GNOME Bugzilla – Bug 752080
Segfault in ms-excel-read.c:964 on a fuzzed xls file
Last modified: 2015-07-07 15:33:22 UTC
Git versions of glib, goffice, gnumeric, libgsf and libxml2. Test case: http://jutaky.com/fuzzing/gnumeric_case_001-ms-excel-read.c.964.xls $ ssconvert gnumeric_case_001-ms-excel-read.c.964.xls /tmp/out.gnumeric ==13910==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f18548bf9f2 bp 0x7ffd432a1630 sp 0x7ffd432a1260 T0) #0 0x7f18548bf9f1 in excel_read_string_header gnumeric/gnumeric/plugins/excel/ms-excel-read.c:964:11 #1 0x7f1854928208 in sst_read_string gnumeric/gnumeric/plugins/excel/ms-excel-read.c:1246:13 #2 0x7f1854919ca6 in excel_read_SST gnumeric/gnumeric/plugins/excel/ms-excel-read.c:1334:12 #3 0x7f18548db50a in excel_read_workbook gnumeric/gnumeric/plugins/excel/ms-excel-read.c:7334:21 #4 0x7f185484ec97 in excel_enc_file_open gnumeric/gnumeric/plugins/excel/boot.c:170:4 #5 0x7f18548507a4 in excel_file_open gnumeric/gnumeric/plugins/excel/boot.c:273:2 #6 0x7f187aa01333 in go_plugin_loader_module_func_file_open gnumeric/goffice/goffice/app/go-plugin-loader-module.c:282:3 #7 0x7f187aa1ad3f in go_plugin_file_opener_open gnumeric/goffice/goffice/app/go-plugin-service.c:685:2 #8 0x7f187aa2bd18 in go_file_opener_open gnumeric/goffice/goffice/app/file.c:417:2 #9 0x7f187d21efc5 in workbook_view_new_from_input gnumeric/gnumeric/src/workbook-view.c:1278:3 #10 0x7f187d21fbb0 in workbook_view_new_from_uri gnumeric/gnumeric/src/workbook-view.c:1337:9 #11 0x4e6f9f in convert gnumeric/gnumeric/src/ssconvert.c:720:9 #12 0x4e49bc in main gnumeric/gnumeric/src/ssconvert.c:913:9 #13 0x7f1873cfe78f in __libc_start_main (/usr/lib/libc.so.6+0x2078f) #14 0x438a48 in _start (apps/bin/ssconvert+0x438a48) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV gnumeric/gnumeric/plugins/excel/ms-excel-read.c:964 excel_read_string_header -- Juha Kylmänen
This problem has been fixed in our software repository. The fix will go into the next software release. Once that release is available, you may want to check for a software upgrade provided by your Linux distribution.