Created attachment 168000 [details]
Corrupted ods file

It's unclear who is to blame here, but it's bad.

==17266== Invalid read of size 8
==17266==    at 0x4EBE5E3: collect_floats (collect.c:378)
==17266==    by 0x4EBE8A0: float_range_function (collect.c:491)
==17266==    by 0x4EE725E: function_call_with_exprs (func.c:1465)
==17266==    by 0x4EDD64F: gnm_expr_eval (expr.c:1414)
==17266==    by 0x4EDE13A: gnm_expr_top_eval (expr.c:3030)
==17266==    by 0x4ED72BD: gnm_cell_eval_content (dependent.c:1499)
==17266==    by 0x4ED75EF: workbook_recalc (dependent.c:1595)
==17266==    by 0x4F7F46E: wb_view_new_from_input (workbook-view.c:1268)
==17266==    by 0x4F7F66C: wb_view_new_from_uri (workbook-view.c:1309)
==17266==    by 0x403D00: convert (ssconvert.c:552)
==17266==    by 0x40423F: main (ssconvert.c:692)
==17266==  Address 0xce8c720 is 24 bytes inside a block of size 32 free'd
==17266==    at 0x4C2430F: free (in /usr/lib64/valgrind/amd64-linux/vgpreload_memcheck.so)
==17266==    by 0xA4340CD: (within /usr/lib64/libglib-2.0.so.0.1600.3)
==17266==    by 0x4EBE70F: collect_floats (collect.c:434)
==17266==    by 0x4EBE8A0: float_range_function (collect.c:491)
==17266==    by 0x4EE725E: function_call_with_exprs (func.c:1465)
==17266==    by 0x4EDD64F: gnm_expr_eval (expr.c:1414)
==17266==    by 0x4EDD5E4: gnm_expr_eval (expr.c:1223)
==17266==    by 0x4EDE13A: gnm_expr_top_eval (expr.c:3030)
==17266==    by 0x4ED72BD: gnm_cell_eval_content (dependent.c:1499)
==17266==    by 0x4EDDAF7: gnm_expr_eval (expr.c:1454)
==17266==    by 0x4EE8196: gnumeric_if2 (func-builtin.c:320)
==17266==    by 0x4EE7718: function_call_with_exprs (func.c:1480)