GNOME Bugzilla – Bug 702364
Segfault on a corrupted (fuzzed) xlsx file in xlsx_read_chart
Last modified: 2013-06-15 21:24:28 UTC
Segfault on a corrupted (fuzzed) xlsx file in xlsx_read_chart. Git versions of glib, goffice, gnumeric, libgsf and libxml2. Test case: http://jutaky.com/fuzzing/gnumeric_case_2910_5951.xlsx Program received signal SIGSEGV, Segmentation fault. 0x00007fffe49312b8 in xlsx_read_chart (xin=0x7fffffffd6e0, attrs=0x940e40) at xlsx-read-drawing.c:2009 2009 GogPlot *plot = GOG_PLOT (gog_chart_get_plots (state->chart)->data); (gdb) bt
+ Trace 232069
-- Juha Kylmänen Research Assistant, OUSPG
This problem has been fixed in the development version. The fix will be available in the next major software release. Thank you for your bug report.