I tried converting a particular document (see
attachment), the convertion utility terminated. I have
found patch for that as well.
In the libole2/ms-ole.c file,
static int read_sb (MsOle *f)
{
....
....
// FIX: the ptr value should be validated
// check if the ptr is in the valid bounds
if (ptr >= f->bb->len)
{
ptr = END_OF_CHAIN;
// ptr is invalid,
// force it as the end of the chain
continue;
}
// FIX ends here
ptr = NEXT_BB (f, ptr);
}
}
After this fix, the crashing problem was not there.
Killer Document
Logged In: YES
user_id=1133964
I attach One more problematic document