Bug 1581028

Summary: [abrt] libreoffice-core: apply_string<GSUBProxy>(OT::hb_ot_apply_context_t*, GSUBProxy::Lookup const&, hb_ot_layout_lookup_accelerator_t const&)(): soffice.bin killed by SIGSEGV
Product: [Fedora] Fedora Reporter: John Williams <jwilliams>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 28CC: caolanm, dtardon, erack, jwilliams, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/ea5cecbdb530082fdf1477752c6a8ab20eddc8ce
Whiteboard: abrt_hash:4f3ee1c172e854cced42e70654596119ca495447;VARIANT_ID=workstation;
Fixed In Version: libreoffice-6.0.4.2-4.fc28 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-06-15 15:50:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status
none
List of fonts, as requested none

Description John Williams 2018-05-22 03:50:35 UTC 
Version-Release number of selected component:
1:libreoffice-core-6.0.3.2-10.fc28

Additional info:
reporter:       libreport-2.9.5
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --calc file:///home/john/Downloads/Assignment%205%205361607.xlsx --splash-pipe=6
crash_function: apply_string<GSUBProxy>(OT::hb_ot_apply_context_t*, GSUBProxy::Lookup const&, hb_ot_layout_lookup_accelerator_t const&)
executable:     /usr/lib64/libreoffice/program/soffice.bin
journald_cursor: s=cf73c19b8a6d4ee29150864606051c76;i=13ff30;b=1897d7125719405291c3f1b22beb38c0;m=75284b68;t=56cc208e4fb1d;x=9bfb0c35b1906dbc
kernel:         4.16.8-300.fc28.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 apply_string<GSUBProxy>(OT::hb_ot_apply_context_t*, GSUBProxy::Lookup const&, hb_ot_layout_lookup_accelerator_t const&) at hb-ot-layout-common-private.hh:614
 #1 hb_ot_map_t::apply<GSUBProxy>(GSUBProxy const&, hb_ot_shape_plan_t const*, hb_font_t*, hb_buffer_t*) const at hb-ot-layout-gsub-table.hh:1298
 #2 hb_ot_map_t::substitute(hb_ot_shape_plan_t const*, hb_font_t*, hb_buffer_t*) const at hb-ot-layout.cc:1247
 #3 hb_ot_shape_plan_t::substitute(hb_font_t*, hb_buffer_t*) const at hb-ot-shape-private.hh:59
 #4 hb_ot_substitute_complex at hb-ot-shape.cc:619
 #5 hb_ot_substitute at hb-ot-shape.cc:632
 #6 hb_ot_shape_internal at hb-ot-shape.cc:859
 #7 _hb_ot_shape(hb_shape_plan_t*, hb_font_t*, hb_buffer_t*, hb_feature_t const*, unsigned int) at hb-ot-shape.cc:887
 #8 hb_shape_plan_execute(hb_shape_plan_t*, hb_font_t*, hb_buffer_t*, hb_feature_t const*, unsigned int) at hb-shaper-list.hh:43
 #9 0x00007fa9570aab34 in
Comment 1 John Williams 2018-05-22 03:50:40 UTC 
Created attachment 1439789 [details]
File: backtrace
Comment 2 John Williams 2018-05-22 03:50:42 UTC 
Created attachment 1439790 [details]
File: cgroup
Comment 3 John Williams 2018-05-22 03:50:44 UTC 
Created attachment 1439791 [details]
File: core_backtrace
Comment 4 John Williams 2018-05-22 03:50:45 UTC 
Created attachment 1439792 [details]
File: cpuinfo
Comment 5 John Williams 2018-05-22 03:50:47 UTC 
Created attachment 1439793 [details]
File: dso_list
Comment 6 John Williams 2018-05-22 03:50:49 UTC 
Created attachment 1439794 [details]
File: environ
Comment 7 John Williams 2018-05-22 03:50:50 UTC 
Created attachment 1439795 [details]
File: exploitable
Comment 8 John Williams 2018-05-22 03:50:51 UTC 
Created attachment 1439796 [details]
File: limits
Comment 9 John Williams 2018-05-22 03:50:53 UTC 
Created attachment 1439797 [details]
File: maps
Comment 10 John Williams 2018-05-22 03:50:55 UTC 
Created attachment 1439798 [details]
File: mountinfo
Comment 11 John Williams 2018-05-22 03:50:56 UTC 
Created attachment 1439799 [details]
File: open_fds
Comment 12 John Williams 2018-05-22 03:50:58 UTC 
Created attachment 1439800 [details]
File: proc_pid_status
Comment 13 Caolan McNamara 2018-05-22 08:31:50 UTC 
looks like the font list widget, (which tries to make a preview of each font in it), so I'm guessing its on specific font that triggers this. Can you attach the output of

fc-list -v

e.g. 

fc-list -v > ~/fontlist.log and attach fontlist.log here
Comment 14 John Williams 2018-06-11 21:30:03 UTC 
Created attachment 1450201 [details]
List of fonts, as requested

List of fonts, as requested
Comment 15 Caolan McNamara 2018-06-12 15:18:42 UTC 
Looking at the core_backtrace I now think this may be the same underlying problem  as https://bugs.documentfoundation.org/show_bug.cgi?id=117537
Comment 16 Fedora Update System 2018-06-13 10:02:10 UTC 
libreoffice-6.0.4.2-4.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-e4cf47d9fb
Comment 17 Fedora Update System 2018-06-13 23:00:16 UTC 
libreoffice-6.0.4.2-4.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-e4cf47d9fb
Comment 18 Fedora Update System 2018-06-15 15:50:04 UTC 
libreoffice-6.0.4.2-4.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.