Bug 1338546

Summary: adding bullets in writer make crash libreoffice (double free or corruption)
Product: [Fedora] Fedora Reporter: Heldwin <heldwin>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 23CC: caolanm, dhgutteridge, didierg-divers, dtardon, erack, james, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: libreoffice-5.0.6.2-5.fc23 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-19 15:50:02 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
backtrace that appears when trying to add a bullet none

Description Heldwin 2016-05-22 17:03:51 UTC
Created attachment 1160350 [details]
backtrace that appears when trying to add a bullet

Description of problem:
When trying to add a bullet in writer, it makes crash libreoffice.

Version-Release number of selected component (if applicable):
only in libreoffice*-5.0.6.2-4

How reproducible:
Always

Steps to Reproduce:
1. Open libreoffice --writer
2. Try to add a bullet

Actual results:
libreoffice crashes, and it then asks if we want to recover the document

Expected results:
libreoffice add the bullets without crash


Additional info:

With 'export MALLOC_CHECK_=1', it tells:
*** Error in `/usr/lib64/libreoffice/program/soffice.bin': free(): invalid pointer: 0x0000558702c3a450 ***
with a backtrace. will add it as attachment.

Comment 1 Heldwin 2016-05-22 17:06:12 UTC
Forgot to write I tried with libreoffice-5.0.6.2-2 and libreoffice 5.0.6.2-3, and it was working correctly in these versions.

Comment 2 David H. Gutteridge 2016-05-22 19:01:18 UTC
(Adding myself to the CC list. When I tested 5.0.6.2-4, that happened to include editing a Writer document with bullets in it, but I only deleted and modified existing ones, I didn't try adding any. Too bad I didn't catch this then.)

Comment 3 Didier G 2016-05-22 20:14:00 UTC
Same problem for me with libreoffice-writer-5.0.6.2-4.fc23.x86_64

Comment 4 Caolan McNamara 2016-05-23 09:25:57 UTC
Doesn't happen for me, but I see that all reporters appear to have .fr email addresses, so I wonder if this is language specific somehow. But installing libreoffice-langpack-fr and setting LANG to fr_FR.UTF-8 doesn't reproduce it for me either.

Comment 5 Caolan McNamara 2016-05-23 09:32:57 UTC
hang on, I can reproduce now. It has to be from the bullets drop down, not the buttons button

Comment 6 Didier G 2016-05-24 10:03:14 UTC
libreoffice-core-5.0.6.2-5.fc23.x86_64 available on koji fixes this problem for me.

Comment 7 David H. Gutteridge 2016-05-26 05:16:59 UTC
libreoffice-5.0.6.2-5.fc23 resolves it for me as well.

Comment 8 Heldwin 2016-05-26 17:49:05 UTC
same here. Thanks :)