Bug 1125340

Summary: [abrt] libreoffice-core: DocxAttributeOutput::EndTable()(): soffice.bin killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Jakub <kubek-93>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: caolanm, dtardon, erack, kubek-93, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/4c9d72fb114068266db3f7f5b9dd6835c307a693
Whiteboard: abrt_hash:0a11c4d897a301ed0be47a74a8d3521d38108d1a
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-08-07 21:16:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
.odt causing crash none

Description Jakub 2014-07-31 15:20:46 UTC 
Description of problem:
SIGSEGV happened during save to .docx format from .odt - complex file with hyperlinks. Fault happened every time I tried to save file - it did not get created after all.

Version-Release number of selected component:
libreoffice-core-4.2.5.2-10.fc20

Additional info:
reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer file:///var/tmp/A1231-NBSW-Verify0.2.docx --splash-pipe=5
crash_function: DocxAttributeOutput::EndTable()
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.15.6-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 DocxAttributeOutput::EndTable() at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #1 DocxAttributeOutput::EndParagraph(boost::shared_ptr<ww8::WW8TableNodeInfoInner>) at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #2 MSWordExportBase::OutputTextNode(SwTxtNode const&) at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #3 MSWordExportBase::WriteText() at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #4 DocxExport::WriteMainText() at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #5 DocxExport::ExportDocument_Impl() at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #6 MSWordExportBase::ExportDocument(bool) at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #7 DocxExportFilter::exportDocument() at /usr/lib64/libreoffice/program/../program/libmswordlo.so
 #8 oox::core::FilterBase::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) at /usr/lib64/libreoffice/program/../program/libooxlo.so
 #9 WriterFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) at /usr/lib64/libreoffice/program/../program/libwriterfilterlo.so
Comment 1 Jakub 2014-07-31 15:20:51 UTC 
Created attachment 922971 [details]
File: backtrace
Comment 2 Jakub 2014-07-31 15:20:52 UTC 
Created attachment 922972 [details]
File: cgroup
Comment 3 Jakub 2014-07-31 15:20:54 UTC 
Created attachment 922973 [details]
File: core_backtrace
Comment 4 Jakub 2014-07-31 15:20:56 UTC 
Created attachment 922974 [details]
File: dso_list
Comment 5 Jakub 2014-07-31 15:20:58 UTC 
Created attachment 922975 [details]
File: environ
Comment 6 Jakub 2014-07-31 15:21:00 UTC 
Created attachment 922976 [details]
File: exploitable
Comment 7 Jakub 2014-07-31 15:21:01 UTC 
Created attachment 922977 [details]
File: limits
Comment 8 Jakub 2014-07-31 15:21:04 UTC 
Created attachment 922978 [details]
File: maps
Comment 9 Jakub 2014-07-31 15:21:06 UTC 
Created attachment 922979 [details]
File: open_fds
Comment 10 Jakub 2014-07-31 15:21:08 UTC 
Created attachment 922980 [details]
File: proc_pid_status
Comment 11 Jakub 2014-07-31 15:21:09 UTC 
Created attachment 922981 [details]
File: var_log_messages
Comment 12 David Tardon 2014-08-01 12:16:14 UTC 
Could you attach the document here?
Comment 13 Jakub 2014-08-01 16:36:29 UTC 
Created attachment 923357 [details]
.odt causing crash

Stripped file from everything that didn't cause crash and it turns out complexity wasn't a problem.

Provided file crashes LibreOffice on F20 when it's being saved as .docx file.
Comment 14 Michael Stahl 2014-08-07 21:16:23 UTC 
it looks like this was fixed by upstream master commit
89a3acbdb590c3552a3184137ba0aad7f97f1549
for release 4.3.0

unfortunately there were so many changes to this part of the
DOCX export that it's really difficult to backport this commit
to the 4.2 release branch.... please wait for 4.3 / Fedora 21.