Bug 1109327 - [abrt] libreoffice-core: poll(): soffice.bin killed by SIGSEGV
Summary: [abrt] libreoffice-core: poll(): soffice.bin killed by SIGSEGV
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Fedora
Classification: Fedora
Component: libreoffice
Version: 20
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Caolan McNamara
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:89a00139aae9ca20ef4daf00ccb...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-06-13 16:52 UTC by Tim Ricketts
Modified: 2014-08-09 17:37 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-06-20 07:14:22 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (2.43 KB, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: cgroup (172 bytes, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: core_backtrace (28.58 KB, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: dso_list (29.65 KB, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: environ (4.12 KB, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: exploitable (82 bytes, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: limits (1.29 KB, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: maps (137.53 KB, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: open_fds (761 bytes, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: proc_pid_status (947 bytes, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details
File: var_log_messages (373 bytes, text/plain)
2014-06-13 16:52 UTC, Tim Ricketts
no flags Details

Description Tim Ricketts 2014-06-13 16:52:07 UTC
Version-Release number of selected component:
libreoffice-core-4.2.4.2-18.fc20

Additional info:
reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin 201305.ods --splash-pipe=5
crash_function: poll
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.14.5-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
[New LWP 31924]
[New LWP 31925]
[New LWP 31928]
[New LWP 31929]
[New LWP 31935]
[New LWP 31997]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/lib64/libreoffice/program/soffice.bin 201305.ods --splash-pipe=5'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  ScFormulaCell::IsSharedTop (this=this@entry=0x7f850dba32c8) at /usr/src/debug/libreoffice-4.2.4.2/sc/source/core/data/formulacell.cxx:4028
4028	/usr/src/debug/libreoffice-4.2.4.2/sc/source/core/data/formulacell.cxx: No such file or directory.

Thread 6 (Thread 0x7f850ebce700 (LWP 31997)):
#0  0x00000031b06ea9dd in poll () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00000031b32495b4 in g_main_context_poll (priority=2147483647, n_fds=3, fds=0x7f85080010c0, timeout=-1, context=0x30cea60) at gmain.c:4007
        poll_func = 0x31b3258500 <g_poll>
#2  g_main_context_iterate (context=0x30cea60, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3708
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 3
        allocated_nfds = 3
        fds = 0x7f85080010c0
#3  0x00000031b3249a3a in g_main_loop_run (loop=0x30ce9f0) at gmain.c:3907
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#4  0x0000003f1f6d0376 in gdbus_shared_thread_func (user_data=0x30cea30) at gdbusprivate.c:278
        data = 0x30cea30
#5  0x00000031b326ea45 in g_thread_proxy (data=0x30d0850) at gthread.c:798
        thread = 0x30d0850
#6  0x00000031b0e07f33 in start_thread (arg=0x7f850ebce700) at pthread_create.c:309
        __res = <optimized out>
        pd = 0x7f850ebce700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140209454638848, -2323055773611459562, 0, 0, 140209454639552, 140209454638848, 2362353978189544470, -2332379911302546410}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#7  0x00000031b06f4ded in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Timeout exceeded: 240 seconds, killing gdb.
Looks like gdb hung while generating backtrace.
This may be a bug in gdb. Consider submitting a bug report to gdb developers.
Please attach coredump from this crash to the bug report if you do.

Comment 1 Tim Ricketts 2014-06-13 16:52:12 UTC
Created attachment 908646 [details]
File: backtrace

Comment 2 Tim Ricketts 2014-06-13 16:52:14 UTC
Created attachment 908647 [details]
File: cgroup

Comment 3 Tim Ricketts 2014-06-13 16:52:16 UTC
Created attachment 908648 [details]
File: core_backtrace

Comment 4 Tim Ricketts 2014-06-13 16:52:18 UTC
Created attachment 908649 [details]
File: dso_list

Comment 5 Tim Ricketts 2014-06-13 16:52:20 UTC
Created attachment 908650 [details]
File: environ

Comment 6 Tim Ricketts 2014-06-13 16:52:23 UTC
Created attachment 908651 [details]
File: exploitable

Comment 7 Tim Ricketts 2014-06-13 16:52:24 UTC
Created attachment 908652 [details]
File: limits

Comment 8 Tim Ricketts 2014-06-13 16:52:29 UTC
Created attachment 908653 [details]
File: maps

Comment 9 Tim Ricketts 2014-06-13 16:52:31 UTC
Created attachment 908654 [details]
File: open_fds

Comment 10 Tim Ricketts 2014-06-13 16:52:33 UTC
Created attachment 908655 [details]
File: proc_pid_status

Comment 11 Tim Ricketts 2014-06-13 16:52:35 UTC
Created attachment 908656 [details]
File: var_log_messages

Comment 12 Caolan McNamara 2014-06-17 10:22:58 UTC
unfortunately the backtrace is truncated for some reason, so there isn't enough context to see why it crashed. All we can tell really is that it was in the spreadsheet.

caolanm->tim: can you reproduce this crash in any way ?

Comment 13 Tim Ricketts 2014-06-18 21:14:01 UTC
Unfortunately, I can't reproduce it.  I reopened it and did what I thought was exactly the same thing again and it didn't crash.  I haven't had a similar crash since.

Sorry, I can't provide anything useful.


Note You need to log in before you can comment on or make changes to this bug.