed defect
> 
> Am 02/16/2016 12:17 PM, schrieb Carl Marcum:
> > On 02/16/2016 04:40 AM, bugzi...@apache.org wrote:
> >> pointer  has asked for review:
> >> Issue 67103: check in OpenOffice NetBeans integration
> >> https://bz.apache.org/ooo/show_bug.cgi?id=67103
> >>
> >> Attachment 85289: unfixed defect
> >> https://bz.apache.org/ooo/attachment.cgi?id=85289=edit
> >>
> >> --- Comment #3 from pointer  ---
> >> Created attachment 85289
> >> --> https://bz.apache.org/ooo/attachment.cgi?id=85289=edit
> >> unfixed defect
> >>
> >> please check this nd pls tell me
> >
> > This seems suspicious
> >
> > This is a 10 year old closed issue.
> >
> > Is there virus scans on attachments?
> 
> thanks for the hint. I've disabled the user account and asked Infra for
> help to delete the comment and attachment (see
> https://issues.apache.org/jira/browse/INFRA-11269).
> 
> Marcus
> 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: dev-h...@openoffice.apache.org


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



RE: Food for Thought

2016-02-16 Thread Dennis E. Hamilton
+1

Thank you Michael

> -Original Message-
> From: RA Stehmann [mailto:anw...@rechtsanwalt-stehmann.de]
> Sent: Tuesday, February 16, 2016 01:44
> To: dev@openoffice.apache.org
> Subject: Re: Food for Thought
> 
> On 15.02.2016 23:14, Patricia Shanahan wrote:
> 
> 
> > The typical AOO user is a Windows-using non-programmer. I found just
> > building AOO on Windows a challenging two week project, for which I
> > needed a lot of help, despite prior familiarity with Subversion and
> > Cygwin. As a practical matter, most people who need a bug fixed to
> make
> > AOO useful to them simply do not have the option of taking it into
> their
> > own hands.
> >
> > Incidentally, that cultural difference may affect the severity of data
> > loss bugs. I find someone working for an extended period on a document
> > with no revision control or off-site backup a little shocking at first
> > sight. Then I realized I learned about the importance of revision
> > control and off-site backup on the job, not in my non-programming
> life.
> >
> > Maybe it would be helpful for the PMC to select a very, very short
> "Most
> > wanted" list, based on user requests, feedback at conferences etc.
> That
> > would help new AOO recruits pick a focus.
> 
> There are two differences between AOO and most of the other Apache
> projects.
> 
> The first is a technical one: The huge size of the code.
> 
> The second is a "social" one: AOO is an enduser project, and not a
> project developing code used by it-professionals. Patricia described it
> well above.
> 
> So AOO has to find a special "Apache Way" of doing things proper.
> 
> I'm a living example for that: I'm a member of the PMC without ever
> having written a single line of code for AOO (Shame on me ;-) ). I
> think, you won't find such cases in other Apache PMCs.
> 
> For an OpenOffice supporter it is quite normal doing other things than
> developing the code: Doing QA, documentation, translation, user support
> and training, extensions, so called marketing etc.
> 
> So we have to find procedures, how all these people with different
> functions can collaborate in a proper way.
> 
> Just a little more "Food for Thought".
> 
> Kind regards
> Michael
> 
> 



-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Reporting broken download link

2016-02-16 Thread frohlinde.weberdr

*Problembeschreibung*   *Ersetze diesen Text und beschreibe das Problem

(Was funktioniert nicht? Was wird erwartet?)Der Download bleibt nach 19 
bzw. 22 MB von 157 MB hängen oder hört auf.

