Bug 1033108

Summary: [abrt] libreoffice-core-4.1.3.2-4.fc19: SwAnchoredObject::GetDrawObj: Process /usr/lib64/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Andreas Stenius <redhat>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---Flags: caolanm: needinfo?
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/e317e7c071f74b88ab23b97b2e7e661b3fccb6e3
Whiteboard: abrt_hash:5418e01f145930c44bea4b3b8889a68435280a2b
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-11-22 14:39:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Andreas Stenius 2013-11-21 15:01:28 UTC 
Version-Release number of selected component:
libreoffice-core-4.1.3.2-4.fc19

Additional info:
reporter:       libreport-2.1.9
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer '/home/kaos/Documents/Mobitron/Spec/Cargolog/Cargolog Overview.odm' --splash-pipe=5
crash_function: SwAnchoredObject::GetDrawObj
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.11.8-200.fc19.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 SwAnchoredObject::GetDrawObj at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/layout/anchoredobject.cxx:124
 #1 SwTxtFly::InitAnchoredObjList at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/txtfly.cxx:926
 #2 GetAnchoredObjList at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/txtfly.hxx:308
 #3 SwTxtFly::ForEach at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/txtfly.cxx:1042
 #4 SwTxtFly::_GetFrm at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/txtfly.cxx:409
 #5 GetFrm at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/txtfly.hxx:353
 #6 SwTxtFormatter::CalcFlyWidth at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/itrform2.cxx:2335
 #7 SwTxtFormatter::BuildPortions at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/itrform2.cxx:396
 #8 SwTxtFormatter::FormatLine at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/itrform2.cxx:1538
 #9 SwTxtFrm::FormatLine at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/frmform.cxx:1117
Comment 1 Andreas Stenius 2013-11-21 15:01:46 UTC 
Created attachment 827254 [details]
File: backtrace
Comment 2 Andreas Stenius 2013-11-21 15:01:50 UTC 
Created attachment 827255 [details]
File: cgroup
Comment 3 Andreas Stenius 2013-11-21 15:01:56 UTC 
Created attachment 827256 [details]
File: core_backtrace
Comment 4 Andreas Stenius 2013-11-21 15:02:00 UTC 
Created attachment 827257 [details]
File: dso_list
Comment 5 Andreas Stenius 2013-11-21 15:02:04 UTC 
Created attachment 827258 [details]
File: environ
Comment 6 Andreas Stenius 2013-11-21 15:02:09 UTC 
Created attachment 827259 [details]
File: exploitable
Comment 7 Andreas Stenius 2013-11-21 15:02:16 UTC 
Created attachment 827260 [details]
File: limits
Comment 8 Andreas Stenius 2013-11-21 15:02:22 UTC 
Created attachment 827261 [details]
File: maps
Comment 9 Andreas Stenius 2013-11-21 15:02:26 UTC 
Created attachment 827262 [details]
File: open_fds
Comment 10 Andreas Stenius 2013-11-21 15:02:31 UTC 
Created attachment 827263 [details]
File: proc_pid_status
Comment 11 Andreas Stenius 2013-11-21 15:02:35 UTC 
Created attachment 827264 [details]
File: var_log_messages
Comment 12 Caolan McNamara 2013-11-21 15:44:25 UTC 
Is there a way to reproduce this bug ?, e.g. Does it happen always with the same source document ?
Comment 13 Caolan McNamara 2013-11-21 15:59:41 UTC 
bodged in http://cgit.freedesktop.org/libreoffice/core/commit/?id=9835775259a92976e05451eef63a44b41126418d upstream, but ideally need a reproducer
Comment 14 Andreas Stenius 2013-11-21 19:46:14 UTC 
The bug is not reproducible on my system, as far as I know (it only occurred once).

I did see some weirdness though, but no more crashes, and nothing that didn't resolve itself with another update.

I was working with a master document, where one of the sub documents are 5 pages of drawings and almost no text at all. These drawings are not always positioned correctly in the master document, but are re-aligned properly if I run update an additional time.

The crash was during one of these updates, if I'm not mistaken.

It's nothing big nor complicated, I just started out writing on it today.

If you would like to have a look at the docs, I can send them to you in private, but I don't have them in exactly the same state as when it crashed (unless there are some traces/logs of the document recovery process somewhere, which took place right after I restarted LO).
Comment 15 Caolan McNamara 2013-11-22 14:39:22 UTC 
Given that lack of reproduciblity lets leave it at the upstream fix rather than risk backporting