Bug 888782

Summary: [abrt] libreoffice-core-3.5.7.2-7.fc17: SEGV in X11SalInstance::CreateClipboard
Product: [Fedora] Fedora Reporter: adressespecialepub
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 17CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:737907402d23638e39d3f480a6466d13dad63333
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-01 12:26:17 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: core_backtrace
none
File: environ
none
File: limits
none
File: backtrace
none
File: cgroup
none
File: smolt_data
none
File: executable
none
File: maps
none
File: dso_list
none
File: proc_pid_status
none
File: open_fds
none
File: var_log_messages none

Description adressespecialepub 2012-12-19 13:28:29 UTC
Version-Release number of selected component:
libreoffice-core-3.5.7.2-7.fc17

Additional info:
libreport version: 2.0.18
abrt_version:   2.0.18
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --calc file:///tmp/S6%20TEO%202012-2013.xls --splash-pipe=6
crash_function: Reference
kernel:         3.6.10-2.fc17.x86_64

truncated backtrace:
:Thread no. 1 (10 frames)
: #0 Reference at /usr/src/debug/libreoffice-3.5.7.2/solver/unxlngx6.pro/inc/com/sun/star/uno/Reference.hxx:131
: #1 X11SalInstance::CreateClipboard at /usr/src/debug/libreoffice-3.5.7.2/vcl/unx/generic/dtrans/X11_service.cxx:119
: #2 vcl::ClipboardFactory::createInstanceWithArguments at /usr/src/debug/libreoffice-3.5.7.2/vcl/source/components/dtranscomp.cxx:275
: #3 cppu::ORegistryFactoryHelper::createInstanceWithArgumentsAndContext at /usr/src/debug/libreoffice-3.5.7.2/cppuhelper/source/factory.cxx:821
: #4 stoc_smgr::OServiceManager::createInstanceWithArgumentsAndContext at /usr/src/debug/libreoffice-3.5.7.2/stoc/source/servicemanager/servicemanager.cxx:1255
: #5 stoc_smgr::OServiceManager::createInstanceWithArguments at /usr/src/debug/libreoffice-3.5.7.2/stoc/source/servicemanager/servicemanager.cxx:1311
: #6 Window::GetPrimarySelection at /usr/src/debug/libreoffice-3.5.7.2/vcl/source/window/window.cxx:8434
: #7 TransferableHelper::CopyToSelection at /usr/src/debug/libreoffice-3.5.7.2/svtools/source/misc/transfer.cxx:1084
: #8 ScTabView::CheckSelectionTransfer at /usr/src/debug/libreoffice-3.5.7.2/sc/source/ui/view/tabview3.cxx:334
: #9 ScTabView::UpdateAutoFillMark at /usr/src/debug/libreoffice-3.5.7.2/sc/source/ui/view/tabview3.cxx:164

Comment 1 adressespecialepub 2012-12-19 13:28:32 UTC
Created attachment 666060 [details]
File: core_backtrace

Comment 2 adressespecialepub 2012-12-19 13:28:36 UTC
Created attachment 666061 [details]
File: environ

Comment 3 adressespecialepub 2012-12-19 13:28:39 UTC
Created attachment 666062 [details]
File: limits

Comment 4 adressespecialepub 2012-12-19 13:28:41 UTC
Created attachment 666063 [details]
File: backtrace

Comment 5 adressespecialepub 2012-12-19 13:28:44 UTC
Created attachment 666064 [details]
File: cgroup

Comment 6 adressespecialepub 2012-12-19 13:28:46 UTC
Created attachment 666066 [details]
File: smolt_data

Comment 7 adressespecialepub 2012-12-19 13:28:50 UTC
Created attachment 666068 [details]
File: executable

Comment 8 adressespecialepub 2012-12-19 13:28:55 UTC
Created attachment 666071 [details]
File: maps

Comment 9 adressespecialepub 2012-12-19 13:28:58 UTC
Created attachment 666073 [details]
File: dso_list

Comment 10 adressespecialepub 2012-12-19 13:29:00 UTC
Created attachment 666074 [details]
File: proc_pid_status

Comment 11 adressespecialepub 2012-12-19 13:29:06 UTC
Created attachment 666078 [details]
File: open_fds

Comment 12 adressespecialepub 2012-12-19 13:29:09 UTC
Created attachment 666079 [details]
File: var_log_messages

Comment 13 Michael Stahl 2013-01-04 19:39:44 UTC
hmm... crash on the return statement, copying the Reference in the map:

    static boost::unordered_map< OUString, ::boost::unordered_map< Atom, Reference< XClipboard > >, ::rtl::OUStringHash > m_aInstances;

[...]

    ::boost::unordered_map< Atom, css::uno::Reference< XClipboard > >& rMap( m_aInstances[ aDisplayName ] );
    ::boost::unordered_map< Atom, css::uno::Reference< XClipboard > >::iterator it = rMap.find( nSelection );
    if( it != rMap.end() )
        return it->second;


odd thing to crash in this way, no idea how it could happen...

can you reproduce this somehow?

Comment 14 Stephan Bergmann 2014-11-24 10:56:25 UTC

*** This bug has been marked as a duplicate of bug 1167250 ***