Bug 863607

Summary: [abrt] libreoffice-core-3.5.6.2-4.fc17: Process /usr/lib64/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Toon Verstraelen <toon.verstraelen>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 17CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:0b8bd85876d4e1feea891dca0be8cae1a77e764a
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-11-28 12:29:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: core_backtrace
none
File: environ
none
File: event_log
none
File: limits
none
File: backtrace
none
File: cgroup
none
File: maps
none
File: dso_list
none
File: open_fds
none
File: var_log_messages
none
slides_crashing.odp
none
small_crashing_example.odp none

Description Toon Verstraelen 2012-10-06 03:41:10 UTC
Description of problem:
I have opened a random presentation and libreoffice crashed while it was half-way opening the file. I've tried different odp files, all with the same result.

Version-Release number of selected component:
libreoffice-core-3.5.6.2-4.fc17

Additional info:
libreport version: 2.0.14
abrt_version:   2.0.13
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --impress slides.odp --splash-pipe=6
crash_function: SdXMLImExSvgDElement::~SdXMLImExSvgDElement
kernel:         3.5.4-2.fc17.x86_64

truncated backtrace:
:Thread no. 1 (10 frames)
: #0 SdXMLImExSvgDElement::~SdXMLImExSvgDElement at /usr/src/debug/libreoffice-3.5.6.2/xmloff/inc/xexptran.hxx:157
: #1 SdXMLPathShapeContext::StartElement at /usr/src/debug/libreoffice-3.5.6.2/xmloff/source/draw/ximpshap.cxx:1494
: #2 SvXMLImport::startElement at /usr/src/debug/libreoffice-3.5.6.2/xmloff/source/core/xmlimp.cxx:687
: #3 sax_expatwrap::SaxExpatParser_Impl::callbackStartElement at /usr/src/debug/libreoffice-3.5.6.2/sax/source/expatwrap/sax_expat.cxx:811
: #4 doContent at lib/xmlparse.c:2443
: #5 contentProcessor at lib/xmlparse.c:2105
: #6 XML_ParseBuffer at lib/xmlparse.c:1651
: #7 sax_expatwrap::SaxExpatParser_Impl::parse at /usr/src/debug/libreoffice-3.5.6.2/sax/source/expatwrap/sax_expat.cxx:745
: #8 sax_expatwrap::SaxExpatParser::parseStream at /usr/src/debug/libreoffice-3.5.6.2/sax/source/expatwrap/sax_expat.cxx:533
: #9 ReadThroughComponent at /usr/src/debug/libreoffice-3.5.6.2/sd/source/filter/xml/sdxmlwrp.cxx:261

Comment 1 Toon Verstraelen 2012-10-06 03:43:08 UTC
Created attachment 622591 [details]
File: core_backtrace

Comment 2 Toon Verstraelen 2012-10-06 03:43:10 UTC
Created attachment 622592 [details]
File: environ

Comment 3 Toon Verstraelen 2012-10-06 03:43:11 UTC
Created attachment 622593 [details]
File: event_log

Comment 4 Toon Verstraelen 2012-10-06 03:43:13 UTC
Created attachment 622594 [details]
File: limits

Comment 5 Toon Verstraelen 2012-10-06 03:43:15 UTC
Created attachment 622595 [details]
File: backtrace

Comment 6 Toon Verstraelen 2012-10-06 03:43:17 UTC
Created attachment 622596 [details]
File: cgroup

Comment 7 Toon Verstraelen 2012-10-06 03:43:19 UTC
Created attachment 622597 [details]
File: maps

Comment 8 Toon Verstraelen 2012-10-06 03:43:21 UTC
Created attachment 622598 [details]
File: dso_list

Comment 9 Toon Verstraelen 2012-10-06 03:43:23 UTC
Created attachment 622599 [details]
File: open_fds

Comment 10 Toon Verstraelen 2012-10-06 03:43:25 UTC
Created attachment 622600 [details]
File: var_log_messages

Comment 11 Toon Verstraelen 2012-10-06 04:01:17 UTC
I just tried to save an empty presentation and then reopen it. That worked. It seems that the problem only occurs with presentations made some while ago, with a different version of openoffice.

Comment 12 Toon Verstraelen 2012-10-06 04:08:25 UTC
Created attachment 622609 [details]
slides_crashing.odp

This an example file that makes ooimpress crash.

Comment 13 Toon Verstraelen 2012-10-06 04:49:58 UTC
Created attachment 622619 [details]
small_crashing_example.odp

I could make a simpler example that crashes. This slide (just one page) is taken from a presentation made with a previous version of openoffice (don't know which) on ubuntu. It contains formulas created with the ooolatex plugin. I can still open this file with openoffice 3.5 on ubuntu. The ooolatex plugin seems to work well appart from this slide, so it is not a general ooolatex bug. Even when the plugin is uninstalled, ooimpress crashes when trying to open this file.

Comment 14 Toon Verstraelen 2012-10-06 05:49:41 UTC
After working with ooimpress with the ooolatex plugin for a while, ooimpress just crashes at rather unpredictable moments. Seems to be related.

Comment 15 Caolan McNamara 2012-10-08 13:40:13 UTC
I don't have that extension installed, and your examples are opening fine for me on x86_64 F-17

Comment 16 Michael Stahl 2012-10-08 14:29:16 UTC
can't reproduce crash either.

backtrace crashes in ~SdXMLImExSvgDElement which is
automatically generated; the object is:

         SdXMLImExSvgDElement aPoints(maD, aViewBox, aPosition, aSize, GetImport());

can only be some kind of memory corruption, running on valgrind
doesn't give anything interesting either...