#150 Word-doc that crashes libwv2

[Anonymous]

Word-doc that crashes libwv2;
http://www.strangesoft.net/Design Patterns.doc
http://www.dipe.org/libwv2/DesignPatterns.doc.bz2
(mirror)

Always reproducable with abiword and KWord.

Backtrace;
[KCrash handler]
#5 0xb65777d7 in raise () from /lib/tls/libc.so.6
#6 0xb657907b in abort () from /lib/tls/libc.so.6
#7 0xb65ae555 in __fsetlocking ()
from /lib/tls/libc.so.6
#8 0xb65b4ba7 in malloc_usable_size ()
from /lib/tls/libc.so.6
#9 0xb65b5042 in free () from /lib/tls/libc.so.6
#10 0xb676a051 in operator delete ()
from /usr/lib/libstdc++.so.6
#11 0xb56900c9 in
std::vector<wvWare::Word97::TabDescriptor,
std::allocator<wvWare::Word97::TabDescriptor>
>::_M_insert_aux () from /usr/lib/libwv2.so.1
#12 0xb5689e20 in wvWare::Word97::(anonymous
namespace)::addTabs ()
from /usr/lib/libwv2.so.1
#13 0xb568ea6f in wvWare::Word97::PAP::applyPAPSPRM
()
from /usr/lib/libwv2.so.1
#14 0xb5690aa5 in
wvWare::Word97::SPRM::apply<wvWare::Word97::PAP,
&(wvWare::Word97::PAP::applyPAPSPRM(unsigned char
const*, wvWare::Style const*,
wvWare::OLEStreamReader*, wvWare::WordVersion))> ()
from /usr/lib/libwv2.so.1
#15 0xb5689ad1 in wvWare::Word97::PAP::apply ()
from /usr/lib/libwv2.so.1
#16 0xb56c64b8 in wvWare::ListLevel::applyGrpprlPapx
()
from /usr/lib/libwv2.so.1
#17 0xb56c72db in wvWare::ListData::applyGrpprlPapx
()
from /usr/lib/libwv2.so.1
#18 0xb56c73cf in
wvWare::ListInfoProvider::processOverride ()
from /usr/lib/libwv2.so.1
#19 0xb56c8798 in wvWare::ListInfoProvider::setPAP ()
from /usr/lib/libwv2.so.1
#20 0xb56c8848 in wvWare::ListInfo::ListInfo ()
from /usr/lib/libwv2.so.1
#21 0xb56ca038 in
wvWare::ParagraphProperties::createListInfo ()
from /usr/lib/libwv2.so.1
#22 0xb56b66ea in wvWare::Parser9x::processParagraph
()
from /usr/lib/libwv2.so.1
#23 0xb56b9a07 in
wvWare::Parser9x::processPiece<unsigned char> ()
from /usr/lib/libwv2.so.1
#24 0xb56b73d9 in wvWare::Parser9x::parseHelper ()
from /usr/lib/libwv2.so.1
#25 0xb56b778e in wvWare::Parser9x::parseBody ()
from /usr/lib/libwv2.so.1
#26 0xb56b78b0 in wvWare::Parser9x::parse ()
from /usr/lib/libwv2.so.1