Bug in gnumeric 0.45: crash after copying to clipboard

[Martin Sheppard <shepp camtech net au>]

Package: gnumeric
Version: 0.45

Gnumeric 0.45 can crash after copying a cell to the clipboard. For example,
performing the following on a newly created spreadsheet will cause a crash:

copy cell A1 to the clipboard.
enter the value 1 in A1.

I have attached a stack trace after the crash. The trace suggests that it
could be a bug in gtk rather than gnumeric, but it is hard to be sure. My
system is RedHat 6.1 and contains the gtk+ 1.2.5 and glib 1.3.5 that came
with RedHat 6.1.

(gdb) bt
#0  0x4043e4e1 in __kill () from /lib/libc.so.6
#1  0x4043e156 in raise (sig=6) at ../sysdeps/posix/raise.c:27
#2  0x4043f868 in abort () at ../sysdeps/generic/abort.c:88
#3  0x400e3df6 in gnome_segv_handle () from /usr/lib/libgnomeui.so.32
#4  0x4043e408 in __restore () at
../sysdeps/unix/sysv/linux/i386/sigaction.c:12
7
#5  0x40223c4d in gtk_marshal_NONE__POINTER_INT_INT () from
/usr/lib/libgtk-1.2.
so.0
#6  0x40250fdd in gtk_handlers_run () from /usr/lib/libgtk-1.2.so.0
#7  0x40250422 in gtk_signal_real_emit () from /usr/lib/libgtk-1.2.so.0
#8  0x4024e899 in gtk_signal_emit_by_name () from /usr/lib/libgtk-1.2.so.0
#9  0x4024d938 in gtk_selection_invoke_handler () from
/usr/lib/libgtk-1.2.so.0
#10 0x4024cf43 in gtk_selection_request () from /usr/lib/libgtk-1.2.so.0
#11 0x40223719 in gtk_marshal_BOOL__POINTER () from /usr/lib/libgtk-1.2.so.0
#12 0x4025045b in gtk_signal_real_emit () from /usr/lib/libgtk-1.2.so.0
#13 0x4024e575 in gtk_signal_emit () from /usr/lib/libgtk-1.2.so.0
#14 0x4028377c in gtk_widget_event () from /usr/lib/libgtk-1.2.so.0
#15 0x4022296a in gtk_main_do_event () from /usr/lib/libgtk-1.2.so.0
#16 0x402cd00b in gdk_event_dispatch () from /usr/lib/libgdk-1.2.so.0
#17 0x4040abe6 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#18 0x4040b1a1 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#19 0x4040b341 in g_main_run () from /usr/lib/libglib-1.2.so.0
#20 0x40222209 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#21 0x805f981 in _start ()
#22 0x805f9c2 in main ()
#23 0x404381eb in __libc_start_main (main=0x805f9b0 <main>, argc=1,
argv=0xbffff
b74, init=0x805cf64 <_init>,
    fini=0x80fe4cc <_fini>, rtld_fini=0x4000a610 <_dl_fini>,
stack_end=0xbffffb6
c)
    at ../sysdeps/generic/libc-start.c:90
(gdb)