Apache OpenOffice (AOO) Bugzilla – Issue 69366
supportsService on Textportion type "Frame" crashes OOo
Last modified: 2013-02-24 21:09:43 UTC
The attached document contains a horizontal line that is anchored as character, so it appears as TextPortion in the XEnumeration for the paragraph. It has TextPortionType "Frame". If you attempt to call supportsService on this TextPortion, the whole OOo crashes. The included macro demonstrates this. Just let it run and your OOo will crash hard. Tested on Linux and Windows with OOo Basic and Java. The macro tries to test for a nonsense-service "foo", but the crash is NOT related to this. It also occurs when testing for legitimate services. Xray also crashes when trying to list Services for this object as does a program we use internally so it seems that the getAvailableServiceNames() method is broken, too. This crash is not an exotic fringe case. We found this during our migration project. It affects several dozens of our documents and we'll have to rewrite our production code to work around this.
Created attachment 39030 [details] Run the included macro and OOo crashes
jsc -> tl: i can reproduce this issue, please take care of it
cc jsc
.
Fixed in CWS tl25. SwXTextPortion does not check anymore for support of css.text.TextFrame, css.text.TextGraphicObject and css.text.TextEmbeddedObject now. This is because of a previous change in handling of those objects. Files changed: - sw/source/core/unocore/unoport.cxx
ok in tl25
ok in src680_m202
Could someone please set a target milestone for this one.