global-buffer-overflow(write) at xlsparse.c:608

[yangzao]

A global-buffer-overflow(write) bug when testing xls2csv 0.95 on x86-64 Ubuntu 22.04.

Files:

7.zip

Commandline:

./xls2csv ./7

Crash line:

    "    604     \t/*fprintf(stderr,\"Format idx %x to be set to dirty\\n\",format_code);",
    "    605    \t */",
    "    606    \tdateindex=BuiltInDateFormatIdx(format_code);",
    "    607    \tif (dateindex) {",
    "--->608    \t  FormatIdxUsed[dateindex]=1;",
    "    609     \t  /*fprintf(stderr,\"Date idx %d is set to be dirty\\n\",dateindex); */",
    "    610    \t}",
    "    611    }",
    "    612    ",
    "    613    /*"

Stacktrace:

    "    #0 0x5555556426ca in SetFormatIdxUsed catdoc/src/xlsparse.c:608:28",
    "    #1 0x5555556426ca in process_item catdoc/src/xlsparse.c:166:3",
    "    #2 0x55555564113b in do_table catdoc/src/xlsparse.c:116:3",
    "    #3 0x55555563e8ba in main catdoc/src/xls2csv.c:167:7",