[Bug 79114] crash opening open office spread sheet ods

[sam tygier]

Public bug reported:

Binary package hint: gnumeric

gnumeric crashes when attempting to open the attached openoffice ods.

this is on edgy on powerpc, gnumeric version 1.7

gdb gives the following

(gdb) r performance.ods
Starting program: /usr/bin/gnumeric performance.ods
[Thread debugging using libthread_db enabled]
[New Thread 805607904 (LWP 27779)]
Reading file:///home/sam/docs/physics/4th%20year/lab/CZT/CsI/performance.ods

** (gnumeric:27779): CRITICAL **: gnm_expr_top_get_range: assertion
`IS_GNM_EXPR_TOP (texpr)' failed

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 805607904 (LWP 27779)]
od_plot_area (xin=<value optimized out>, attrs=0x10258530)
    at ../../../plugins/openoffice/openoffice-read.c:1819
1819    ../../../plugins/openoffice/openoffice-read.c: No such file or directory.
        in ../../../plugins/openoffice/openoffice-read.c
(gdb) bt
#0  od_plot_area (xin=<value optimized out>, attrs=0x10258530)
    at ../../../plugins/openoffice/openoffice-read.c:1819
#1  0x0ea23614 in gsf_xml_out_start_element () from /usr/lib/libgsf-1.so.114
#2  0x0ea23ca0 in gsf_xml_in_namecmp () from /usr/lib/libgsf-1.so.114
#3  0x0ea244a8 in gsf_xml_in_check_ns () from /usr/lib/libgsf-1.so.114
#4  0x0e8e3cd4 in xmlParseStartTag () from /usr/lib/libxml2.so.2
#5  0x0e8ee468 in xmlParseElement () from /usr/lib/libxml2.so.2
#6  0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#7  0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#8  0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#9  0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#10 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#11 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#12 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#13 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#14 0x0e8eec80 in xmlParseDocument () from /usr/lib/libxml2.so.2
#15 0x0ea24ed8 in gsf_xml_in_doc_parse () from /usr/lib/libgsf-1.so.114
#16 0x0dd18c58 in od_draw_object (xin=0x7ff6921c, attrs=<value optimized out>)
    at ../../../plugins/openoffice/openoffice-read.c:1585
#17 0x0ea23614 in gsf_xml_out_start_element () from /usr/lib/libgsf-1.so.114
#18 0x0ea23ca0 in gsf_xml_in_namecmp () from /usr/lib/libgsf-1.so.114
#19 0x0ea244a8 in gsf_xml_in_check_ns () from /usr/lib/libgsf-1.so.114
#20 0x0e8e3cd4 in xmlParseStartTag () from /usr/lib/libxml2.so.2
#21 0x0e8ee468 in xmlParseElement () from /usr/lib/libxml2.so.2
#22 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#23 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
---Type <return> to continue, or q <return> to quit---
#24 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#25 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#26 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#27 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#28 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#29 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#30 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#31 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#32 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#33 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#34 0x0e8ea238 in xmlParseContent () from /usr/lib/libxml2.so.2
#35 0x0e8ee678 in xmlParseElement () from /usr/lib/libxml2.so.2
#36 0x0e8eec80 in xmlParseDocument () from /usr/lib/libxml2.so.2
#37 0x0ea24ed8 in gsf_xml_in_doc_parse () from /usr/lib/libgsf-1.so.114
#38 0x0dd1e5f0 in openoffice_file_open (fo=<value optimized out>, io_context=0x101a1828, 
    wb_view=0x1003f5e0, input=<value optimized out>)
    at ../../../plugins/openoffice/openoffice-read.c:2469
#39 0x0fa7e4e0 in go_plugin_loader_module_get_type () from /usr/lib/libgoffice-0.so.3
#40 0x0fa818e8 in go_plugin_file_opener_get_type () from /usr/lib/libgoffice-0.so.3
#41 0x0fa84514 in go_file_opener_open () from /usr/lib/libgoffice-0.so.3
#42 0x0fde5fcc in wb_view_new_from_input (input=0x101bb2f0, optional_fmt=0x101bb060, 
    io_context=0x10040218, optional_enc=0x10040270 "\020\004\001�") at ../../src/workbook-view.c:1033
#43 0x0fde6118 in wb_view_new_from_uri (
    uri=0x1020e588 "file:///home/sam/docs/physics/4th%20year/lab/CZT/CsI/performance.ods", 
    optional_fmt=0x0, io_context=0x101a1828, optional_enc=0x0) at ../../src/workbook-view.c:1084
#44 0x10004d2c in main (argc=<value optimized out>, argv=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at ../../src/main-application.c:446

** Affects: gnumeric (upstream)
     Importance: Unknown
         Status: Unknown
** Affects: gnumeric (Ubuntu)
     Importance: Undecided
         Status: Unconfirmed

-- 
crash opening open office spread sheet ods
https://launchpad.net/bugs/79114