Change-Id: I2317522af91c8c60672c72a3b514767039930e22

Change-Id: I7639df64242e5b30f9857363b3be33d61bf28594

Change-Id: Ie5e9e21f4c592c58094afc954f1de54512719fd5

Change-Id: Iacd3efa9e5d6103ad92e15884e8aa010d7b2ae93

Change-Id: I502702dfd04405748a314bd171e6298850777c0a

Change-Id: I670fbcd83e368f2821d37a392cbc007b1f4cd55e

Change-Id: If21a079134f659a91f0b0ce400aef56bd095effe

Change-Id: Ia4111a0fb76c848d3bd2d01f3835995e4c007b6b

Change-Id: I0d254902727f6d9c874aaeed7c22096f282422d0

Change-Id: I1d428ccd434b7b6f61461ea29447291759c3a7bf

Change-Id: Ieceecb849ade05a4f6dcd6c783da6ab53508323d

Change-Id: I6f18ab4dc082e30e51b4c0020dff4ff098275b60

Change-Id: Id440c165f6e98a7d0fe0c8c578e404db75416c48

Change-Id: I6301c6d01b62540d0a765b78323a46ee3a4965c8

Change-Id: Ic331af3539ed0a8ce6f56697ee1dede004685c32

Change-Id: I3c43c34e66772ce7e42b42be04e0591f2e78ec01

Change-Id: I447500c4695b45afe86a8b8d6b6294507f58cd3f

Change-Id: Ib8bbba8d6e3364f7474643ddb60a469497437616

Change-Id: If6fca7f7761877b5642eddb800de46efb59aa6dc

Change-Id: I395fc9cbdd90ead54ef3007df97453b76d1101a7

Change-Id: I98f62391ee27c806f89cd8b85a04d67d1bcc78b7

Change-Id: I78895f3524086e1d00d9e8eafd52e505f786320b

Change-Id: I6bc306aa59b5610b987871ea8cf6e561233178c6

Change-Id: I7f22aa5576ca3c62fa363971f4fa5992b7711563

Change-Id: Iae319f84028bb2468ca663afe9a82eb3cf46ae37

Change-Id: I3f3adebc0916c96b50e15c68b627e655166e2551

Change-Id: I6cd46964c523c9393e9d249fdb43aaa38679fa06

Change-Id: Ida2e09b88c9df0d70c8298020d768e6386714edd

Change-Id: Ie8e6f615b6338b736fafda92a7991642fde47b15

Change-Id: Ib0a2d8d69f5bd43872c949d79c685f71657dc9db

Change-Id: Idc75fd0735452ffdf6a21e3597cd3fe74f651581

This method calls DocxSdrExport::writeDMLDrawing(), which may call back
WriteTextBox(), which may call WritePostponedDMLDrawing() again.  The
result is that we try to flush drawings inside a shape which were
postponed outside of it.  Luckily, StartRunProperties() asserts this, so
instaed of silent corruption, such an attempt crashes.

Fix the crash by saving the postponed drawings on the stack, and
restoring them after the shape export finished.

CppunitTest_sw_ooxmlsdrexport's testAnchorIdForWP14AndW14 is a
reproducer for this problem (when shape with text is imported as shape
with textbox).

Change-Id: Id5aeda33472655697717401c24dd54e7efabacd9

RTFSdrImport::resolve() is called for \picprop and creates an XShape
that is stored in RTFSdrImport::m_xShape and also
DomainMapper_Impl::m_aPendingShapes;
later RTFDocumentImpl::resolvePict() completely ignores that XShape
and creates a new one, which is also inserted in the document;
the first XShape is effectively leaked.

Try to avoid that by re-using the exising m_xShape in resolvePict().
Not sure if there are any problems with doing this, it's all a bit
confusing.

Change-Id: I98456242acb0766f547eb8f7d877f51d53323f3a

If the shape properties are inside \picprop destination, don't set
shapeType.

(regression from 9f1f7199)

Actually this does not fix the root cause, this is just a work-around,
the extra shape is still inserted but it's invisible now.

Change-Id: I6cf093de2a5657533f393863ed8010ae083bec16

also

coverity#706301

Change-Id: Ie6eba530c9a2f822226fbd1b1a6aa49deaf99659

also
coverity#706515
coverity#706516
coverity#706517
coverity#706528
coverity#706529

Change-Id: I5beb753d5cc8ed976b3c11319cc36415adebd1e6

Change-Id: Ib3b25a0aab2389be68fc8339f9b08a87de419b33

Regression introduced with 83f77ab0.

Interpreter errors are transported using NaN coded doubles, using simple
setNan()/isNan() to flag and ignore non-numeric values skips all error
values.

Change-Id: I0d3cb30262bc5ba7ee77e53a2bc45e56569fbc4b

ForceArray parameters weren't propagated and enforced to array arguments
on svJump tokens (FormulaJumpToken), namely IF, CHOOSE, IFERROR and
IFNA.

Change-Id: Icf9074f11b826655a52858d778d9a0122d207aa4

Change-Id: I89ea074bacf7884fe8b8471cfd208f643326a7e1