Description of problem: I was trying to edit a master slide. Version-Release number of selected component: libreoffice-core-4.1.4.2-4.fc20 Additional info: reporter: libreport-2.1.11 backtrace_rating: 4 cmdline: /usr/lib64/libreoffice/program/soffice.bin --impress --splash-pipe=5 crash_function: Reference executable: /usr/lib64/libreoffice/program/soffice.bin kernel: 3.12.8-300.fc20.x86_64 runlevel: N 5 type: CCpp uid: 1001 Truncated backtrace: Thread no. 1 (10 frames) #0 Reference at /usr/src/debug/libreoffice-4.1.4.2/include/com/sun/star/uno/Reference.hxx:122 #1 SdrPage::getUnoPage at /usr/src/debug/libreoffice-4.1.4.2/svx/source/svdraw/svdpage.cxx:1801 #2 sd::toolpanel::controls::MasterPagesSelector::Execute at /usr/src/debug/libreoffice-4.1.4.2/sd/source/ui/toolpanel/controls/MasterPagesSelector.cxx:560 #3 SfxShell::CallExec at /usr/src/debug/libreoffice-4.1.4.2/include/sfx2/shell.hxx:185 #4 SfxDispatcher::Call_Impl at /usr/src/debug/libreoffice-4.1.4.2/sfx2/source/control/dispatch.cxx:218 #5 SfxDispatcher::_Execute at /usr/src/debug/libreoffice-4.1.4.2/sfx2/source/control/dispatch.cxx:899 #6 SfxBindings::Execute_Impl at /usr/src/debug/libreoffice-4.1.4.2/sfx2/source/control/bindings.cxx:1293 #7 SfxDispatchController_Impl::dispatch at /usr/src/debug/libreoffice-4.1.4.2/sfx2/source/control/unoctitm.cxx:736 #8 SfxOfficeDispatch::dispatch at /usr/src/debug/libreoffice-4.1.4.2/sfx2/source/control/unoctitm.cxx:369 #9 SfxAsyncExec_Impl::TimerHdl at /usr/src/debug/libreoffice-4.1.4.2/sfx2/source/control/bindings.cxx:126 Potential duplicate: bug 1046114
Created attachment 853326 [details] File: backtrace
Created attachment 853327 [details] File: cgroup
Created attachment 853329 [details] File: core_backtrace
Created attachment 853330 [details] File: dso_list
Created attachment 853331 [details] File: environ
Created attachment 853332 [details] File: exploitable
Created attachment 853333 [details] File: limits
Created attachment 853334 [details] File: maps
Created attachment 853335 [details] File: open_fds
Created attachment 853336 [details] File: proc_pid_status
Created attachment 853337 [details] File: var_log_messages
Pretty sure I right-clicked on a master slide thumbnail at that point. Unfortunately, it's so long in between the crash occurring and abrt actually asking me what I did, I don't remember very clearly.
Poof, here goes the theory in bug 802884 comment 17... It seems that the pMasterPage is not NULL, but busted somehow, probably already deleted. I will check it under valgrind; hopefully with better luck than the last time...
still can't reproduce