Issue 104155

Summary: Some docx documents crash on load
Product: xml Reporter: kendy
Component: codeAssignee: Oliver Specht <os_ooo>
Status: CLOSED FIXED QA Contact: issues@xml <issues>
Severity: Trivial    
Priority: P2 CC: cedric.bosdonnat.ooo, issues, Mathias_Bauer, openoffice, stefan.baltzer
Version: DEV300m54Keywords: regression
Target Milestone: OOo 3.2   
Hardware: All   
OS: Linux, all   
Issue Type: DEFECT Latest Confirmation in: ---
Developer Difficulty: ---
Issue Depends on:    
Issue Blocks: 99999    
Attachments:
Description Flags
The file causing the crash. none

Description kendy 2009-08-11 13:40:43 UTC 
The backtrace leads to oox:

Program received signal SIGSEGV, Segmentation fault.
0x00007fffd78dcc5f in oox::StorageBase::getSubStorage(rtl::OUString const&, 
bool) ()
   
from /local/inst/dev300-m54/openoffice.org3/program/../basis-link/program/libooxlx.so
#1  0x00007fffd78dd1c7 in oox::StorageBase::openInputStream(rtl::OUString 
const&) ()
   
from /local/inst/dev300-m54/openoffice.org3/program/../basis-link/program/libooxlx.so
#2  0x00007fffd78e3641 in oox::core::FilterBase::openInputStream(rtl::OUString 
const&) const ()
   
from /local/inst/dev300-m54/openoffice.org3/program/../basis-link/program/libooxlx.so
#3  0x00007fffd78ee0ea in ?? () 
from /local/inst/dev300-m54/openoffice.org3/program/../basis-link/program/libooxlx.so
#4  0x00007fffd78f4e77 in 
oox::core::XmlFilterBase::importFragment(rtl::Reference<oox::core::FragmentHandler> 
const&) ()
   
from /local/inst/dev300-m54/openoffice.org3/program/../basis-link/program/libooxlx.so
#5  0x00007fffd78f6317 in 
oox::core::XmlFilterBase::importRelations(rtl::OUString const&) ()
   
from /local/inst/dev300-m54/openoffice.org3/program/../basis-link/program/libooxlx.so

Let me attach the test document.
Comment 1 kendy 2009-08-11 13:46:01 UTC 
Created attachment 64066 [details]
The file causing the crash.
Comment 2 kendy 2009-08-11 13:47:17 UTC 
Just a note, the file loaded just OK with m49, and does not work in m54.
Comment 3 daniel.rentz 2009-08-11 14:02:00 UTC 
started
Comment 4 daniel.rentz 2009-08-11 14:02:45 UTC 
target
Comment 5 daniel.rentz 2009-08-26 09:45:49 UTC 
dr->hbrinkm:
Seems that oox::shape::ShapeContextHandler is using an uninitialized (or at
least partly initialized) XmlFilterBase object. The members mxImpl->maFileUrl
and mxImpl->mxStorage are empty. The latter causes the crash while calling
FilterBase::openInputStream( "word/_rels/document.xml.rels" ) to read a
relations stream.

The mentioned members are inizialized while setting the media descriptor which
is a must to use the FilterBase class correclty. This is usually done directly
from the filter() API call that provides the filter descriptor as sequence of
PropertyValues.

P2 as it seems to crash with any DOCX containing shapes.
Comment 6 Oliver Specht 2009-09-07 12:13:19 UTC 
Fixed in cws writerfilter32bugfixes01 in 
oox/source/core/filterbase.cxx

->cedricbosdo: Please add this issue to the cws and add me as member of that cws
Comment 7 Oliver Specht 2009-09-07 12:13:56 UTC 
Set to fixed
Comment 8 cedric.bosdonnat.ooo 2009-09-07 13:53:50 UTC 
cedricbosd->os: the EIS informations are updated.
Comment 9 openoffice 2009-09-21 10:09:11 UTC 
*** Issue 105035 has been marked as a duplicate of this issue. ***
Comment 10 stefan.baltzer 2009-09-22 13:12:43 UTC 
According to comment from kendy ("broken after m49"), I set keyword "regression".
Comment 11 openoffice 2010-07-30 10:16:59 UTC 
wrong resolution
Comment 12 openoffice 2010-07-30 10:19:16 UTC 
Resetting resolution.
Got played on by IssueZilla.
Comment 13 Mathias_Bauer 2011-02-09 12:24:41 UTC 
Please update the status of this issue: can we close it?
Comment 14 Oliver Specht 2011-02-11 14:39:58 UTC 
set to verified
This issue has not been added to the cws but the fix was included.
Comment 15 Oliver Specht 2011-02-11 14:40:19 UTC 
closing