From f1589b8d66007d7b0f511fc06a49e89490220aad Mon Sep 17 00:00:00 2001 From: Dominik Stadler Date: Wed, 6 Dec 2023 19:49:38 +0000 Subject: [PATCH] Bug 66425: Avoid exceptions found via poi-fuzz Add an xsb file to ooxml-lite which seems to be missing in some cases Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63652 git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1914402 13f79535-47bb-0310-9956-ffa450edef68 --- poi-ooxml-lite/missing-xsbs.txt | 1 + ...-minimized-POIFuzzer-5040805309710336.xlsx | Bin 0 -> 5145 bytes test-data/spreadsheet/stress.xls | Bin 60928 -> 61440 bytes 3 files changed, 1 insertion(+) create mode 100644 test-data/spreadsheet/clusterfuzz-testcase-minimized-POIFuzzer-5040805309710336.xlsx diff --git a/poi-ooxml-lite/missing-xsbs.txt b/poi-ooxml-lite/missing-xsbs.txt index ee55b0f796..0ab947f141 100644 --- a/poi-ooxml-lite/missing-xsbs.txt +++ b/poi-ooxml-lite/missing-xsbs.txt @@ -96,6 +96,7 @@ ctwebpublishobjects30d8type ctwrapthrough8b4etype ctwraptightae95type ctwraptopbottom5e13type +fonts7aa2doctype lockedcanvaselement polylineelement relationships93b3doctype diff --git a/test-data/spreadsheet/clusterfuzz-testcase-minimized-POIFuzzer-5040805309710336.xlsx b/test-data/spreadsheet/clusterfuzz-testcase-minimized-POIFuzzer-5040805309710336.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..667dea54106c98199effa5361a12d4aea0acdc67 GIT binary patch literal 5145 zcmeHLXEdB!+g3&iqr}mP7Gy%A_k#qPL>(hK(d%H8!O^>jC{aQfj9#MmPKq{!AZmu_ zq#*=RqP-*M2;P5`2}z5Llxr`7$+-x;Y7(&XoRr~bH67+}(v^)JQAXb3DVh$= zHltFC3GY;0DHIWOd7R2_t$rIVZO&0$5a%*gx04(ol$jwoI%d~x*o;@ZuXrFX=1p70 z8Om*KoPVdhT7r)T;$`{DG{>vZWzS9|5$I`Td+3uT0qkGb6uC7ZSLXFuUqY|0J`t2> zc+=w;CgSAV+k$p@Wjr7GGP@naw3Pu>AtHW1hj^T&|Ai+y>)4P;%4bR<#xfqJoSH9EGJ))1KA zQ)arrokfSr@GCB~+%!yDmtmk(Ct&hvlI_okkhIRMQzuCVLP&&v8^a?Ir4jusqk5ykN8o;Tfrz&VU4ZT z3!f1@;c4Kcy@vpn!VXoVPrbx4U+YU-DBbqYyv0tXEYCFe!UUM8vZ}&J8rRli z=D7Sqk}13iIV09au5~DQu|)|TZJX@ToZutyWq)=IyZT4Jq~7`O_*gi>Pk?bfL1tBF z(r)rPrQe!vxSuX37Yue|(Uj^oULN(zVwO|!