GNOME Bugzilla – Bug 577145
Applix import crash
Last modified: 2009-03-29 02:40:21 UTC
Version: r17248 OS: Ubuntu Intrepid The upcoming file is a fuzzed version of Attachment 7101 [details] (.as file from Bug 74241). Steps to reproduce: - Import the upcoming attachment to trigger a crash Valgrind log: CRITICAL **: sheet_col_set_default_size_pixels: assertion `IS_SHEET (sheet)' failed ==9775== Invalid read of size 1 ==9775== at 0x410FC42: sheet_colrow_default_calc (sheet.c:4490) ==9775== by 0x4110C5A: sheet_row_set_default_size_pixels (sheet.c:4837) ==9775== by 0x7DECB52: applix_read_view (applix-read.c:1034) ==9775== by 0x7DEE2B0: applix_read_impl (applix-read.c:1502) ==9775== by 0x7DEEBE2: applix_read (applix-read.c:1657) ==9775== by 0x7DEA75D: applix_file_open (boot.c:61) ==9775== by 0x4492825: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239) ==9775== by 0x4494253: go_plugin_file_opener_open (go-plugin-service.c:476) ==9775== by 0x4496BA3: go_file_opener_open (file.c:299) ==9775== by 0x4157B85: wb_view_new_from_input (workbook-view.c:1058) ==9775== by 0x4157D1B: wb_view_new_from_uri (workbook-view.c:1112) ==9775== by 0x804C0FA: main (main-application.c:413) ==9775== Address 0x5c is not stack'd, malloc'd or (recently) free'd ==9775== ==9775== Process terminating with default action of signal 11 (SIGSEGV) ==9775== Access not within mapped region at address 0x5C ==9775== at 0x410FC42: sheet_colrow_default_calc (sheet.c:4490) ==9775== by 0x4110C5A: sheet_row_set_default_size_pixels (sheet.c:4837) ==9775== by 0x7DECB52: applix_read_view (applix-read.c:1034) ==9775== by 0x7DEE2B0: applix_read_impl (applix-read.c:1502) ==9775== by 0x7DEEBE2: applix_read (applix-read.c:1657) ==9775== by 0x7DEA75D: applix_file_open (boot.c:61) ==9775== by 0x4492825: go_plugin_loader_module_func_file_open (go-plugin-loader-module.c:239) ==9775== by 0x4494253: go_plugin_file_opener_open (go-plugin-service.c:476) ==9775== by 0x4496BA3: go_file_opener_open (file.c:299) ==9775== by 0x4157B85: wb_view_new_from_input (workbook-view.c:1058) ==9775== by 0x4157D1B: wb_view_new_from_uri (workbook-view.c:1112) ==9775== by 0x804C0FA: main (main-application.c:413)
Created attachment 131607 [details] fuzzed as file
This problem has been fixed in the development version. The fix will be available in the next major software release. Thank you for your bug report.