*
*Browser Variablen* *Werte*
navigator.appCodeName   Mozilla
navigator.appName   Netscape
navigator.appVersion5.0 (Windows)
navigator.platform  Win32
navigator.oscpu Windows NT 6.1
navigator.cpuClass  undefined
navigator.product   Gecko
navigator.productSub20100101
navigator.vendor
navigator.vendorSub 
navigator.language  de
navigator.browserLanguage   undefined
navigator.userLanguage  undefined
navigator.systemLanguageundefined
navigator.userAgent 	Mozilla/5.0 (Windows NT 6.1; rv:44.0) Gecko/20100101 
Firefox/44.0

Debian / Ubuntu / IceWeasel ?   Nein / Nein / Nein
*Stabiles Release*  
*JavaScript Funktionen/Variablen*   *Werte*
Language ISO code   de
Language ISO code (from select box) de
Release matrix platform position (full) 11
Release matrix platform position (lp)   12
Release matrix platform array data  y,157
Release matrix language array data 
de,German,Deutsch,y,de/downloads/index.html

UI platform nameWindows (EXE)
UI platform name (not supported)
Platform (short)win32
URL platform name (full)Win_x86_install
URL platform name (lp)  Win_x86_langpack
URL platform name (from select box) win32
Version (from select box)   4.1.2
File name (full)Apache_OpenOffice_4.1.2_Win_x86_install_de.exe
File name (lp)  Apache_OpenOffice_4.1.2_Win_x86_langpack_de.exe
File extension  .exe
File size (full) (MByte)157
File size (lp) (MByte)  19
Release info 	Milestone AOO412m3 | Build ID 9782 | SVN r1709699 | 
Veröffentlicht 2015-10-28
Download file link (full) 
http://sourceforge.net/projects/openofficeorg.mirror/files/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_install_de.exe/download 

Download file link (lp) 
http://sourceforge.net/projects/openofficeorg.mirror/files/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_langpack_de.exe/download 

Checksum file link (full) (here for MD5) 
http://archive.apache.org/dist/openoffice/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_install_de.exe.md5 

Checksum file link (lp) (here for MD5) 
http://archive.apache.org/dist/openoffice/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_langpack_de.exe.md5 

Base URL to Sourceforge.net 
http://sourceforge.net/projects/openofficeorg.mirror/files/4.1.2/binaries/

Base URL to Apache Archive  http://archive.apache.org/dist/openoffice/4.1.2
getLinkSelection() (download URL)   undefined
isLanguageSupported() (true/false) ?true
Show the sub-box (true/false) ? true
General error (true/false) ?false

*Problembeschreibung*   *Ersetze diesen Text und beschreibe das Problem

(Was funktioniert nicht? Was wird erwartet?)*
*Browser Variablen* *Werte*
navigator.appCodeName   Mozilla
navigator.appName   Netscape
navigator.appVersion5.0 (Windows)
navigator.platform  Win32
navigator.oscpu Windows NT 6.1
navigator.cpuClass  undefined
navigator.product   Gecko
navigator.productSub20100101
navigator.vendor
navigator.vendorSub 
navigator.language  de
navigator.browserLanguage   undefined
navigator.userLanguage  undefined
navigator.systemLanguageundefined
navigator.userAgent 	Mozilla/5.0 (Windows NT 6.1; rv:44.0) Gecko/20100101 
Firefox/44.0

Debian / Ubuntu / IceWeasel ?   Nein / Nein / Nein
*Stabiles Release*  
*JavaScript Funktionen/Variablen*   *Werte*
Language ISO code   de
Language ISO code (from select box) de
Release matrix platform position (full) 11
Release matrix platform position (lp)   12
Release matrix platform array data  y,157
Release matrix language array data 
de,German,Deutsch,y,de/downloads/index.html

UI platform nameWindows (EXE)
UI platform name (not supported)
Platform (short)win32
URL platform name (full)Win_x86_install
URL platform name (lp)  Win_x86_langpack
URL platform name (from select box) win32
Version (from select box)   4.1.2
File name (full)Apache_OpenOffice_4.1.2_Win_x86_install_de.exe
File name (lp)  Apache_OpenOffice_4.1.2_Win_x86_langpack_de.exe
File extension  .exe
File size (full) (MByte)157
File size (lp) (MByte)  19
Release info 	Milestone AOO412m3 | Build ID 9782 | SVN r1709699 | 
Veröffentlicht 2015-10-28
Download file link (full) 
http://sourceforge.net/projects/openofficeorg.mirror/files/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_install_de.exe/download 

