[Libreoffice-bugs] [Bug 119922] calc crashes on opening this specific file

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119922

--- Comment #13 from Markus Mohrhard <markus.mohrhard at googlemail.com> ---
(In reply to Noel Grandin from comment #11)
> The actual problem here is that we are trying to allocate a regression curve
> with nPointCount=625001323, which throws a std::bad_alloc, which gets munged
> a little bit by the event loop catch block for some reason.
> 
> Attached a backtrace.
> 
> Which means the most likely culprit commit is this one:
> 
>   
> https://cgit.freedesktop.org/libreoffice/core/commit/
> ?id=4c7116413af091a30f5fa60c63d29bc694730518
> 
>   committer  Markus Mohrhard <markus.mohrhard at googlemail.com>
>   fix odf validation errors around new chart regression curves
> 
> 
> I'm guessing that this file is broken, and the above commit improved things
> by allowing us to try and load bad data, which we would formerly ignore,
> which causes the allocation exception

It is more complicated than this. The file contains entries for
loext:regression-extrapolate-forward="99999999" which can not be read by old
LibreOffice files which explains why it does not crash there.

This is most likely a user input but I think we need to sanitize these values
in the regression calculator to get some sensible results.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180924/30f8bd40/attachment-0001.html>