http://bugs.winehq.org/show_bug.cgi?id=60088 Bug ID: 60088 Summary: ole32/storage: extra trailing NUL byte written into name of stream nested in a substorage (breaks MS Publisher .pub file portability) Product: Wine Version: 9.0 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ole32 Assignee: wine-bugs@list.winehq.org Reporter: veliga99@gmail.com Target Milestone: --- Distribution: --- When a Microsoft Publisher 2003 (.pub) document containing embedded pictures is saved under Wine, the OLE compound-file stream named "EscherDelayStm" — nested inside the "Escher" substorage — is written with an extra trailing NUL character as part of its name: "EscherDelayStm\x00" (15 UTF-16 units) instead of the correct "EscherDelayStm" (14 UTF-16 units). The directory entry's "Name Length" field is internally consistent with this wrong name (32 instead of 30), so the file remains structurally valid and is read back fine by Wine itself, by the Python `olefile` library, and by the independent `libmspub` parser — but real Windows/Publisher, which resolves this stream by an exact name lookup, fails to find it. Notably, the sibling stream "EscherStm" in the very same substorage is always written correctly, with no extra byte — this points to something specific to how this particular stream (or streams nested in a substorage more generally) gets created/named, rather than a blanket string-length bug affecting every stream. Impact: if the stream is empty (no embedded pictures), the bug has no visible effect. If it holds real picture data (any Publisher document with at least one embedded image), the resulting .pub file: - crashes Publisher 2003 silently on open (native Windows), and - is flatly refused by Publisher 2016+ ("a problem was detected with this file", Office File Validation). This makes any Publisher document with pictures, edited under Wine, unopenable once transferred back to a real Windows machine. Reproduction: 1. Under Wine, open/create a Publisher 2003 (.pub) document containing at least one embedded picture, and save it. 2. Compare the OLE stream names in "Escher/*" against a reference file saved by native Windows Publisher (e.g. with `olefile` in Python, or any compound-file browser) — the Wine-saved file will show "EscherDelayStm\x00" (note the visible extra byte) where Windows shows "EscherDelayStm". 3. Attempt to open the Wine-saved file with native Windows Publisher: it fails (silent crash on 2003, explicit rejection on 2016+). Confirmed fix: manually correcting only the 2-byte "Name Length" field of this stream's directory entry (32 -> 30, no other byte touched) makes the file open correctly again under native Windows Publisher — verified on multiple real documents. A minimal reproduction script and full write-up (including a working Python-based post-hoc fix, for anyone hitting this before it's fixed in Wine itself) is available at: https://github.com/veliga-syutkin/mspub-wine-escherdelaystm-fix -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.