Bug 862219

Summary: [abrt] libreoffice-core-3.5.6.2-4.fc17: Process /usr/lib64/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Eduardo Yáñez Parareda <eduardo.yanez>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 17CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:47ebb15e65fa95f7177054b32225a2aceb0cab89
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-19 08:23:03 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: core_backtrace
none
File: environ
none
File: limits
none
File: backtrace
none
File: cgroup
none
File: maps
none
File: dso_list
none
File: var_log_messages
none
File: open_fds none

Description Eduardo Yáñez Parareda 2012-10-02 10:39:45 UTC 
Description of problem:
Change to Full Screen mode

Version-Release number of selected component:
libreoffice-core-3.5.6.2-4.fc17

Additional info:
libreport version: 2.0.14
abrt_version:   2.0.13
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer file:///tmp/FATCA%20Program%20Test%20Strategy%20V1.0.doc --splash-pipe=6
crash_function: GDIMetaFile::ImplPlayWithRenderer
kernel:         3.5.4-2.fc17.x86_64

truncated backtrace:
:Thread no. 1 (10 frames)
: #0 GDIMetaFile::ImplPlayWithRenderer at /usr/src/debug/libreoffice-3.5.6.2/vcl/source/gdi/gdimtf.cxx:486
: #1 GDIMetaFile::Play at /usr/src/debug/libreoffice-3.5.6.2/vcl/source/gdi/gdimtf.cxx:639
: #2 GraphicManager::ImplDraw at /usr/src/debug/libreoffice-3.5.6.2/svtools/source/graphic/grfmgr2.cxx:1853
: #3 GraphicDisplayCacheEntry::Draw at /usr/src/debug/libreoffice-3.5.6.2/svtools/source/graphic/grfcache.cxx:543
: #4 GraphicCache::DrawDisplayCacheObj at /usr/src/debug/libreoffice-3.5.6.2/svtools/source/graphic/grfcache.cxx:987
: #5 GraphicManager::DrawObj at /usr/src/debug/libreoffice-3.5.6.2/svtools/source/graphic/grfmgr2.cxx:215
: #6 GraphicObject::Draw at /usr/src/debug/libreoffice-3.5.6.2/svtools/source/graphic/grfmgr.cxx:575
: #7 GraphicObject::DrawWithPDFHandling at /usr/src/debug/libreoffice-3.5.6.2/svtools/source/graphic/grfmgr.cxx:642
: #8 SwNoTxtFrm::PaintPicture at /usr/src/debug/libreoffice-3.5.6.2/sw/source/core/doc/notxtfrm.cxx:865
: #9 SwNoTxtFrm::Paint at /usr/src/debug/libreoffice-3.5.6.2/sw/source/core/doc/notxtfrm.cxx:321
Comment 1 Eduardo Yáñez Parareda 2012-10-02 10:39:49 UTC 
Created attachment 620218 [details]
File: core_backtrace
Comment 2 Eduardo Yáñez Parareda 2012-10-02 10:39:51 UTC 
Created attachment 620219 [details]
File: environ
Comment 3 Eduardo Yáñez Parareda 2012-10-02 10:39:53 UTC 
Created attachment 620220 [details]
File: limits
Comment 4 Eduardo Yáñez Parareda 2012-10-02 10:39:56 UTC 
Created attachment 620221 [details]
File: backtrace
Comment 5 Eduardo Yáñez Parareda 2012-10-02 10:40:01 UTC 
Created attachment 620222 [details]
File: cgroup
Comment 6 Eduardo Yáñez Parareda 2012-10-02 10:40:07 UTC 
Created attachment 620223 [details]
File: maps
Comment 7 Eduardo Yáñez Parareda 2012-10-02 10:40:10 UTC 
Created attachment 620224 [details]
File: dso_list
Comment 8 Eduardo Yáñez Parareda 2012-10-02 10:40:12 UTC 
Created attachment 620225 [details]
File: var_log_messages
Comment 9 Eduardo Yáñez Parareda 2012-10-02 10:40:14 UTC 
Created attachment 620226 [details]
File: open_fds
Comment 10 Michael Stahl 2012-10-02 19:47:54 UTC 
no idea how that could happen, would need a reproducer document to debug it.


0  0x0000003f693ab9d9 in GDIMetaFile::ImplPlayWithRenderer (this=this@entry=0x1834140, pOut=pOut@entry=0x1519808, rPos=..., rDestSize=...) at /usr/src/debug/libreoffice-3.5.6.2/vcl/source/gdi/gdimtf.cxx:486
486	        const uno::Reference<rendering::XBitmap>& xBitmap = xCanvas->getDevice ()->createCompatibleAlphaBitmap (vcl::unotools::integerSize2DFromSize( aSize));

since xCanvas is not null xCanvas->getDevice() probably is null,
which seems to indicate xCanvas has been disposed.

seems the xCanvas comes from either pOut parameter or top-level window.