Bug 820283

Summary: [abrt][reproducible] libreoffice-core- SwTable::NewInsertCol killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Karolis Dauzickas <karolis>
Component: libreofficeAssignee: Michael Stahl <mstahl>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
Whiteboard: abrt_hash:b8cb86b3bbef1a379f248b169c9f6f8adbe1da28
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-20 10:55:35 EST Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Description Flags
File: dso_list
File: maps
File: backtrace
File to reproduce the bug none

Description Karolis Dauzickas 2012-05-09 10:08:59 EDT
libreport version: 2.0.8
abrt_version:   2.0.7
backtrace_rating: 4
cmdline:        /usr/lib/libreoffice/program/soffice.bin --writer file:///media/D69AC9A59AC9828B/Documents%20and%20Settings/Ingrida/Downloads/CVTemplate-EDITED-KAROLIS.docx --splash-pipe=7
crash_function: GetPos
executable:     /usr/lib/libreoffice/program/soffice.bin
kernel:         3.3.2-6.fc16.i686
pid:            8371
pwd:            /home/karolis
reason:         Process /usr/lib/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
time:           Wed 09 May 2012 02:31:30 PM IST
uid:            1000
username:       karolis

backtrace:      Text file, 40328 bytes
dso_list:       Text file, 19156 bytes
maps:           Text file, 47704 bytes

:Tried to add a column to a table when it crashed.
:It was a .docx document

:'LESSOPEN=||/usr/bin/lesspipe.sh %s'

:UUID: 8bef7ae9-3c6f-46da-8f11-494ba7855420
:OS: Fedora release 16 (Verne)
:Default run level: Unknown
:Language: en_US.UTF-8
:Platform: i686
:BogoMIPS: 4748.52
:CPU Vendor: GenuineIntel
:CPU Model: Intel(R) Core(TM) i5 CPU       M 430  @ 2.27GHz
:CPU Stepping: 2
:CPU Family: 6
:CPU Model Num: 37
:Number of CPUs: 4
:CPU Speed: 2267
:System Memory: 2695
:System Swap: 7602
:Vendor: ASUSTeK Computer Inc.
:System: K52Jc 1.0
:Form factor: Notebook
:Kernel: 3.3.2-6.fc16.i686
:SELinux Enabled: 1
:SELinux Policy: targeted
:SELinux Enforce: Enforcing
:MythTV Remote: Unknown
:MythTV Role: Unknown
:MythTV Theme: Unknown
:MythTV Plugin: 
:MythTV Tuner: -1
:(32902:11536:32902:32902) pci, None, HOST/PCI, Core Processor QPI Link 0
:(32902:11362:32902:32902) pci, None, HOST/PCI, Core Processor QuickPath Architecture Generic Non-core Registers
:(32902:11521:32902:32902) pci, None, HOST/PCI, Core Processor QuickPath Architecture System Address Decoder
:(32902:68:4163:7287) pci, agpgart-intel, HOST/PCI, Core Processor DRAM Controller
:(32902:69:4163:7287) pci, pcieport, PCI/PCI, Core Processor PCI Express x16 Root Port
:(6523:9092:4163:6663) pci, None, BASE, xD Host Controller
:(6523:592:4163:6405) pci, jme, ETHERNET, JMC250 PCI Express Gigabit Ethernet Controller
:(6523:9089:4163:6663) pci, None, BASE, Standard SD Host Controller
:(6523:9091:4163:6663) pci, jmb38x_ms, BASE, MS Host Controller
:(6523:9090:4163:6663) pci, sdhci-pci, BASE, SD/MMC Host Controller
:(32902:11539:32902:32902) pci, None, HOST/PCI, Core Processor Reserved
:(32902:15145:4163:7287) pci, ahci, STORAGE, 5 Series/3400 Series Chipset 4 port SATA AHCI Controller
:(32902:15113:4163:7287) pci, None, PCI/ISA, Mobile 5 Series Chipset LPC Interface Controller
:(32902:15154:4163:7287) pci, intel ips, NONE, 5 Series/3400 Series Chipset Thermal Subsystem
:(32902:9288:4163:7287) pci, None, PCI/PCI, 82801 Mobile PCI Bridge
:(32902:15164:4163:7287) pci, ehci_hcd, USB, 5 Series/3400 Series Chipset USB2 Enhanced Host Controller
:(32902:15156:4163:7287) pci, ehci_hcd, USB, 5 Series/3400 Series Chipset USB2 Enhanced Host Controller
:(32902:15204:4163:7287) pci, None, SIMPLE, 5 Series/3400 Series Chipset HECI Controller
:(5772:43:6715:4233) pci, ath9k, NETWORK, AR9285 Wireless Network Adapter (PCI-Express)
:(32902:70:4163:5170) pci, i915, VIDEO, Core Processor Integrated Graphics Controller
:(32902:15170:4163:7287) pci, pcieport, PCI/PCI, 5 Series/3400 Series Chipset PCI Express Root Port 1
:(32902:15172:4163:7287) pci, pcieport, PCI/PCI, 5 Series/3400 Series Chipset PCI Express Root Port 2
:(32902:15190:4163:5107) pci, snd_hda_intel, MULTIMEDIA, 5 Series/3400 Series Chipset High Definition Audio
:(4318:2672:4163:5170) pci, nouveau, VIDEO, GT218 [GeForce 310M]
:(32902:15180:4163:7287) pci, pcieport, PCI/PCI, 5 Series/3400 Series Chipset PCI Express Root Port 6
:(32902:11537:32902:32902) pci, None, HOST/PCI, Core Processor QPI Physical 0
:(32902:11538:32902:32902) pci, None, HOST/PCI, Core Processor Reserved
:Filesystem Information
:device mtpt type bsize frsize blocks bfree bavail file ffree favail
:/dev/sda5 / ext4 4096 4096 92683806 66468213 65540765 23199744 22943829 22943829
:/dev/sda2 WITHHELD fuseblk 4096 4096 27350527 7382161 7382161 30085700 29687959 29687959

