Version: r16354
OS: Ubuntu Gutsy

The upcoming sample is a fuzzed version of finfuns.xls.

Steps to reproduce:
- Load the upcoming attachment in Gnumeric to trigger a crash

Valgrind output:

==13506== Invalid read of size 1
==13506==    at 0x7133B4A: excel_parse_formula1 (ms-formula-read.c:1278)
==13506==    by 0x713512D: excel_parse_formula (ms-formula-read.c:1693)
==13506==    by 0x7112283: excel_read_FORMULA (ms-excel-read.c:2596)
==13506==    by 0x711E0B4: excel_read_sheet (ms-excel-read.c:6054)
==13506==    by 0x711F136: excel_read_BOF (ms-excel-read.c:6464)
==13506==    by 0x711F814: excel_read_workbook (ms-excel-read.c:6532)
==13506==    by 0x7103888: excel_file_open (boot.c:191)
==13506==    by 0x45CC445: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239)
==13506==    by 0x45CDEC7: go_plugin_file_opener_open (go-plugin-service.c:476)
==13506==    by 0x45D0817: go_file_opener_open (file.c:294)
==13506==    by 0x414FFC2: wb_view_new_from_input (workbook-view.c:1212)
==13506==    by 0x415016D: wb_view_new_from_uri (workbook-view.c:1264)
==13506==  Address 0x4047CC55 is not stack'd, malloc'd or (recently) free'd
==13506== 
==13506== Process terminating with default action of signal 11 (SIGSEGV)
==13506==  Access not within mapped region at address 0x4047CC55
==13506==    at 0x7133B4A: excel_parse_formula1 (ms-formula-read.c:1278)
==13506==    by 0x713512D: excel_parse_formula (ms-formula-read.c:1693)
==13506==    by 0x7112283: excel_read_FORMULA (ms-excel-read.c:2596)
==13506==    by 0x711E0B4: excel_read_sheet (ms-excel-read.c:6054)
==13506==    by 0x711F136: excel_read_BOF (ms-excel-read.c:6464)
==13506==    by 0x711F814: excel_read_workbook (ms-excel-read.c:6532)
==13506==    by 0x7103888: excel_file_open (boot.c:191)
==13506==    by 0x45CC445: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239)
==13506==    by 0x45CDEC7: go_plugin_file_opener_open (go-plugin-service.c:476)
==13506==    by 0x45D0817: go_file_opener_open (file.c:294)
==13506==    by 0x414FFC2: wb_view_new_from_input (workbook-view.c:1212)
==13506==    by 0x415016D: wb_view_new_from_uri (workbook-view.c:1264)


Backtrace:

Program received signal SIGSEGV, Segmentation fault.

+ Trace 188219