Download file link (lp) 
http://sourceforge.net/projects/openofficeorg.mirror/files/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_langpack_de.exe/download 

Checksum file link (full) (here for MD5) 
http://archive.apache.org/dist/openoffice/4.1.2/binaries/de/Apache_OpenOffice_4.1.2_Win_x86_install_de.exe.md5 

Checksum file link (lp) 

Security issues with silgraphite

2016-02-16 Thread Pedro Giffuni

Hello;

OpenOffice has been explicitly mentioned in public concerns about 
silgraphite:


http://news.softpedia.com/news/vulnerability-in-font-processing-library-affects-linux-openoffice-firefox-500027.shtml

I looked briefly at the issues and for good or bad the version of
silgraphite shipping with OpenOffice is old enough that most of the 
vulnerabilities don't apply (at least not directly). It appears

not even the silgraphite authors may be aware of what the state
of the older library version may be.

The issue may not be urgent after all but we have to consider what
to do about it.

1) We could update silgraphite to their latest version (at least on 
header has disappeared so this needs tweaking).

2) We could patch the older silgraphite to provide some protection
from vulnerabilities.

Independent of (1) or (2) I think it's likely we may want to stop
shipping libgraphite. One one side the support from SIL for this
event has been unacceptable: AFAICT there was no advance notice, and
no fix alternatives. On the other hand graphite is not very important
nowadays: Adobe donated a fine CFF rasterizer to the freetype
project which fills the hole graphite meant to cover. Note that
we don't carry graphite-enabled fonts so our users may not miss
it at all.

Note that I am not member of the security team so this is not
an official statement on the project's behalf, just my thoughts.

Pedro.

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Mac Dev. Builds?

2016-02-16 Thread Louis Suárez-Potts
So, what's going on with the OS X dev builds? They have not been there for some 
time now.

louis
-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: [DISCUSS] Release Java Bootstrap Connector via Maven

2016-02-16 Thread Carl Marcum
For those that are going to compile the source from the source jar and 
not from the Gradle build file in SVN


Here is the file list ( filelist.txt )
./ooo/connector/BootstrapConnector.java
./ooo/connector/BootstrapPipeConnector.java
./ooo/connector/BootstrapSocketConnector.java
./ooo/connector/example/BootstrapSocketConnectorExample.java
./ooo/connector/server/OOoServer.java

create a "build" directory first

You will need the Java UNO jars on the classpath.

on *nix systems:

javac -d build -cp 
./lib/juh-4.1.2.jar:./lib/jurt-4.1.2.jar:./lib/ridl-4.1.2.jar:./lib/unoil-4.1.2.jar 
@filelist.txt


I hope this helps,

Thanks,
Carl

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: review requested: [Issue 67103] check in OpenOffice NetBeans integration : [Attachment 85289] unfixed defect

2016-02-16 Thread Marcus

Am 02/16/2016 12:17 PM, schrieb Carl Marcum:

On 02/16/2016 04:40 AM, bugzi...@apache.org wrote:

pointer  has asked for review:
Issue 67103: check in OpenOffice NetBeans integration
https://bz.apache.org/ooo/show_bug.cgi?id=67103

Attachment 85289: unfixed defect
https://bz.apache.org/ooo/attachment.cgi?id=85289=edit

--- Comment #3 from pointer  ---
Created attachment 85289
--> https://bz.apache.org/ooo/attachment.cgi?id=85289=edit
unfixed defect

please check this nd pls tell me


This seems suspicious

This is a 10 year old closed issue.

Is there virus scans on attachments?


thanks for the hint. I've disabled the user account and asked Infra for 
help to delete the comment and attachment (see 
https://issues.apache.org/jira/browse/INFRA-11269).


