Bug 903281

Summary: [abrt][a11y] libreoffice-core-3.6.3.2-8.fc18: SwAccessibleFrame::IsOpaque killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: garethjdjones
Component: libreofficeAssignee: Caolan McNamara <caolanm>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 18CC: caolanm, dtardon, erack, ltinkl, mstahl, sbergman
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:365153dc86ed8968e65568f6f46a5d5d68bcdbe8
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-04 13:16:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: build_ids
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description garethjdjones 2013-01-23 16:07:44 UTC 
Description of problem:
While using libre office I created a table around some text. Seperate bullet points were put in to seperate rows, and when I tried to drag all the text in about 5 rows from one column to another the program closed itself.

Version-Release number of selected component:
libreoffice-core-3.6.3.2-8.fc18

Additional info:
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer --splash-pipe=6
crash_function: SwFrm::GetAttrSet() const
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.6.10-4.fc18.x86_64
remote_result:  NOTFOUND
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 SwFrm::GetAttrSet() const at /usr/lib64/libreoffice/program/../program/libswlo.so
 #1 SwAccessibleFrame::IsOpaque(ViewShell*) const at /usr/lib64/libreoffice/program/../program/libswlo.so
 #2 SwAccessibleContext::InitStates() at /usr/lib64/libreoffice/program/../program/libswlo.so
 #3 SwAccessibleContext::SwAccessibleContext(SwAccessibleMap*, short, SwFrm const*) at /usr/lib64/libreoffice/program/../program/libswlo.so
 #4 SwAccessibleParagraph::SwAccessibleParagraph(SwAccessibleMap&, SwTxtFrm const&) at /usr/lib64/libreoffice/program/../program/libswlo.so
 #5 SwAccessibleMap::GetContext(SwFrm const*, unsigned char) at /usr/lib64/libreoffice/program/../program/libswlo.so
 #6 SwAccessibleMap::GetContextImpl(SwFrm const*, unsigned char) at /usr/lib64/libreoffice/program/../program/libswlo.so
 #7 SwAccessibleContext::getAccessibleChild(int) at /usr/lib64/libreoffice/program/../program/libswlo.so
 #8 AtkListener::updateChildList(com::sun::star::accessibility::XAccessibleContext*) at /usr/lib64/libreoffice/program/libvclplug_gtklo.so
 #9 AtkListener::handleChildRemoved(com::sun::star::uno::Reference<com::sun::star::accessibility::XAccessibleContext> const&, com::sun::star::uno::Reference<com::sun::star::accessibility::XAccessible> const&) at /usr/lib64/libreoffice/program/libvclplug_gtklo.so
Comment 1 garethjdjones 2013-01-23 16:07:49 UTC 
Created attachment 686063 [details]
File: backtrace
Comment 2 garethjdjones 2013-01-23 16:07:52 UTC 
Created attachment 686064 [details]
File: build_ids
Comment 3 garethjdjones 2013-01-23 16:07:54 UTC 
Created attachment 686065 [details]
File: cgroup
Comment 4 garethjdjones 2013-01-23 16:07:56 UTC 
Created attachment 686066 [details]
File: core_backtrace
Comment 5 garethjdjones 2013-01-23 16:08:01 UTC 
Created attachment 686067 [details]
File: dso_list
Comment 6 garethjdjones 2013-01-23 16:08:04 UTC 
Created attachment 686068 [details]
File: environ
Comment 7 garethjdjones 2013-01-23 16:08:06 UTC 
Created attachment 686069 [details]
File: limits
Comment 8 garethjdjones 2013-01-23 16:08:10 UTC 
Created attachment 686070 [details]
File: maps
Comment 9 garethjdjones 2013-01-23 16:08:14 UTC 
Created attachment 686071 [details]
File: open_fds
Comment 10 garethjdjones 2013-01-23 16:08:21 UTC 
Created attachment 686072 [details]
File: proc_pid_status
Comment 11 garethjdjones 2013-01-23 16:08:34 UTC 
Created attachment 686073 [details]
File: var_log_messages
Comment 12 David Tardon 2013-01-24 14:59:27 UTC 
I am getting a crash dragging a column of text to another column, but the top frames of the stack trace are different.

Steps to reproduce:
1. enable a11y (gsettings set org.gnome.desktop.interface toolkit-accessibility true)
2. open a new writer document
3. insert a table with at least 3 rows
4. insert some text into all rows in the first column
5. select the first column
6. drag it to the second column and drop it on the _second_ row
Comment 13 Caolan McNamara 2013-12-04 13:16:58 UTC 
Can't reproduce the exact problem, but fixed the one we can reproduce as http://cgit.freedesktop.org/libreoffice/core/commit/?id=f141505929c95c97ae4765d7c7221f07e41ef8e7

Proposed this for backporting upstream to 4.1