Change-Id: I6301c6d01b62540d0a765b78323a46ee3a4965c8

Change-Id: Ic331af3539ed0a8ce6f56697ee1dede004685c32

Change-Id: I3c43c34e66772ce7e42b42be04e0591f2e78ec01

Change-Id: I447500c4695b45afe86a8b8d6b6294507f58cd3f

Change-Id: Ib8bbba8d6e3364f7474643ddb60a469497437616

Change-Id: If6fca7f7761877b5642eddb800de46efb59aa6dc

Change-Id: I395fc9cbdd90ead54ef3007df97453b76d1101a7

Change-Id: I98f62391ee27c806f89cd8b85a04d67d1bcc78b7

Change-Id: I78895f3524086e1d00d9e8eafd52e505f786320b

Change-Id: I6bc306aa59b5610b987871ea8cf6e561233178c6

Change-Id: I7f22aa5576ca3c62fa363971f4fa5992b7711563

Change-Id: Iae319f84028bb2468ca663afe9a82eb3cf46ae37

Change-Id: I3f3adebc0916c96b50e15c68b627e655166e2551

Change-Id: I6cd46964c523c9393e9d249fdb43aaa38679fa06

Change-Id: Ida2e09b88c9df0d70c8298020d768e6386714edd

Change-Id: Ie8e6f615b6338b736fafda92a7991642fde47b15

Change-Id: Ib0a2d8d69f5bd43872c949d79c685f71657dc9db

Change-Id: Idc75fd0735452ffdf6a21e3597cd3fe74f651581

This method calls DocxSdrExport::writeDMLDrawing(), which may call back
WriteTextBox(), which may call WritePostponedDMLDrawing() again.  The
result is that we try to flush drawings inside a shape which were
postponed outside of it.  Luckily, StartRunProperties() asserts this, so
instaed of silent corruption, such an attempt crashes.

Fix the crash by saving the postponed drawings on the stack, and
restoring them after the shape export finished.

CppunitTest_sw_ooxmlsdrexport's testAnchorIdForWP14AndW14 is a
reproducer for this problem (when shape with text is imported as shape
with textbox).

Change-Id: Id5aeda33472655697717401c24dd54e7efabacd9

RTFSdrImport::resolve() is called for \picprop and creates an XShape
that is stored in RTFSdrImport::m_xShape and also
DomainMapper_Impl::m_aPendingShapes;
later RTFDocumentImpl::resolvePict() completely ignores that XShape
and creates a new one, which is also inserted in the document;
the first XShape is effectively leaked.

Try to avoid that by re-using the exising m_xShape in resolvePict().
Not sure if there are any problems with doing this, it's all a bit
confusing.

Change-Id: I98456242acb0766f547eb8f7d877f51d53323f3a

If the shape properties are inside \picprop destination, don't set
shapeType.

(regression from 9f1f7199)

Actually this does not fix the root cause, this is just a work-around,
the extra shape is still inserted but it's invisible now.

Change-Id: I6cf093de2a5657533f393863ed8010ae083bec16

also

coverity#706301

Change-Id: Ie6eba530c9a2f822226fbd1b1a6aa49deaf99659

also
coverity#706515
coverity#706516
coverity#706517
coverity#706528
coverity#706529

Change-Id: I5beb753d5cc8ed976b3c11319cc36415adebd1e6

Change-Id: Ib3b25a0aab2389be68fc8339f9b08a87de419b33

Regression introduced with 83f77ab0.

Interpreter errors are transported using NaN coded doubles, using simple
setNan()/isNan() to flag and ignore non-numeric values skips all error
values.

Change-Id: I0d3cb30262bc5ba7ee77e53a2bc45e56569fbc4b

ForceArray parameters weren't propagated and enforced to array arguments
on svJump tokens (FormulaJumpToken), namely IF, CHOOSE, IFERROR and
IFNA.

Change-Id: Icf9074f11b826655a52858d778d9a0122d207aa4

Change-Id: I89ea074bacf7884fe8b8471cfd208f643326a7e1

Change-Id: I1da5edfdfd15ec8205de6467bd6c88dc5596426f

Change-Id: Ie2299485b8017232b6cfcb855b6f2dbff2c5db6e

Change-Id: I7414fffb0ab0aa7c52ba58d666c26abc4367798c

Change-Id: I41d841718da2eab8a6f424df694ba8ea4e450bac

Change-Id: Ie2ec61c75d036dbad68bd43d5a2eb9834dadd735

Change-Id: Ic951a16c3d44b36ce82f05381c98e13e74b8bc35

Change-Id: Id5ce3555c487aa7abcf97855a036663c91dd28b1

Change-Id: I9e2fd1249061fcf386a8812a42450e52d37bdc5c

Change-Id: Icf80cff1f68e85bf9103aedc95ccca80e2d32681

I can see nowhere that m_pHScrollbar or m_pVScrollbar are
set to NULL, deleted yes in the dtor, but nowhere NULLed.

Change-Id: I3012be6de1117757237884deebacc9e0e29dc7a7

The TextRange property of a shape is its anchor position: if that's
adjusted, then also set the textbox's RES_ANCHOR to the new position.

Without this, e.g. shapes anchored in headers have their textboxes
anchored in the body text, CppunitTest_sw_ooxmlexport's testfdo78420 is
a reproducer.

Change-Id: I83ed09875c3f0360c581c331507ad2b9d05ffb3a

Also, let the new SwTextBoxHelper::restoreLinks() restore also the
RES_CNTNT of the *old* draw formats, not only the link between the new
draw and fly formats.

This allows properly preserving the link between draw and fly formats,
when they are in the header (and so copied in and out variously).

Change-Id: I101ff06533e2ea27abea8bed171ed69c9649ebe8

In case a shape (has a draw format) has a textbox (RES_CNTNT of the draw
format), then that's just a pointer to that content, but the draw format
doesn't own it: the matching fly format does. So ignore that content
when deleting the layout format in case of draw formats: that ensures
when both the draw and the fly format is deleted, deletion is only
performed once.

Change-Id: Idb4bb19130a6b9acd8f8d3710b9982801b416dda