:May  9 14:31:30 mothership kernel: [15055.727263] soffice.bin[8371]: segfault at 5 ip 02d9bf65 sp bfe37850 error 4 in libswli.so[2b02000+adf000]
:May  9 14:31:31 mothership abrt[8424]: Saved core dump of pid 8371 (/usr/lib/libreoffice/program/soffice.bin) to /var/spool/abrt/ccpp-2012-05-09-14:31:30-8371 (95723520 bytes)
Comment 1 Karolis Dauzickas 2012-05-09 10:09:04 EDT
Created attachment 583305 [details]
File: dso_list
Comment 2 Karolis Dauzickas 2012-05-09 10:09:06 EDT
Created attachment 583306 [details]
File: maps
Comment 3 Karolis Dauzickas 2012-05-09 10:09:09 EDT
Created attachment 583307 [details]
File: backtrace
Comment 4 Caolan McNamara 2012-05-09 15:55:18 EDT
yuck, tables are hard. Are you able to provide the .docx which triggered the crash when you tried to insert a table. And if so can you indicate which table and into where you tried to add the column.
Comment 5 Karolis Dauzickas 2012-05-10 04:39:56 EDT
Created attachment 583479 [details]
File to reproduce the bug

Since the file isn't mine, I cleared most of the file, however you can still reproduce the bug by clicking on the column with the word `Writing`, Table -> Insert -> Columns and OK.
Also, this file originally looked like this: http://europass.cedefop.europa.eu/en/documents/curriculum-vitae/templates-instructions/templates/doc.doc
And became the unholy mess in the attachment after a save as docx
Comment 6 Caolan McNamara 2012-06-08 09:41:23 EDT
Comment 7 Michael Stahl 2012-09-24 07:49:00 EDT
Comment 8 Michael Stahl 2012-09-24 07:50:14 EDT
grbml, it's mine i said...
Comment 9 Michael Stahl 2012-09-24 07:56:46 EDT
crash is because the area above the "Wrting" cell in the table is not
covered by a cell.

the DOCX import filter creates tables with an irregular structure,
with different number of cells in each row; the SwDoc::TextToTable
should not allow that.

fixed upstream master:

Comment 10 Michael Stahl 2012-09-28 13:24:33 EDT
fix for this should be in next F17 upload
Comment 11 Michael Stahl 2012-10-04 14:37:01 EDT
grbml... that fix was actually bogus,
but now i've got one that doesn't break table import,
should be in

Comment 12 Fedora Update System 2012-10-05 01:29:22 EDT
libreoffice- has been submitted as an update for Fedora 17.
Comment 13 Fedora Update System 2012-10-05 23:49:56 EDT
Package libreoffice-
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing libreoffice-'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
Comment 14 Fedora Update System 2012-12-20 10:55:43 EST
libreoffice- has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.