OK, I managed to strip down a real-life spreadsheet to repro the bug
without leaking sensitive personal information. Attached. Note that
there is no content remaining in this spreadsheet, just whatever stuff
was left behind after I deleted all the content. Note also that I had to
do some of that deletion by gunzip'ing and directly editing the XML. I'm
99% sure the resulting .gnumeric file is still valid though: gnumeric
1.12.8 can load it, and xmllint says it's fine.

This loads fine in gnumeric 1.12.8 (built from upstream tarball), but
crashes in 1.12.6. Reproduced with three builds of gnumeric 1.12.6:

* installed in /usr/bin/gnumeric
* built from "apt-get source gnumeric && cd gnumeric-1.12.6 && ./debian/rules 
build"
* built from upstream tarball with "./configure && make"

Both crash in the same way on this file.

Oh yeah, I have a better stack trace now from the clean upstream build:

#0  scg_find_pane (pos=0x17bf4bc, scg=0x18127e0) at sheet-control-gui.c:3705
#1  scg_show_im_tooltip (sc=0x18127e0, im=0x0, pos=0x17bf4bc) at 
sheet-control-gui.c:3724
#2  0x00007f283ffc3aa6 in sheet_view_edit_pos_tool_tips (sv=0x17bf470) at 
sheet-view.c:655
#3  sv_update (sv=0x17bf470) at sheet-view.c:684
#4  0x00007f283ffba509 in sheet_update (sheet=<optimized out>) at sheet.c:1985
#5  0x000000000040348a in main (argc=<optimized out>, argv=<optimized out>) at 
main-application.c:340

Not sure that's relevant, since the bug appears to have been fixed
upstream in 1.12.8.


** Attachment added: "empty-looking spreadsheet that crashes gnumeric 1.12.6"
   
https://bugs.launchpad.net/ubuntu/+source/gnumeric/+bug/1249645/+attachment/3904026/+files/crashme.gnumeric

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1249645

Title:
  gnumeric crashes with SIGSEGV in sv_update() loading certain files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnumeric/+bug/1249645/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to