Marcus


-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Book on OpenOffice

2016-02-16 Thread Gerry Dutchie
Hi all,
If possibleI would like to see a reference to one of my books on your Books 
page:
http://www.openoffice.org/support/books.html
A few yearsago I wrote an extensive, 300 page book on OpenOffice 3.x. Eight 
chaptersaimed at familiarising beginners with all apps that make up OpenOffce. 
Andfifteen chapters around tasks the more experienced users might want 
toundertake. 

I haveupdated the book to accommodate users of the new 4.1.x version and I 
intend to continuedoing so for further major updates. It is written in 
Netherlands language sosuitable for the Netherlands and Flemish (Belgian) 
public. My 
website:http://ipaa.nl/uitgeverij/computerboeken/4-ik-wil-met-openoffice-aan-het-werk
As a writerwith well over fifteen years of experience in producing books on 
computer software,it is my philosophy that the reader should be guided towards 
practical,everyday use of the software. All examples and files, used in the 
book can beobtained through a free download link and can be used to get one’s 
daily workdone.
Sincerely,
GerritBruijnes
---Author& Publisher---
-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Re: review requested: [Issue 67103] check in OpenOffice NetBeans integration : [Attachment 85289] unfixed defect

2016-02-16 Thread Carl Marcum

On 02/16/2016 04:40 AM, bugzi...@apache.org wrote:

pointer  has asked  for review:
Issue 67103: check in OpenOffice NetBeans integration
https://bz.apache.org/ooo/show_bug.cgi?id=67103

Attachment 85289: unfixed defect
https://bz.apache.org/ooo/attachment.cgi?id=85289=edit



--- Comment #3 from pointer  ---
Created attachment 85289
   --> https://bz.apache.org/ooo/attachment.cgi?id=85289=edit
unfixed defect

please check this nd pls tell me




This seems suspicious

This is a 10 year old closed issue.

Is there virus scans on attachments?

Carl

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org



Re: Food for Thought

2016-02-16 Thread RA Stehmann
On 15.02.2016 23:14, Patricia Shanahan wrote:


> The typical AOO user is a Windows-using non-programmer. I found just
> building AOO on Windows a challenging two week project, for which I
> needed a lot of help, despite prior familiarity with Subversion and
> Cygwin. As a practical matter, most people who need a bug fixed to make
> AOO useful to them simply do not have the option of taking it into their
> own hands.
> 
> Incidentally, that cultural difference may affect the severity of data
> loss bugs. I find someone working for an extended period on a document
> with no revision control or off-site backup a little shocking at first
> sight. Then I realized I learned about the importance of revision
> control and off-site backup on the job, not in my non-programming life.
> 
> Maybe it would be helpful for the PMC to select a very, very short "Most
> wanted" list, based on user requests, feedback at conferences etc. That
> would help new AOO recruits pick a focus.

There are two differences between AOO and most of the other Apache projects.

The first is a technical one: The huge size of the code.

The second is a "social" one: AOO is an enduser project, and not a
project developing code used by it-professionals. Patricia described it
well above.

So AOO has to find a special "Apache Way" of doing things proper.

I'm a living example for that: I'm a member of the PMC without ever
having written a single line of code for AOO (Shame on me ;-) ). I
think, you won't find such cases in other Apache PMCs.

For an OpenOffice supporter it is quite normal doing other things than
developing the code: Doing QA, documentation, translation, user support
and training, extensions, so called marketing etc.

So we have to find procedures, how all these people with different
functions can collaborate in a proper way.

Just a little more "Food for Thought".

Kind regards
Michael





signature.asc
Description: OpenPGP digital signature


review requested: [Issue 67103] check in OpenOffice NetBeans integration : [Attachment 85289] unfixed defect

2016-02-16 Thread bugzilla
pointer  has asked  for review:
Issue 67103: check in OpenOffice NetBeans integration
https://bz.apache.org/ooo/show_bug.cgi?id=67103

Attachment 85289: unfixed defect
https://bz.apache.org/ooo/attachment.cgi?id=85289=edit



--- Comment #3 from pointer  ---
Created attachment 85289
  --> https://bz.apache.org/ooo/attachment.cgi?id=85289=edit
unfixed defect

please check this nd pls tell me

-
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org