Bug 749274 – SIGABRT in libcairo(?) on a .gnumeric to ods conversion

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 749274 - SIGABRT in libcairo(?) on a .gnumeric to ods conversion


Summary:	SIGABRT in libcairo(?) on a .gnumeric to ods conversion


Status:	RESOLVED FIXED

Product:	Gnumeric
Classification:	Applications
Component:	import/export OOo / OASIS
Version:	git master
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Andreas J. Guelzow
QA Contact:	Jody Goldberg

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2015-05-12 17:10 UTC by jutaky
Modified:	2015-05-12 20:25 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
Tentative patch (2.37 KB, patch) 2015-05-12 19:12 UTC, Morten Welinder	none	Details \| Review

Description jutaky 2015-05-12 17:10:49 UTC

Git versions of gtk, glib, goffice, gnumeric, libgsf and libxml2.

I don't know which software has the bug, but here's the test case for review.

Test case: http://jutaky.com/fuzzing/gnumeric_case_14134_11013.2ods.gnumeric

$ ssconvert gnumeric_case_14134_11013.2ods.gnumeric /tmp/out.ods

Program received signal SIGABRT, Aborted.
0x00007fffeebad4b7 in raise () from /usr/lib/libc.so.6
(gdb) bt

+ Trace 235052

#0 raise
from /usr/lib/libc.so.6
#1 abort
from /usr/lib/libc.so.6
#2 __assert_fail_base
from /usr/lib/libc.so.6
#3 __assert_fail
from /usr/lib/libc.so.6
#4 ??
from /usr/lib/libcairo.so.2
#5 ??
from /usr/lib/libcairo.so.2
#6 ??
from /usr/lib/libcairo.so.2
#7 ??
from /usr/lib/libcairo.so.2
#8 ??
from /usr/lib/libcairo.so.2
#9 ??
from /usr/lib/libcairo.so.2
#10 cairo_surface_destroy
from /usr/lib/libcairo.so.2
#11 ??
from /usr/lib/libcairo.so.2
#12 ??
from /usr/lib/libcairo.so.2
#13 ??
from /usr/lib/libcairo.so.2
#14 gog_renderer_export_image
at graph/gog-renderer.c line 1618
#15 gog_graph_export_image
at graph/gog-graph.c line 1313
#16 odf_write_graphs
at openoffice-write.c line 8714
#17 gnm_hash_table_foreach_ordered
at gutils.c line 799
#18 openoffice_file_save_real
at openoffice-write.c line 8893
#19 odf_file_save
at openoffice-write.c line 8984
#20 go_plugin_loader_module_func_file_save
at app/go-plugin-loader-module.c line 366
#21 go_plugin_file_saver_save
at app/go-plugin-service.c line 948
#22 go_file_saver_save
at app/file.c line 848
#23 wbv_save_to_output
at workbook-view.c line 1059
#24 wb_view_save_to_uri
at workbook-view.c line 1093
#25 wb_view_save_as
at workbook-view.c line 1129
#26 convert
at ssconvert.c line 831
#27 main
at ssconvert.c line 903


--
Juha Kylmänen

Comment 1 Morten Welinder 2015-05-12 19:12:17 UTC

Created attachment 303280 [details] [review]
Tentative patch

Jean, how about this patch?

Comment 2 Jean Bréfort 2015-05-12 20:06:45 UTC

Looks good

Comment 3 Morten Welinder 2015-05-12 20:25:22 UTC

This problem has been fixed in our software repository. The fix will go into the next software release. Once that release is available, you may want to check for a software upgrade provided by your Linux distribution.