Bug 1001130

Summary: [abrt] libreoffice-core-4.1.0.4-6.fc19: (anonymous namespace)::lclCloneCell: Process /usr/lib/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Steven Oliphant <n2kbd>
Component: libreofficeAssignee: Eike Rathke <erack>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
Whiteboard: abrt_hash:9754bc6d3a438ca140457705a98d777d700c6276
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-10-08 12:44:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Steven Oliphant 2013-08-26 14:30:05 UTC 
Version-Release number of selected component:
libreoffice-core-4.1.0.4-6.fc19

Additional info:
reporter:       libreport-2.1.6
backtrace_rating: 4
cmdline:        /usr/lib/libreoffice/program/soffice.bin --calc --splash-pipe=5
crash_function: (anonymous namespace)::lclCloneCell
executable:     /usr/lib/libreoffice/program/soffice.bin
kernel:         3.10.6-200.fc19.i686.PAE
runlevel:       N 5
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 (anonymous namespace)::lclCloneCell at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/cell.cxx:55
 #1 ScBaseCell::Clone at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/cell.cxx:84
 #2 ScColumn::CopyCellToDocument at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/column.cxx:1365
 #3 ScTable::CopyCellToDocument at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/table2.cxx:694
 #4 ScDocument::CopyCellToDocument at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/document.cxx:2057
 #5 ScConversionEngineBase::FindNextConversionCell at /usr/src/debug/libreoffice-4.1.0.4/sc/source/ui/view/spelleng.cxx:113
 #6 ScSpellDialogChildWindow::GetNextWrongSentence at /usr/src/debug/libreoffice-4.1.0.4/sc/source/ui/view/spelldialog.cxx:83
 #7 svx::SpellDialog::GetNextSentence_Impl at /usr/src/debug/libreoffice-4.1.0.4/cui/source/dialogs/SpellDialog.cxx:1060
 #8 svx::SpellDialog::SpellContinue_Impl at /usr/src/debug/libreoffice-4.1.0.4/cui/source/dialogs/SpellDialog.cxx:384
 #9 svx::SpellDialog::ChangeHdl at /usr/src/debug/libreoffice-4.1.0.4/cui/source/dialogs/SpellDialog.cxx:560
Comment 1 Steven Oliphant 2013-08-26 14:30:10 UTC 
Created attachment 790536 [details]
File: backtrace
Comment 2 Steven Oliphant 2013-08-26 14:30:14 UTC 
Created attachment 790537 [details]
File: cgroup
Comment 3 Steven Oliphant 2013-08-26 14:30:18 UTC 
Created attachment 790538 [details]
File: core_backtrace
Comment 4 Steven Oliphant 2013-08-26 14:30:24 UTC 
Created attachment 790539 [details]
File: dso_list
Comment 5 Steven Oliphant 2013-08-26 14:30:28 UTC 
Created attachment 790540 [details]
File: environ
Comment 6 Steven Oliphant 2013-08-26 14:30:31 UTC 
Created attachment 790541 [details]
File: exploitable
Comment 7 Steven Oliphant 2013-08-26 14:30:35 UTC 
Created attachment 790542 [details]
File: limits
Comment 8 Steven Oliphant 2013-08-26 14:30:39 UTC 
Created attachment 790543 [details]
File: maps
Comment 9 Steven Oliphant 2013-08-26 14:30:43 UTC 
Created attachment 790544 [details]
File: open_fds
Comment 10 Steven Oliphant 2013-08-26 14:30:47 UTC 
Created attachment 790545 [details]
File: proc_pid_status
Comment 11 Steven Oliphant 2013-08-26 14:30:51 UTC 
Created attachment 790546 [details]
File: var_log_messages
Comment 12 Eike Rathke 2013-08-26 17:54:04 UTC 
Judging from the backtrace this seems to be related to spell-checking. I can reproduce some crasher in 4.1.0 when the second cell in the same column is to be replaced, but this does not occur in a 4.1.1 build. Looks like it is fixed upstream.
Comment 13 Eike Rathke 2013-08-27 17:21:20 UTC 
Presumably https://bugs.freedesktop.org/show_bug.cgi?id=68220