ooo-build r14282 - in trunk: . patches/dev300

[michael svn gnome org]

Author: michael
Date: Fri Oct 10 14:20:41 2008
New Revision: 14282
URL: http://svn.gnome.org/viewvc/ooo-build?rev=14282&view=rev

Log:
2008-10-10  Michael Meeks  <michael meeks novell com>

        * patches/dev300/crash-sot.diff,
        * patches/dev300/apply: fuzzing bits.



Added:
   trunk/patches/dev300/crash-sot.diff
Modified:
   trunk/ChangeLog
   trunk/patches/dev300/apply

Modified: trunk/patches/dev300/apply
==============================================================================
--- trunk/patches/dev300/apply	(original)
+++ trunk/patches/dev300/apply	Fri Oct 10 14:20:41 2008
@@ -17,7 +17,8 @@
 	 Layout, VBABits, VBAObjects, CalcErrors, Store, CJK, GCJ, Lwp, \
 	 OOXML, SVGImport, AutoCorrectCapsLock, UnitTesting, \
 	 PopupRemoval, LinkWarningDlg, RadioButtons, InternalCairo, \
-	 FedoraCommonFixes, InternalMesaHeaders, LayoutDialogs, UnusedMethodsRemoval
+	 FedoraCommonFixes, InternalMesaHeaders, LayoutDialogs, UnusedMethodsRemoval, \
+	 Fuzz
 
 LinuxCommon : Common, Defaults, TangoIcons, FontConfigTemporaryHacks, \
 	      FedoraLinuxOnlyFixes, LinuxOnly, SystemBits, \
@@ -2702,6 +2703,10 @@
 instset-macos-langpacks.diff, i#64937, cloph
 sal-disable-backtrace.diff, thorsten
 
+[ Fuzz ]
+# Fuzzing work n#228555
+crash-sot.diff, i#94845, michael
+
 [ ImpressFontSize ]
 [ Fixes <= dev300-m30 <= ooo300-m3 ]
 cws-impressfontsize-m30.diff, i#8824, cl

Added: trunk/patches/dev300/crash-sot.diff
==============================================================================
--- (empty file)
+++ trunk/patches/dev300/crash-sot.diff	Fri Oct 10 14:20:41 2008
@@ -0,0 +1,16 @@
+Index: source/sdstor/stgstrms.cxx
+===================================================================
+RCS file: /cvs/util/sot/source/sdstor/stgstrms.cxx,v
+retrieving revision 1.11
+diff -u -p -r1.11 stgstrms.cxx
+--- sot/source/sdstor/stgstrms.cxx
++++ sot/source/sdstor/stgstrms.cxx
+@@ -823,6 +823,8 @@ void* StgDataStrm::GetPtr( INT32 Pos, BO
+ 
+ INT32 StgDataStrm::Read( void* pBuf, INT32 n )
+ {
++    if (n < 0)
++        return 0;
+     if( ( nPos + n ) > nSize )
+         n = nSize - nPos;
+     INT32 nDone = 0;