Bug 879392

Summary: [abrt] [a11y] calc killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Szőke Károly <szoke.karcsi>
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 17CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:f33a62492b6e1e724b338363f0568f5f91a22a12
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-11-27 16:04:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: core_backtrace
none
File: environ
none
File: limits
none
File: backtrace
none
File: smolt_data
none
File: cgroup
none
File: executable
none
File: maps
none
File: dso_list
none
File: proc_pid_status
none
File: var_log_messages
none
File: open_fds none

Description Szőke Károly 2012-11-22 20:12:14 UTC
Description of problem:
When I want to type the following characters:
[2nd F] [x→K1]
Crashed, when I insert the arrow character.


Version-Release number of selected component:
libreoffice-core-3.5.7.2-6.fc17

Additional info:
libreport version: 2.0.18
abrt_version:   2.0.18
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer file:///home/karcsi/.cache/.fr-oiLu8H/konz_docx/konz_03_matrixok_matrixok%20szorzasa.docx --splash-pipe=6
crash_function: SvPtrarr::Insert
kernel:         3.1.10

truncated backtrace:
:Thread no. 1 (10 frames)
: #0 SvPtrarr::Insert at /usr/src/debug/libreoffice-3.5.7.2/svl/source/memtools/svarray.cxx:54
: #1 Insert at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/editeng/editdoc.hxx:553
: #2 ImpEditEngine::CreateLines at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/editeng/impedit3.cxx:1510
: #3 ImpEditEngine::FormatDoc at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/editeng/impedit3.cxx:406
: #4 FormatAndUpdate at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/editeng/impedit3.cxx:4035
: #5 ImpEditEngine::FormatAndUpdate at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/editeng/impedit3.cxx:4026
: #6 EditEngine::GetDocPosTopLeft at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/editeng/editeng.cxx:1711
: #7 SvxEditEngineForwarder::GetParaBounds at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/uno/unofored.cxx:391
: #8 SvxAccessibleTextAdapter::GetParaBounds at /usr/src/debug/libreoffice-3.5.7.2/editeng/source/uno/unoedprx.cxx:840
: #9 accessibility::AccessibleTextHelper_Impl::UpdateVisibleChildren at /usr/src/debug/libreoffice-3.5.7.2/svx/source/accessibility/AccessibleTextHelper.cxx:847

Comment 1 Szőke Károly 2012-11-22 20:12:26 UTC
Created attachment 650014 [details]
File: core_backtrace

Comment 2 Szőke Károly 2012-11-22 20:12:28 UTC
Created attachment 650015 [details]
File: environ

Comment 3 Szőke Károly 2012-11-22 20:12:30 UTC
Created attachment 650016 [details]
File: limits

Comment 4 Szőke Károly 2012-11-22 20:12:32 UTC
Created attachment 650017 [details]
File: backtrace

Comment 5 Szőke Károly 2012-11-22 20:12:34 UTC
Created attachment 650018 [details]
File: smolt_data

Comment 6 Szőke Károly 2012-11-22 20:12:36 UTC
Created attachment 650019 [details]
File: cgroup

Comment 7 Szőke Károly 2012-11-22 20:12:38 UTC
Created attachment 650020 [details]
File: executable

Comment 8 Szőke Károly 2012-11-22 20:12:41 UTC
Created attachment 650021 [details]
File: maps

Comment 9 Szőke Károly 2012-11-22 20:12:43 UTC
Created attachment 650022 [details]
File: dso_list

Comment 10 Szőke Károly 2012-11-22 20:12:45 UTC
Created attachment 650023 [details]
File: proc_pid_status

Comment 11 Szőke Károly 2012-11-22 20:12:47 UTC
Created attachment 650024 [details]
File: var_log_messages

Comment 12 Szőke Károly 2012-11-22 20:12:49 UTC
Created attachment 650025 [details]
File: open_fds

Comment 13 Caolan McNamara 2012-11-22 21:06:52 UTC
Looks like a crash in some accessibility code.

This was in calc, right ? I'm a little confused as to what you typed exactly, did you mean you press the F2 key in calc and then entered x,<pressed right arrow>,K1 or the actual right arrow character ?

Comment 14 Szőke Károly 2012-11-23 20:24:51 UTC
(In reply to comment #13)
> Looks like a crash in some accessibility code.
> 
> This was in calc, right ? I'm a little confused as to what you typed
> exactly, did you mean you press the F2 key in calc and then entered
> x,<pressed right arrow>,K1 or the actual right arrow character ?

Sorry for few info. Yes, this was in Calc. I wrote this string to the cell:
"[2nd F] [x→K1]"
It was a programmable calculator's program, what I wrote to the Calc step by step.
I insert the arrow from menu: Insert/Special character. And when I insert, the program gone crash. The crash is not reproducible, wrote in twice it was OK.
Sorry for my english, I'm a hungarian.

Comment 15 Caolan McNamara 2012-11-27 16:04:22 UTC
Tried to reproduce it with the sample string. Also under valgrind, with no results. Whatever triggers that crash is apparently more than just the entry of the string. Unknown cause :-(