ssindex crashed with SIGSEGV in g_object_unref()

[Laurent Bonnaud]

Binary package hint: gnumeric

ssindex crashed while tracker was indexing my homedir.

ProblemType: Crash
Architecture: i386
CrashCounter: 1
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/bin/ssindex
NonfreeKernelModules: fglrx
Package: gnumeric 1.8.3-3ubuntu2 [modified: usr/bin/gnumeric usr/bin/ssconvert usr/bin/ssindex usr/lib/libspreadsheet-1.8.3.so]
ProcAttrCurrent: unconfined
ProcCmdline: ssindex -i /home/User Name/stages/2005-J.B.Chazeau/Soutenance/presoutenance_files/planning.xls
ProcEnviron:
 LC_PAPER=fr_FR.UTF-8
 SHELL=/bin/bash
 PATH=/home/User Name/local/linux/bin:.:/home/User Name/local/share/bin:/home/User Name/local/linux/bin:.:/home/User Name/local/share/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11:/usr/games
 LC_COLLATE=C
 LANG=en_US.UTF-8
Signal: 11
SourcePackage: gnumeric
StacktraceTop:
 ?? () from /usr/lib/libglib-2.0.so.0
 ?? () from /usr/lib/libpangoft2-1.0.so.0
 ?? () from /usr/lib/libpangoft2-1.0.so.0
 ?? () from /usr/lib/libpangoft2-1.0.so.0
 g_object_unref () from /usr/lib/libgobject-2.0.so.0
Title: ssindex crashed with SIGSEGV in g_object_unref()
Uname: Linux 2.6.27-7-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy fuse kvm lpadmin plugdev pulse-rt scanner staff video

[Laurent Bonnaud (laurent-bonnaud)]

Here is the file causing the crash:

$ ssindex -i bug2.xls
[...]
Segmentation fault (core dumped)

[Laurent Bonnaud (laurent-bonnaud)]

I'm tagging this as a potential security problem because you could receive such a file in a malicious e-mail, and it may allow arbitrary code execution.