=){D#(@IGRx58|i$AOXOoEa&z$%K=gtnBW+>*{MwNO7i;$AjY4~%uu@3QV^S&26lEJj(8UV( zdTWMSc8>@xS$#JabOwilWL=pt2pN_RKh!y@oozMoQynuv$}@pMflQ&ZaN{5(vu*rt zc$mxpWmZhj9r`;?d2g;RmWevjo5dhN3w?>N)XL3Ve3cF&oOI09#2tEfD*XhDhGbIN z&~CgH`q~rfs?EQ>WU$$8g!yV}A@-gW84s+i?Y8&>lvp3#W=M0bCw>50AI<8qrVEy` z0*AdJAH7`Wz`@T^nAX8+1<}=0R#6iuEfJd5GhGHTpVLn6FpKY7i21Mt_ICNwZiuve zWcG=?o_+ktJf(MMd)auewOBLaIV5NfIQ1%Hw~)kIFW82SZ+jX#F=N3NW%Zu7w-Bat zDOsbPc3KO<6@}!;xa>i0-zQw-yfjGOeD{1pv{_C%U|EnJ@b+Lk@Fini_QkOIOtAJN zVM*&CD!L+O92P-n954NHK)miE?KHaOTYZ-3~1u{hO!@=GHdGAnzedRTarmgU{2t%WZ z{J1;0*KZSO<&r*6Ovul!b#G%E(;K`pOJyMSXeFNZFzuZOb*MS+;a7;%wMx`cUcivu z3#KxS3s*+Suh2~|u+=cSi$1i@zr4ZA_(0nAZu8AXLa~-uU$~`sFlkP}Ey+o}oM@3& zQqm2YJ*FoL=rq086ET&3_>;}|)i&*$MuGl2e2~65RvBfk_PwE9^P+~sAj`#yI^Zt7$*e$}e+mEWJ+;l2X!1-p|D=`mR^+A36d<4($Q3Mk2J ze}&ad*yffKByEPzb7MltG+D_sWkt_dl#bmf8Pbl2Tfg^`4E1vBzV&35~ACluK% z6g61HmWy@3uP8$CT@GE{yd12)iD9SqB$gmRzZqS6Z*>#^tP60D6axq1fyGLaJoNJ| zt~RM9q~_05J;lVR-ChxmHrf))|&qYNZzD{L4MN}$q>C41utBHG((i(s-2ntuXY8&t}+u2``1Tf^gfFYzc8yx zfm){7EXKbx_46u?=dEbrl+{A<_;LfNr!FH>;#_x?oR$|Oc!0QJ3`qSz+XAx!F1;mu z4=qc}7MHp9YiR#v7`?eD?qR=x6dxJ7o0m`GY5qRDyIVROl+78TZ0iGiQ;9aI z2DyC|%2tOyfMvlWQ^p_xO_^~M<3j;&*Uste{a;6&(XHTXPdCw~9gj3a=TkopD?V?v zKOFaOtsz{g-nfd}=gZrUVPsSWT1gAVhFqJW3}+zhsBtqrbQfcZuP2$d9nbOj%`4=M zAqUHLxaaQqt1MoViSw#-%bcMmBUxrkaW|jS96WA+Nq4XMv*%+Iif-Cob&2V0GJ|IKAIikuB=9%MAx{+;8qe{dGyZngJj0I5c6Z3 zE@|L4Q&-FHNZ-x0`C|Umop^WBZCr_BYBag-WaV+!_^mA`UC)DWn)v#Y<+Y~_CACi|kMsShif&#iVwmci(Uo^wS^@9U|X)~F=gpXB; zt|r*wvb--PAx~EZKCnA-%L+49$1cgs-NIT!9k=m0QQO2}uRlQw&A3vFCgm|b@Og+p zFr?jr%yNvPa$VuYT$Bqhp(?ocAGIWah~?JkZV@Y48Z22z@0M4mKfO2|iTrSC4g z{1)9pMS0&Q%v?P^YB0X$Jbybye)*`^z`7l8@mX0f(a}1;&rrCG~%XkU3y=y!c zYn$sLh8NTeIuc5t`5wGM`Ri#5?EE5`=&~`c+@zjp6RT2IPpwB z#u*2No%aukG?