[gnumeric] Fix memory handling error on fuzzed sxc file. [#748535]



commit bad79edf308d331de2e6e2edfd7edeee46f18e5e
Author: Andreas J. Guelzow <aguelzow pyrshep ca>
Date:   Mon Apr 27 19:02:21 2015 -0600

    Fix memory handling error on fuzzed sxc file. [#748535]
    
    2015-04-27  Andreas J. Guelzow <aguelzow pyrshep ca>
    
        * openoffice-read.c (openoffice_file_open): initialize state.chart.name

 NEWS                                 |    3 +++
 plugins/openoffice/ChangeLog         |    4 ++++
 plugins/openoffice/openoffice-read.c |    1 +
 3 files changed, 8 insertions(+), 0 deletions(-)
---
diff --git a/NEWS b/NEWS
index 006b596..347bd1d 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,8 @@
 Gnumeric 1.12.23
 
+Andreas:
+       * Fix memory handling error on fuzzed sxc file. [#748535]
+
 Jean:
        * Fix xlsx import of plot area manual layout. [#748016]
 
diff --git a/plugins/openoffice/ChangeLog b/plugins/openoffice/ChangeLog
index b435361..af41473 100644
--- a/plugins/openoffice/ChangeLog
+++ b/plugins/openoffice/ChangeLog
@@ -1,3 +1,7 @@
+2015-04-27  Andreas J. Guelzow <aguelzow pyrshep ca>
+
+       * openoffice-read.c (openoffice_file_open): initialize state.chart.name
+
 2015-04-18  Andreas J. Guelzow <aguelzow pyrshep ca>
 
        * openoffice-read.c (oo_extent_sheet_cols): delete
diff --git a/plugins/openoffice/openoffice-read.c b/plugins/openoffice/openoffice-read.c
index 68485aa..70424b3 100644
--- a/plugins/openoffice/openoffice-read.c
+++ b/plugins/openoffice/openoffice-read.c
@@ -13447,6 +13447,7 @@ openoffice_file_open (G_GNUC_UNUSED GOFileOpener const *fo, GOIOContext *io_cont
        state.pos.eval.row      = -1;
        state.cell_comment      = NULL;
        state.sharer = gnm_expr_sharer_new ();
+       state.chart.name = NULL;
        state.chart.cs_enhanced_path = NULL;
        state.chart.cs_modifiers = NULL;
        state.chart.cs_viewbox = NULL;


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]