Bug 575403 – Null pointer crash in oo_plot_area()

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 575403 - Null pointer crash in oo_plot_area()


Summary:	Null pointer crash in oo_plot_area()


Status:	RESOLVED FIXED

Product:	Gnumeric
Classification:	Applications
Component:	import/export OOo / OASIS
Version:	git master
Hardware:	Other All

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Jody Goldberg
QA Contact:	Jody Goldberg

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2009-03-15 05:00 UTC by sum1
Modified:	2009-03-15 18:41 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
ods file (34.56 KB, application/vnd.oasis.opendocument.spreadsheet) 2009-03-15 05:01 UTC, sum1		Details
proposed patch (583 bytes, patch) 2009-03-15 11:57 UTC, Jean Bréfort	committed	Details \| Review

Description sum1 2009-03-15 05:00:41 UTC

Version: r17207
OS: Ubuntu Intrepid

The upcoming attachment was created by converting Attachment 27615 [details] (.xls file from Bug 142212) to .ods format with OpenOffice.org 3.0.1.


Steps to reproduce:
- Import the upcoming .ods attachment


Backtrace:

Program received signal SIGSEGV, Segmentation fault.

+ Trace 213485

Thread 3066971904 (LWP 8545)

#0 oo_plot_area
at openoffice-read.c line 2193
#1 push_child
at gsf-libxml.c line 602
#2 lookup_child
at gsf-libxml.c line 639
#3 gsf_xml_in_start_element
at gsf-libxml.c line 709
#4 xmlParseStartTag
from /usr/lib/libxml2.so.2
#5 xmlParseElement
from /usr/lib/libxml2.so.2
#6 xmlParseContent
from /usr/lib/libxml2.so.2
#7 xmlParseElement
from /usr/lib/libxml2.so.2
#8 xmlParseContent
from /usr/lib/libxml2.so.2
#9 xmlParseElement
from /usr/lib/libxml2.so.2
#10 xmlParseContent
from /usr/lib/libxml2.so.2
#11 xmlParseElement
from /usr/lib/libxml2.so.2
#12 xmlParseContent
from /usr/lib/libxml2.so.2
#13 xmlParseElement
from /usr/lib/libxml2.so.2
#14 xmlParseDocument
from /usr/lib/libxml2.so.2
#15 gsf_xml_in_doc_parse
at gsf-libxml.c line 1190
#16 od_draw_object
at openoffice-read.c line 2017
#17 push_child
at gsf-libxml.c line 602
#18 lookup_child
at gsf-libxml.c line 639
#19 gsf_xml_in_start_element
at gsf-libxml.c line 709
#20 xmlParseStartTag
from /usr/lib/libxml2.so.2
#21 xmlParseElement
from /usr/lib/libxml2.so.2
#22 xmlParseContent
from /usr/lib/libxml2.so.2
#23 xmlParseElement
from /usr/lib/libxml2.so.2
#24 xmlParseContent
from /usr/lib/libxml2.so.2
#25 xmlParseElement
from /usr/lib/libxml2.so.2
#26 xmlParseContent
from /usr/lib/libxml2.so.2
#27 xmlParseElement
from /usr/lib/libxml2.so.2
#28 xmlParseContent
from /usr/lib/libxml2.so.2
#29 xmlParseElement
from /usr/lib/libxml2.so.2
#30 xmlParseContent
from /usr/lib/libxml2.so.2
#31 xmlParseElement
from /usr/lib/libxml2.so.2
#32 xmlParseContent
from /usr/lib/libxml2.so.2
#33 xmlParseElement
from /usr/lib/libxml2.so.2
#34 xmlParseContent
from /usr/lib/libxml2.so.2
#35 xmlParseElement
from /usr/lib/libxml2.so.2
#36 xmlParseDocument
from /usr/lib/libxml2.so.2
#37 gsf_xml_in_doc_parse
at gsf-libxml.c line 1190
#38 openoffice_file_open
at openoffice-read.c line 3004
#39 go_plugin_loader_module_func_file_open
at go-plugin-loader-module.c line 239
#40 go_plugin_file_opener_open
at go-plugin-service.c line 476
#41 go_file_opener_open
at file.c line 299
#42 wb_view_new_from_input
at workbook-view.c line 1057
#43 wb_view_new_from_uri
at workbook-view.c line 1111
#44 main
at main-application.c line 445

Comment 1 sum1 2009-03-15 05:01:41 UTC

Created attachment 130687 [details]
ods file

Comment 2 Jean Bréfort 2009-03-15 11:57:30 UTC

Created attachment 130694 [details] [review]
proposed patch

Comment 3 Morten Welinder 2009-03-15 18:08:15 UTC

Looks good.  Please commit.

Comment 4 Jean Bréfort 2009-03-15 18:41:07 UTC

Fixed in trunk.