Created attachment 122640 [details]
Document that crashes ooo
Description of problem:
Some images make openoffice crash while opening or handling OpenOffice format
text files produced by GRAMPS.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Open the attached file
$ /usr/lib/openoffice.org2.0/program/soffice: line 156: 5677 ViolaciÃ³n de
segmento (core dumped) "$sd_prog/$sd_binary" "$@"
The sample file is produced by GRAMPS. The problem seems image-specific, since
other images are shown normally. I have produced a very short file containing
just one failing image to exhibit the problem.
Though I have not marked it as security-related, it is a crash induced by user
input. The potential security problem there should be considered.
The problem is related to the path name to the image, it is coded as iso-8859-1,
while the reference to it in the manifest and in contents.xml is in utf-8.
However, changing the path name encoding to utf-8 does not fix it, it still
dies. In fact, I have been unable to find any encoding that does not make it
crash. Apparently, it is impossible to have an embedded image that has a name
inside the .zip file that is not pure plain ASCII.
Nonetheless, and whether this is supported or not, ooo must not crash on this.
http://qa.openoffice.org/issues/show_bug.cgi?id=51301 is relevent here