}}OC!O&T_Byc^r$L3i^RvThI1g)4qTG>{$WTskmTApTDPDW9yohnYqImfjRyBSucHZqHr1z!e5^+ z{5+GhPUXjiI1>H!rn64`=k&8(?2qZ%B!8u!H8($}pRMyJt?p@fVx7~UF#g^6{+xWa iR-Lp0ry+uU*S~2Dpeh7dbZ~G;usFcyKUXiH>lZzN-#S&V_YB{!e1O3AuMTOX@H0mpZBbg;KD3v00ldn>cD zlwN%Z3t=h4g2zKyC`&0H(Bl`z!dP`o@Hno5SK9(Tv-Hz+swdB}D9&byVm8iDJ`^is z$y{O@3;!QxSA9n|T2|e`OR9}HSRvLx$Fb8+GtgPE8-^XXgrU-kU4Vz+w+DJuq3k|Z zL=IY9&@Y^8eo3SZ=bB%C@(VBNF%0LLVPlU>GmIodyTQ<|8`?-|HyGM`{Or14T8~O! zVExfSyq~rpJRQ6$_>HT>kLB{gEh2b%xwajBgFW6`yjra}zRM!bqXlW>4(5jJrV)HT zR5Z!_S*XSO9Gt(G7}R(#<4U~HuB-20 z^})bXLGOMBwWO>4kag8}qSO12!3~u*Q-(^s1cZP$NLwvL5 zosM+{ENFJ|l~B_x^XH)nYX#iK`T`6+E%Q~7iM0|cPP_PvZ~*ISxPfF13~Z74T1dsZ zPF>Qn$HHF%aaQJ4Fcs^|;6Ll))vyoiE6|DcRS@T7z8rl}u^EaTjRhHhQ;}6sEj@A*< zR$@+KG3SN!7O{9@Y3GHqjo7FF!>$1z*ioi+BZ5qvQM9(^6j}beF>@#9hiT!~&`-x36DVmC48J7Tj8IkQYTIeJb5X>({k3$drWbFK>MD6wa{bFK>I7_mY_PN6BMNY6P=+M<9~t-G4Zp|W#M z{qKp^Xe&zMos1>p&&pe8i#TLn>kqltB5b#|pSh84Z{sjHkjEkJ9n7+ zfVr~Iyk~lBsla1`5StFqtukA0j*gCwy~_CF%{s5MG0Yb^xiLdmqeRN)y!?%&1w|W5 zc8Uoi^#pB?sSQ6FE<~Fa7dtOmI<)2K2@%>zrX}1qC?;8ih~d84Bq3JC3Q@>Y>{?V# zuH5R$n5a(_TUe0%tg!~pCSej?QGv5rn1$zm=P(f_Jhug|hl_CGshITNya*8?YV3jQ zyoIcZ^q+-kyzXg(D{SjE*QrXAcA(8B$6KUMrLai-o!0(Swsdrn;ZMLOeB?cCmyc5+S07cgT?l(zkUb7|3ws-=-?0B?y9jo4kR1(sMyFkF zq;#%6D(JMU#js<8>{!@)+1o@-hTY9}32Y_ER$yDt*kvgta`n-|Gj_EMwl&DM!rsQ- z6VzbXN7*ii9T#NB!Tz1S%@ljqB`YZ9tW!Qo#ay4F2Ch$28`mxLC)a1lan2>TQV!Qj zsypYD+o*}_cKVg;4sBxBL6dxzTFyJ=PP)eRIf}pFl2zp8`aD&0t)`X>PPvP&ajl{F zZl|oJ6s|8&G1uMH(Ct)S#IjCf**$c=TTQG3o91VHI?g}yX?z2>8qYA}OHSl3+a_Kj zM~_nyrS~|Mm(h1SW>xh}RbBy`4%XbGDzAdg02^lZ8rU6RwqDi!I@nA<Y3Gp%>rxXoVUPSK{>9FoY_WB1Kio@Pv}#Xx54fLOJnv9 z*xg{|eX9FiFt?xaNxvU=NX{H1XD{42=t9uzUSX%j|D3 zDfDl@Gw?fjI|M${?(UM^sx*S7gSnY$U=M(;yR5pu09z82vm_*Esgd&~+@5(JqXsyImf`Vf^xD#apY0R3zR)Cccs_yT=a{Y`?`tL0_Bxj|O(*k!T`a5{$_h1i!U1xRzY!%p) zAyqjEwi+yRs8IO98Hq6e3+DI+3jhEB