[Issue] Writer hidden password length problem

[ve3id]

I recently created a password-encrypted file. Next day I came back and got the 'incorrect password' message when I tried to open it. I know very well that the password I was using was correct, so I reasoned that it was a bug in the software. After trying all the suggestions that I found on this site, I still had not been able to open the file.

As a last resort, I tried opening the file, but each time leaving off the last character of the password. I started out with a 17 character password, and after only two tries I was able to open the file.

So, it seems that OO writer has an undocumented limit of 15 characters for the password. The problem is that it will allow you to enter a longer password, allow you to confirm it, but only store the first 15 characters. But when you go to open the file, it will compare the full password you type to the shorter one that it has stored.

Seems like there needs to be a bounds check on entering the password!

[RoryOF]

Reported to the OO DEV list, with a link to this thread.

[RoryOF]

This is reported on Bugzilla at
https://bz.apache.org/ooo/show_bug.cgi?id=122151

There seems to be no limit on password length in ODF formats, 15 chars on MS formats.