Description of problem: Going forward and backward in the serial/standard letter wizard (I use the German version, there it is called Serienbrief-Assistent) results in a crash at certain stages. I remember to have choosen a database source and then decided to change from doing a regular letter to an email and the app crashed. Version-Release number of selected component: libreoffice-core-4.1.4.2-2.fc19 Additional info: reporter: libreport-2.1.10 backtrace_rating: 3 cmdline: /usr/lib64/libreoffice/program/soffice.bin --calc file:///home/vehre/Dokumente/Caro/Kasse/Berichte2013_hand.ods --splash-pipe=5 crash_function: os::die executable: /usr/lib64/libreoffice/program/soffice.bin kernel: 3.12.6-200.fc19.x86_64 runlevel: N 5 type: CCpp uid: 1000 var_log_messages: Jan 15 16:54:41 vepi2 abrt-hook-ccpp[30636]: Saved core dump of pid 27685 (/usr/lib64/libreoffice/program/soffice.bin) to /var/tmp/abrt/ccpp-2014-01-15-16:54:36-27685 (429142016 bytes) Truncated backtrace: Thread no. 1 (10 frames) #2 os::die at /usr/src/debug/java-1.7.0-openjdk-1.7.0.60-2.4.3.0.fc19.x86_64/openjdk/hotspot/src/os/linux/vm/os_linux.cpp:1603 #4 crash_handler at /usr/src/debug/java-1.7.0-openjdk-1.7.0.60-2.4.3.0.fc19.x86_64/openjdk/hotspot/src/os/linux/vm/vmError_linux.cpp:106 #6 ?? #9 crash_handler at /usr/src/debug/java-1.7.0-openjdk-1.7.0.60-2.4.3.0.fc19.x86_64/openjdk/hotspot/src/os/linux/vm/vmError_linux.cpp:106 #11 os::is_first_C_frame at /usr/src/debug/java-1.7.0-openjdk-1.7.0.60-2.4.3.0.fc19.x86_64/openjdk/hotspot/src/share/vm/runtime/os.cpp:1021 #12 VMError::report at /usr/src/debug/java-1.7.0-openjdk-1.7.0.60-2.4.3.0.fc19.x86_64/openjdk/hotspot/src/share/vm/utilities/vmError.cpp:594 #16 operator rtl::OUString at /usr/src/debug/libreoffice-4.1.4.2/include/tools/string.hxx:155 #17 SwMailMergeLayoutPage::InsertAddressAndGreeting at /usr/src/debug/libreoffice-4.1.4.2/sw/source/ui/dbui/mmlayoutpage.cxx:263 #18 SwMailMergeLayoutPage::commitPage at /usr/src/debug/libreoffice-4.1.4.2/sw/source/ui/dbui/mmlayoutpage.cxx:242 #19 svt::OWizardMachine::travelNext at /usr/src/debug/libreoffice-4.1.4.2/svtools/source/dialogs/wizardmachine.cxx:548 Potential duplicate: bug 1043980
Created attachment 851100 [details] File: backtrace
Created attachment 851101 [details] File: cgroup
Created attachment 851102 [details] File: core_backtrace
Created attachment 851103 [details] File: dso_list
Created attachment 851104 [details] File: environ
Created attachment 851105 [details] File: hs_err.log
Created attachment 851106 [details] File: limits
Created attachment 851107 [details] File: maps
Created attachment 851108 [details] File: open_fds
Created attachment 851109 [details] File: proc_pid_status
I do not get any crash clicking through the mail merge wizard at random. Can you reproduce it? If yes, could you write down the exact sequence of steps that leads to it?