When parsing some doc files, the _numberText might be below zero (I don't why) and then cause error, such as java.lang.NegativeArraySizeException at org.apache.poi.hwpf.model.ListLevel.<init>(ListLevel.java:115) at org.apache.poi.hwpf.model.ListFormatOverrideLevel.<init> (ListFormatOverrideL evel.java:48) at org.apache.poi.hwpf.model.ListTables.<init>(ListTables.java:85) at org.apache.poi.hwpf.HWPFDocument.<init>(HWPFDocument.java:172) .............
Created attachment 14111 [details] I add some handle about _numberText in ListLevel.java. I add some handle about _numberText in ListLevel.java.
Patch applied. However, we don't have a test case.