Bug 1192939

Summary: [abrt] libreoffice-core: getTypeName(): soffice.bin killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Maloy832
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 21CC: caolanm, diego.ml, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/64602278dcd191bbf5ecebfb357a28ab5252329a
Whiteboard: abrt_hash:53549ab31e4ff9f43cf969a1c5f34666529b27b1
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-04-13 08:31:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
File: exploitable none

Description Maloy832 2015-02-16 09:39:17 UTC
Version-Release number of selected component:
libreoffice-core-4.3.5.2-11.fc21

Additional info:
reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --calc /tmp/kde-nagornak/arkdez0T2/hombi-price-MGPT-04-12-14.xls --splash-pipe=5
crash_function: getTypeName
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.18.6-200.fc21.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 getTypeName at /usr/src/debug/libreoffice-4.3.5.2/include/uno/environment.hxx:123
 #1 getMappingName at /usr/src/debug/libreoffice-4.3.5.2/cppu/source/uno/lbmap.cxx:294
 #2 uno_getMapping at /usr/src/debug/libreoffice-4.3.5.2/cppu/source/uno/lbmap.cxx:601
 #3 Mapping at /usr/src/debug/libreoffice-4.3.5.2/include/uno/mapping.hxx:220
 #4 cppu::throwException at /usr/src/debug/libreoffice-4.3.5.2/cppuhelper/source/exc_thrower.cxx:197
 #5 ucbhelper::cancelCommandExecution at /usr/src/debug/libreoffice-4.3.5.2/ucbhelper/source/provider/cancelcommandexecution.cxx:114
 #6 fileaccess::throw_handler at /usr/src/debug/libreoffice-4.3.5.2/ucb/source/ucp/file/filglob.cxx:372
 #7 fileaccess::TaskManager::endTask at /usr/src/debug/libreoffice-4.3.5.2/ucb/source/ucp/file/filtask.cxx:95
 #8 fileaccess::BaseContent::endTask at /usr/src/debug/libreoffice-4.3.5.2/ucb/source/ucp/file/bc.cxx:1263
 #9 fileaccess::BaseContent::execute at /usr/src/debug/libreoffice-4.3.5.2/ucb/source/ucp/file/bc.cxx:423

Potential duplicate: bug 798520

Comment 1 Maloy832 2015-02-16 09:39:21 UTC
Created attachment 992089 [details]
File: backtrace

Comment 2 Maloy832 2015-02-16 09:39:23 UTC
Created attachment 992090 [details]
File: cgroup

Comment 3 Maloy832 2015-02-16 09:39:25 UTC
Created attachment 992091 [details]
File: core_backtrace

Comment 4 Maloy832 2015-02-16 09:39:26 UTC
Created attachment 992092 [details]
File: dso_list

Comment 5 Maloy832 2015-02-16 09:39:28 UTC
Created attachment 992093 [details]
File: environ

Comment 6 Maloy832 2015-02-16 09:39:29 UTC
Created attachment 992094 [details]
File: limits

Comment 7 Maloy832 2015-02-16 09:39:32 UTC
Created attachment 992095 [details]
File: maps

Comment 8 Maloy832 2015-02-16 09:39:33 UTC
Created attachment 992096 [details]
File: open_fds

Comment 9 Maloy832 2015-02-16 09:39:34 UTC
Created attachment 992097 [details]
File: proc_pid_status

Comment 10 Maloy832 2015-02-16 09:39:36 UTC
Created attachment 992098 [details]
File: var_log_messages

Comment 11 Maloy832 2015-02-16 09:39:37 UTC
Created attachment 992099 [details]
File: exploitable

Comment 12 Caolan McNamara 2015-02-17 14:14:33 UTC
is this reproducible in any way ?

Comment 13 Diego 2015-08-11 09:07:14 UTC
Another user experienced a similar problem:

Opened some xls files from the archives here.
https://www.wholesale.telecomitalia.com/it/catalogo/-/catalogo_aggregator/article/1027774?p_r_p_564233524_activePortletId=&_2_WAR_nwscatalogoportlet_activePortlet=false&_2_WAR_nwscatalogoportlet_tab=Coperture&p_r_p_564233524_categoryId=1027776&p_r_p_564233524_isList=true

At some point LibreOffice crashed when opening a new xls of those (don't remember which one exactly).

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --calc '/tmp/kde-diego/ark82Sk2G/Centrali NGA attive 05-ago-2015.xls' --splash-pipe=5
crash_function: getTypeName
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         4.1.3-100.fc21.x86_64
package:        libreoffice-core-4.3.7.2-9.fc21
reason:         soffice.bin killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 14 Diego 2015-08-11 09:13:33 UTC
Ok, the file is this one, but it looks like it's not always reproducible:
https://www.wholesale.telecomitalia.com/sitepub/59/Centrali%20NGA%20attive.zip

Comment 15 Stephan Bergmann 2015-08-11 09:30:29 UTC
This is the same as bug 798520, but I still cannot reproduce that problem here even when I open the document mentioned in comment 14 dozens of times.

My working hypothesis had been that this problem happens when LibreOffice is running while its rpm is being updated, but that probably wouldn't match Diego's observations in comment 14.  Smells like some race condition somewhere in the code that is hard (at least for me) to trigger.

*** This bug has been marked as a duplicate of bug 798520 ***