Bug 1034576

Summary: [abrt] libreoffice-core-4.1.3.2-5.fc19: SfxItemSet::SfxItemSet: Process /usr/lib/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: redhung.lee
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: caolanm, dtardon, erack, ltinkl, mstahl, redhung.lee, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/b84c93a1084007bd449bc5fa6d21cc7f254fd945
Whiteboard: abrt_hash:4b5e57438e52b199ce668127a83af72821882f0b
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-03-07 17:58:53 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description redhung.lee 2013-11-26 06:39:36 UTC 
Version-Release number of selected component:
libreoffice-core-4.1.3.2-5.fc19

Additional info:
reporter:       libreport-2.1.9
backtrace_rating: 4
cmdline:        /usr/lib/libreoffice/program/soffice.bin --writer file:///home/redhung/%E6%A1%8C%E9%9D%A2/ICND2.odt --splash-pipe=5
crash_function: SfxItemSet::SfxItemSet
executable:     /usr/lib/libreoffice/program/soffice.bin
kernel:         3.11.8-200.fc19.i686.PAE
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 SfxItemSet::SfxItemSet at /usr/src/debug/libreoffice-4.1.3.2/svl/source/items/itemset.cxx:246
 #1 SwAttrSet::SwAttrSet at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/attr/swatrset.cxx:77
 #2 SwAttrSetChg::SwAttrSetChg at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/attr/hints.cxx:99
 #3 SwCntntFrm::Modify at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/layout/wsfrm.cxx:2071
 #4 SwTxtFrm::Modify at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/text/txtfrm.cxx:1301
 #5 SwModify::ModifyBroadcast at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/attr/calbck.cxx:357
 #6 SwModify::NotifyClients at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/attr/calbck.cxx:196
 #7 SwCntntNode::Modify at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/docnode/node.cxx:1035
 #8 SwTxtNode::Modify at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/txtnode/ndtxt.cxx:3658
 #9 ModifyNotification at /usr/src/debug/libreoffice-4.1.3.2/sw/inc/calbck.hxx:102
Comment 1 redhung.lee 2013-11-26 06:39:45 UTC 
Created attachment 829078 [details]
File: backtrace
Comment 2 redhung.lee 2013-11-26 06:39:51 UTC 
Created attachment 829079 [details]
File: cgroup
Comment 3 redhung.lee 2013-11-26 06:39:55 UTC 
Created attachment 829080 [details]
File: core_backtrace
Comment 4 redhung.lee 2013-11-26 06:39:59 UTC 
Created attachment 829081 [details]
File: dso_list
Comment 5 redhung.lee 2013-11-26 06:40:03 UTC 
Created attachment 829082 [details]
File: environ
Comment 6 redhung.lee 2013-11-26 06:40:07 UTC 
Created attachment 829083 [details]
File: exploitable
Comment 7 redhung.lee 2013-11-26 06:40:11 UTC 
Created attachment 829084 [details]
File: limits
Comment 8 redhung.lee 2013-11-26 06:40:16 UTC 
Created attachment 829085 [details]
File: maps
Comment 9 redhung.lee 2013-11-26 06:40:20 UTC 
Created attachment 829086 [details]
File: open_fds
Comment 10 redhung.lee 2013-11-26 06:40:24 UTC 
Created attachment 829087 [details]
File: proc_pid_status
Comment 11 redhung.lee 2013-11-26 06:40:28 UTC 
Created attachment 829088 [details]
File: var_log_messages
Comment 12 David Tardon 2014-01-09 12:07:00 UTC 
It crashed during paste. Is there a way to reproduce the crash? (Provided you still remember...)
Comment 13 Michael Stahl 2014-03-07 17:58:53 UTC 
#1  0xad7e5255 in SwAttrSet::SwAttrSet (this=0x0, rSet=...) at /usr/src/debug/libreoffice-4.1.3.2/sw/source/core/attr/swatrset.cxx:77

if the "this=0x0" above is correct, then allocating the SwAttrSet
failed and FixedMemPool::Alloc() returned 0-pointer.

probably there's some sort of loop somewhere while pasting?

but without knowing what is being pasted from the clipboard,
it's rather unfixable.