Bug 42896 - Impress is auto-executing macros even when these are disabled
Summary: Impress is auto-executing macros even when these are disabled
Status: RESOLVED NOTABUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Impress (show other bugs)
Version:
(earliest affected)
3.4.4 release
Hardware: Other All
: medium major
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-13 22:42 UTC by Ramon Casha
Modified: 2012-05-04 03:24 UTC (History)
0 users

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ramon Casha 2011-11-13 22:42:05 UTC
I tried opening a PPS presentation using Impress, and it immediately launched into "View Presentation" mode. Upon pressing escape, Impress was automatically closed. 

My Macro security settings are set to "Very High" and there are no trusted certificates or trusted locations. It should not execute any macros under these conditions.

This bug poses a very severe security risk.
Comment 1 Alex Thurgood 2011-11-14 00:09:30 UTC
Hi,

Which macros exactly ran automatically ?

If your objection is that the PPS launched automatically in slideshow mode, then this is behaviour as designed, i.e. the soffice process is doing what it is supposed to do when it picks up a file bearing the extension PPS.

If you do not want it to open the file in presentation mode, then change the extension of your file to PPT.

This functionality was introduced into the code by Oracle during OpenOffice.org development (and hence taken up into the LibreOffice code) as a result of many requests by users complaining that their PPS files did not start automatically in presentation mode.

The end conclusion is that this is not a bug in the current state of affairs, unless you can show that there are macros in your PPS which run despite the macro security settings being set to disable macro execution. 

As you have not shown that to be the case by providing one or more examples, I'm setting this to resolved, not a bug.

Alex
Comment 2 Ramon Casha 2011-11-14 03:09:05 UTC
You're right about this - renaming to PPT prevented the automatic slideshow.

However this is very counter-intuitive. There seems to be no option "do not auto-run" or similar that would allow someone to open a PPS slideshow in normal "edit" mode.

Personally, I would have the slideshow auto-launch if the file is opened in the OS file management application, but if it is opened from soffice's File-Open dialog it should either open in edit mode, or offer an option to do so.
Comment 3 Roman Eisele 2012-05-04 03:24:30 UTC
This is an Impress issue, therefore changed the 'Component' field appropriately.