GNOME Bugzilla – Bug 517141
Valgrind errors in mps_parse_rows()
Last modified: 2008-02-18 15:25:11 UTC
Version: r16376 OS: Ubuntu Gutsy The upcoming sample is a fuzzed version of blend.mps. Steps to reproduce: - Load the upcoming attachment in Gnumeric to trigger a crash Backtrace: Program received signal SIGSEGV, Segmentation fault.
+ Trace 189551
Thread NaN (LWP 10066)
Valgrind output: ==9969== Use of uninitialised value of size 4 ==9969== at 0x6EEFB3D: mps_parse_rows (parser.c:305) ==9969== by 0x6EF0530: mps_parse_file (parser.c:550) ==9969== by 0x6EEF0E5: mps_file_open (mps.c:633) ==9969== by 0x45CC445: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239) ==9969== by 0x45CDEC7: go_plugin_file_opener_open (go-plugin-service.c:476) ==9969== by 0x45D0817: go_file_opener_open (file.c:294) ==9969== by 0x414FFC2: wb_view_new_from_input (workbook-view.c:1212) ==9969== by 0x415016D: wb_view_new_from_uri (workbook-view.c:1264) ==9969== by 0x804C23A: main (main-application.c:417) ==9969== ==9969== Invalid read of size 4 ==9969== at 0x6EEFB3D: mps_parse_rows (parser.c:305) ==9969== by 0x6EF0530: mps_parse_file (parser.c:550) ==9969== by 0x6EEF0E5: mps_file_open (mps.c:633) ==9969== by 0x45CC445: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239) ==9969== by 0x45CDEC7: go_plugin_file_opener_open (go-plugin-service.c:476) ==9969== by 0x45D0817: go_file_opener_open (file.c:294) ==9969== by 0x414FFC2: wb_view_new_from_input (workbook-view.c:1212) ==9969== by 0x415016D: wb_view_new_from_uri (workbook-view.c:1264) ==9969== by 0x804C23A: main (main-application.c:417) ==9969== Address 0x4 is not stack'd, malloc'd or (recently) free'd ==9969== ==9969== Process terminating with default action of signal 11 (SIGSEGV) ==9969== Access not within mapped region at address 0x4 ==9969== at 0x6EEFB3D: mps_parse_rows (parser.c:305) ==9969== by 0x6EF0530: mps_parse_file (parser.c:550) ==9969== by 0x6EEF0E5: mps_file_open (mps.c:633) ==9969== by 0x45CC445: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239) ==9969== by 0x45CDEC7: go_plugin_file_opener_open (go-plugin-service.c:476) ==9969== by 0x45D0817: go_file_opener_open (file.c:294) ==9969== by 0x414FFC2: wb_view_new_from_input (workbook-view.c:1212) ==9969== by 0x415016D: wb_view_new_from_uri (workbook-view.c:1264) ==9969== by 0x804C23A: main (main-application.c:417) Segmentation fault (core dumped)
Created attachment 105478 [details] fuzzed blend.mps
This problem has been fixed in our software repository. The fix will go into the next software release. Thank you for your bug report.