协同附件浏览或下载报错

协同6.2附件浏览或下载报错，不知道哪里出了问题，上传正常。
java.lang.StringIndexOutOfBoundsException at java.lang.String.substring(String.java:1088) at cn.firstsoft.modules.workflow.web.WorkflowFileattachManagerController.openOnLine(WorkflowFileattachManagerController.java:699) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:618) at org.springframework.web.servlet.mvc.multiaction.MultiActionController.invokeNamedMethod(MultiActionController.java:473) at org.springframework.web.servlet.mvc.multiaction.MultiActionController.handleRequestInternal(MultiActionController.java:410) at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153) at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:48) at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:875) at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:807) at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:571) at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:501) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) at com.apusic.web.container.ServletComponent.service(Unknown Source) at com.apusic.web.container.ServletFilterWrapper.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at cn.firstsoft.firstframe.web.support.EcpFilter.doFilter(EcpFilter.java:62) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at cn.firstsoft.firstframe.web.support.SessionFilter.doFilter(SessionFilter.java:85) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at org.extremecomponents.table.filter.AbstractExportFilter.doFilter(AbstractExportFilter.java:49) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at org.springside.core.web.MessageFilter.doFilter(MessageFilter.java:38) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at org.springside.core.web.BaseLog4JUserFilter.doFilter(BaseLog4JUserFilter.java:27) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:119) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:55) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at org.springframework.orm.hibernate3.support.OpenSessionInViewFilter.doFilterInternal(OpenSessionInViewFilter.java:198) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:264) at org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:107) at org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:72) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274) at org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:110) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274) at org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:81) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274) at org.acegisecurity.ui.logout.LogoutFilter.doFilter(LogoutFilter.java:108) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274) at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:216) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274) at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:195) at org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274) at org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:148) at org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:90) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.doFilter(Unknown Source) at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:96) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at com.apusic.web.container.FilterComponent.doFilter(Unknown Source) at com.apusic.web.container.FilterChainImpl.performFilter(Unknown Source) at com.apusic.web.container.WebContainer.invoke(Unknown Source) at com.apusic.web.container.WebContainer.processRequest(Unknown Source) at com.apusic.web.http.VirtualHost.processRequest(Unknown Source) at com.apusic.web.http.HttpServer.processRequest(Unknown Source) at com.apusic.web.http.HttpConnectionHandler.service(Unknown Source) at com.apusic.web.http.ConnectionHandler.processRequest(Unknown Source) at com.apusic.web.http.ConnectionHandler.processConnection(Unknown Source) at com.apusic.web.http.ConnectionHandler.run(Unknown Source) at com.apusic.util.ThreadPoolImpl$WorkerThread.run(Unknown Source)