diff options
Diffstat (limited to 'app-office/openoffice/files/2.1.0/ooo-build-2.1.6-starcalc-file-format-parser-2.2.diff')
| -rw-r--r-- | app-office/openoffice/files/2.1.0/ooo-build-2.1.6-starcalc-file-format-parser-2.2.diff | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/app-office/openoffice/files/2.1.0/ooo-build-2.1.6-starcalc-file-format-parser-2.2.diff b/app-office/openoffice/files/2.1.0/ooo-build-2.1.6-starcalc-file-format-parser-2.2.diff new file mode 100644 index 000000000000..4e04dfb19bc0 --- /dev/null +++ b/app-office/openoffice/files/2.1.0/ooo-build-2.1.6-starcalc-file-format-parser-2.2.diff @@ -0,0 +1,43 @@ +--- patches/src680/apply ++++ patches/src680/apply +@@ -405,6 +405,9 @@ + hyperlinks-2.1.diff + cws-obr04-quotes.diff + ++# Critical vulnerability in OpenOffice StarCalc file format parser, CVE-2007-0238, n#241652 ++starcalc-file-format-parser-2.2.diff ++ + [ QuickStarter ] + # External splash screen implementation / 2nd time accelerator + # (Old version of these is in CWS unxsplash) +--- patches/src680/starcalc-file-format-parser-2.2.diff ++++ patches/src680/starcalc-file-format-parser-2.2.diff +@@ -0,0 +1,28 @@ ++Index: sc/source/filter/starcalc/scflt.cxx ++=================================================================== ++RCS file: /cvs/sc/sc/source/filter/starcalc/scflt.cxx,v ++retrieving revision 1.16 ++retrieving revision 1.16.84.1 ++diff -u -p -u -p -r1.16 -r1.16.84.1 ++--- sc/source/filter/starcalc/scflt.cxx 5 Oct 2006 16:21:16 -0000 1.16 +++++ sc/source/filter/starcalc/scflt.cxx 10 Jan 2007 14:31:00 -0000 1.16.84.1 ++@@ -1770,12 +1770,13 @@ void Sc10Import::LoadCol(SCCOL Col, SCTA ++ rStream >> NoteLen; ++ if (NoteLen != 0) ++ { ++- sal_Char Note[4096]; ++- rStream.Read(Note, NoteLen); ++- Note[NoteLen] = 0; ++- String aText( SC10TOSTRING(Note)); ++- ScPostIt aNote(aText, pDoc); +++ sal_Char* pNote = new sal_Char[NoteLen+1]; +++ rStream.Read(pNote, NoteLen); +++ pNote[NoteLen] = 0; +++ String aText( SC10TOSTRING(pNote)); +++ ScPostIt aNote(aText, pDoc); ++ pDoc->SetNote(Col, static_cast<SCROW> (Row), Tab, aNote ); +++ delete [] pNote; ++ } ++ } ++ pPrgrsBar->Progress(); ++ |