GNOME Bugzilla – Bug 626206
Chart related crash on corrupted chart-tests.gnumeric
Last modified: 2010-08-07 07:38:54 UTC
../libtool --mode=execute gdb --args ../src/ssconvert 'zzuftmp/ccc-1.xml' 'zzuftmp/ccc-1.gnumeric' [...] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7f64e98ca6f0 (LWP 17644)] 0x00007f64e8f74e38 in gog_series_init_style (gso=0xa36470, style=0x0) at gog-series.c:619 619 style->interesting_fields = series->plot->desc.series.style_fields;
Created attachment 167257 [details] Corrupted file
Created attachment 167265 [details] [review] Proposed patch
I don't mind that patch, but it would appear to just avoid the crash and not the cause. Shouldn't we avoid sendinf a NULL style over there in the first place?
Fully agreed, my patch was quickly written, and is intrisically bad. We should avoid to send a NULL object, and, also, do not accept a NULL pointer in go_styled_object_set_style.
Created attachment 167301 [details] [review] A much better patch
This problem has been fixed in our software repository. The fix will go into the next software release. Thank you for your bug report.