Bug 1152621

Summary: [abrt] libreoffice-core: getLength(): soffice.bin killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Kamil J. Dudek <wielkipiec>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 21CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/b416f267dbb0f3691473930cfa47fedb8e06e0c6
Whiteboard: abrt_hash:f357bb27451cacdfb6b2794a5d583c3821496d48
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-01-06 11:06:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
Document that crashed soffice none

Description Kamil J. Dudek 2014-10-14 14:28:48 UTC
Version-Release number of selected component:
libreoffice-core-4.3.2.2-5.fc21

Additional info:
reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --calc --splash-pipe=5
crash_function: getLength
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.16.3-302.fc21.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 getLength at /usr/src/debug/libreoffice-4.3.2.2/include/com/sun/star/uno/Sequence.h:136
 #1 ZipPackageStream::getSomething at /usr/src/debug/libreoffice-4.3.2.2/package/source/zippackage/ZipPackageStream.cxx:695
 #2 ScCellRangesBase::GetOnePropertyValue at /usr/src/debug/libreoffice-4.3.2.2/sc/source/ui/unoobj/cellsuno.cxx:2497
 #3 ScCellRangesBase::getDirectPropertyValuesTolerant at /usr/src/debug/libreoffice-4.3.2.2/sc/source/ui/unoobj/cellsuno.cxx:2945
 #4 (anonymous namespace)::FilterPropertiesInfo_Impl::FillPropertyStateArray at /usr/src/debug/libreoffice-4.3.2.2/xmloff/source/style/xmlexppr.cxx:292
 #5 SvXMLExportPropertyMapper::_Filter at /usr/src/debug/libreoffice-4.3.2.2/xmloff/source/style/xmlexppr.cxx:634
 #6 Filter at /usr/src/debug/libreoffice-4.3.2.2/include/xmloff/xmlexppr.hxx:112
 #7 ScXMLExport::AddStyleFromCells at /usr/src/debug/libreoffice-4.3.2.2/sc/source/filter/xml/xmlexprt.cxx:2093
 #8 ScXMLExport::_ExportAutoStyles at /usr/src/debug/libreoffice-4.3.2.2/sc/source/filter/xml/xmlexprt.cxx:2636
 #9 SvXMLExport::ImplExportAutoStyles at /usr/src/debug/libreoffice-4.3.2.2/xmloff/source/core/xmlexp.cxx:1240

Comment 1 Kamil J. Dudek 2014-10-14 14:28:51 UTC
Created attachment 946935 [details]
File: backtrace

Comment 2 Kamil J. Dudek 2014-10-14 14:28:52 UTC
Created attachment 946936 [details]
File: cgroup

Comment 3 Kamil J. Dudek 2014-10-14 14:28:54 UTC
Created attachment 946937 [details]
File: core_backtrace

Comment 4 Kamil J. Dudek 2014-10-14 14:28:56 UTC
Created attachment 946938 [details]
File: dso_list

Comment 5 Kamil J. Dudek 2014-10-14 14:28:57 UTC
Created attachment 946939 [details]
File: environ

Comment 6 Kamil J. Dudek 2014-10-14 14:28:58 UTC
Created attachment 946940 [details]
File: exploitable

Comment 7 Kamil J. Dudek 2014-10-14 14:28:59 UTC
Created attachment 946941 [details]
File: limits

Comment 8 Kamil J. Dudek 2014-10-14 14:29:01 UTC
Created attachment 946942 [details]
File: maps

Comment 9 Kamil J. Dudek 2014-10-14 14:29:03 UTC
Created attachment 946943 [details]
File: open_fds

Comment 10 Kamil J. Dudek 2014-10-14 14:29:04 UTC
Created attachment 946944 [details]
File: proc_pid_status

Comment 11 Kamil J. Dudek 2014-10-14 14:29:05 UTC
Created attachment 946945 [details]
File: var_log_messages

Comment 12 Caolan McNamara 2014-10-14 14:54:15 UTC
looks like its a crash on export of a given document. Are you able to attach the document that crashed on export ?

Comment 13 Kamil J. Dudek 2014-10-14 15:41:28 UTC
Created attachment 946961 [details]
Document that crashed soffice

Comment 14 Kamil J. Dudek 2014-10-14 15:43:08 UTC
But this document was created from scratch (no import) and was saved to ODS (no export). I didn't even click "Save" (which I regret, as I lost the grades).

I modified the attached document by removing the surnames (there were lots of personal data there).

Comment 15 Caolan McNamara 2015-01-06 11:06:14 UTC
I can't reproduce this, even under valgrind on exporting the sample document :-(