Version-Release number of selected component: libreoffice-core-4.1.0.4-6.fc19 Additional info: reporter: libreport-2.1.6 backtrace_rating: 4 cmdline: /usr/lib/libreoffice/program/soffice.bin --calc --splash-pipe=5 crash_function: (anonymous namespace)::lclCloneCell executable: /usr/lib/libreoffice/program/soffice.bin kernel: 3.10.6-200.fc19.i686.PAE runlevel: N 5 uid: 1000 Truncated backtrace: Thread no. 1 (10 frames) #0 (anonymous namespace)::lclCloneCell at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/cell.cxx:55 #1 ScBaseCell::Clone at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/cell.cxx:84 #2 ScColumn::CopyCellToDocument at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/column.cxx:1365 #3 ScTable::CopyCellToDocument at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/table2.cxx:694 #4 ScDocument::CopyCellToDocument at /usr/src/debug/libreoffice-4.1.0.4/sc/source/core/data/document.cxx:2057 #5 ScConversionEngineBase::FindNextConversionCell at /usr/src/debug/libreoffice-4.1.0.4/sc/source/ui/view/spelleng.cxx:113 #6 ScSpellDialogChildWindow::GetNextWrongSentence at /usr/src/debug/libreoffice-4.1.0.4/sc/source/ui/view/spelldialog.cxx:83 #7 svx::SpellDialog::GetNextSentence_Impl at /usr/src/debug/libreoffice-4.1.0.4/cui/source/dialogs/SpellDialog.cxx:1060 #8 svx::SpellDialog::SpellContinue_Impl at /usr/src/debug/libreoffice-4.1.0.4/cui/source/dialogs/SpellDialog.cxx:384 #9 svx::SpellDialog::ChangeHdl at /usr/src/debug/libreoffice-4.1.0.4/cui/source/dialogs/SpellDialog.cxx:560
Created attachment 790536 [details] File: backtrace
Created attachment 790537 [details] File: cgroup
Created attachment 790538 [details] File: core_backtrace
Created attachment 790539 [details] File: dso_list
Created attachment 790540 [details] File: environ
Created attachment 790541 [details] File: exploitable
Created attachment 790542 [details] File: limits
Created attachment 790543 [details] File: maps
Created attachment 790544 [details] File: open_fds
Created attachment 790545 [details] File: proc_pid_status
Created attachment 790546 [details] File: var_log_messages
Judging from the backtrace this seems to be related to spell-checking. I can reproduce some crasher in 4.1.0 when the second cell in the same column is to be replaced, but this does not occur in a 4.1.1 build. Looks like it is fixed upstream.
Presumably https://bugs.freedesktop.org/show_bug.cgi?id=68220