Bug 661544

Summary: [abrt] openoffice.org-writer-1:3.1.1-19.34.fc12: SwClientIter::SwClientIter: Process /usr/lib/openoffice.org3/program/swriter.bin was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Trevin Beattie <tbeattie>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 16CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: i686   
OS: Unspecified   
Whiteboard: abrt_hash:3633523fee34d9eb022c6d895eeeb25850643cf0
Fixed In Version: libreoffice- Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-28 11:06:31 EST Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Description Flags
File: backtrace
Image formatting test case none

Description Trevin Beattie 2010-12-08 17:54:00 EST
abrt version: 1.1.13
architecture: i686
Attached file: backtrace
cmdline: /usr/lib/openoffice.org3/program/swriter.bin -writer
component: openoffice.org
crash_function: SwClientIter::SwClientIter
executable: /usr/lib/openoffice.org3/program/swriter.bin
package: openoffice.org-writer-1:3.1.1-19.34.fc12
rating: 4
reason: Process /usr/lib/openoffice.org3/program/swriter.bin was killed by signal 11 (SIGSEGV)
release: Fedora release 12 (Constantine)
time: 1291848107
uid: 2045

I've frequently had problems of this nature when the image extends up to or beyond both margins in a page.  The writer will either insert a blank page or attempt to insert an endless number of pages.

How to reproduce
1. Inserted an image from a file.  The image was given a width that extended to both left and right margins and was attached to the paragraph.
2. Changed the attachment from "to paragraph" to "as character."  OpenOffice.org Writer proceeded to insert 1,100 blank pages into my document.
3. Attempted to undo the style change.  Crash.
Comment 1 Trevin Beattie 2010-12-08 17:54:02 EST
Created attachment 467609 [details]
File: backtrace
Comment 2 David Tardon 2010-12-09 00:19:59 EST
F-12 is no longer supported. Can you reproduce it in a newer Fedora? I tried it in F-13 and F-14 and didn't get any crash.
Comment 3 Caolan McNamara 2010-12-09 09:50:32 EST
Seems to work in F-13 and F-14. F-12 is not supported, which means in practice that we can't actually submit updated packages for it if we could reproduce it on F-12 :-(
Comment 4 Trevin Beattie 2010-12-09 12:49:50 EST
I reproduced the first part of the problem perfectly well after installing Fedora 14 on a new virtual machine, copying my document and images over, and performing the same edits:

1. Deleted two consecutive images from a section.
2. Inserted the images anew.  With the default attachment to paragraph, the second image overlapped the first.
3. Changed the attachment of the second image to "as character".  That seemed to work correctly.
4. Changed the attachment of the first image to "as character".  Writer proceeded to insert well over a thousand blank pages.
5. When Writer seemed to have finished, I touched the scroll bar and then it inserted a few hundred more blank pages.

At this point Writer stopped responding (it was eating up all my memory and over half the swap file so far,) so was unable to retry the Undo operation that caused the crash yesterday or get a stack trace.  All I could do was kill the process from a terminal.

I tried reproducing the problem once more and this time went straight for the Edit menu as soon as the page count started racing upwards.  After another thousand pages were added I managed to hit Undo, and this time it did not crash.

Unfortunately I can't send the actual document and images I'm using as they are corporate internal documents, but as I said I've had this same problem in several other documents where I've inserted a lot of images.
Comment 5 Caolan McNamara 2010-12-09 13:01:57 EST
If you are able to email the docs to me privately I could have a go at trying to reproduce this.
Comment 6 Trevin Beattie 2010-12-13 12:58:46 EST
Created attachment 468438 [details]
Image formatting test case

Attached is an example document that demonstrates the first part of the problem: inserting 1000+ blank pages.  At the end of section 12.1 there are two images; the second one overlaps the first.  Change the anchor of both images from "To Paragraph" to "As Character".
Comment 7 Caolan McNamara 2010-12-14 03:56:03 EST
Reproducible. Thanks for that.
Comment 8 Caolan McNamara 2010-12-17 14:51:44 EST
Tricky, well at least fixed the .doc import so that export to .odt and reload gives the exact same looping document :-). Doesn't get me closed to fixing this however.
Comment 9 Caolan McNamara 2012-02-28 11:06:31 EST
seems fixed in 3.5.0 in Fedora 17 (and master as far as I can tell). Can't tell the exact commit which fixed this for backporting, so will have to wait until F-17 unfortunately,