Version-Release number of selected component: libreoffice-core-5.0.3.2-12.fc23 Additional info: reporter: libreport-2.6.3 backtrace_rating: 4 cmdline: /usr/lib64/libreoffice/program/soffice.bin --writer sftp://192.168.200.5/home/liveuser/2TB-disk/Documents/%E7%A0%94%E7%99%BC%E6%9B%BF%E4%BB%A3%E5%BD%B9/104%E5%B9%B4/%E7%80%9A%E9%9C%96%E7%A7%91%E6%8A%80/%E7%80%9A%E9%9C%96%E7%AD%86%E8%A8%98.odt --splash-pipe=5 crash_function: SwFlowFrm::BwdMoveNecessary executable: /usr/lib64/libreoffice/program/soffice.bin global_pid: 3826 kernel: 4.2.7-300.fc23.x86_64 runlevel: N 5 type: CCpp uid: 1000 Truncated backtrace: Thread no. 1 (10 frames) #0 SwFlowFrm::BwdMoveNecessary at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/flowfrm.cxx:285 #1 SwTabFrm::ShouldBwdMoved at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/tabfrm.cxx:3284 #2 SwTabFrm::MakeAll at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/tabfrm.cxx:2029 #3 SwFrm::PrepareMake at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/calcmove.cxx:340 #4 lcl_InnerCalcLayout at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/tabfrm.cxx:1466 #7 lcl_RecalcRow at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/tabfrm.cxx:1503 #8 SwTabFrm::MakeAll at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/tabfrm.cxx:2253 #9 SwFrm::PrepareMake at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/calcmove.cxx:340 #10 SwFrm::MakePos at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/calcmove.cxx:483 #12 SwContentFrm::MakeAll at /usr/src/debug/libreoffice-5.0.3.2/sw/source/core/layout/calcmove.cxx:1229
Created attachment 1108175 [details] File: backtrace
Created attachment 1108176 [details] File: cgroup
Created attachment 1108177 [details] File: core_backtrace
Created attachment 1108178 [details] File: dso_list
Created attachment 1108179 [details] File: environ
Created attachment 1108180 [details] File: exploitable
Created attachment 1108181 [details] File: limits
Created attachment 1108182 [details] File: maps
Created attachment 1108183 [details] File: mountinfo
Created attachment 1108184 [details] File: namespaces
Created attachment 1108185 [details] File: open_fds
Created attachment 1108186 [details] File: proc_pid_status
Created attachment 1108187 [details] File: var_log_messages
Is this crash reproducible?
pPage is null, but we need a reproducer document to see if fixing the local crash just pushed the crash elsewhere