[Bug 1192323] VUL-1: CVE-2021-27836: libxls: possible NULL pointer dereference via crafted XLS file in version 1.6.2 and prior