I tried converting a particular document (see
attachment), the convertion utility terminated. I have
found patch for that as well.
In the libole2/ms-ole.c file,
static int read_sb (MsOle *f)
// PATCH: the ptr value should be validated
// check if the ptr is in the valid bounds
if (ptr >= f->bb->len)
ptr = END_OF_CHAIN;
// ptr is invalid,
// force it as the end of the chain
// PATCH ends here
ptr = NEXT_BB (f, ptr);
After this fix, the crashing problem was not there.