Created attachment 122887 [details] MathML file that causes Writer to crash When importing a formula where the fontwheigt attribute is specified Writer crashes. Specifically this causes writer to crash when trying to import formulas from Maplesoft Maple 18. This bug is always reproducible. How to reproduce: Possibility a: Insert->Object->Formula->Tools->InsertFormula->choose crash.mml file Possibility b: Doubble click on the crash.mml file The crash.mml file looks like this ... <mi ... fontweight='normal'>a</mi> ... Expected result: Writer ignores the fontweight attribute Actual result: Writer crashes See the attached *.mml files. Additional Info: Suse Linux LEAP
Created attachment 122888 [details] MathML file that causes Writer not to crash only diffrence to the crash.mml is the missing fontweight attribute
Created attachment 122891 [details] bt with debug symbols On pc Debian x86-64 with master sources updated yesterday, I could reproduce this.
Oliver Specht committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=529e06a1b855ac83468230a15903aeafe1ac89a7 tdf#98088: prevent access to invalid sub node It will be available in 5.2.0. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Oliver Specht committed a patch related to this issue. It has been pushed to "libreoffice-5-1": http://cgit.freedesktop.org/libreoffice/core/commit/?id=cda827958eefb636a4dbe57e1df7d21b5878171f&h=libreoffice-5-1 tdf#98088: prevent access to invalid sub node It will be available in 5.1.4. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.