Version-Release number of selected component: libreoffice-core-1:7.5.5.2-1.fc38 Additional info: reporter: libreport-2.17.11 type: CCpp reason: soffice.bin killed by SIGSEGV journald_cursor: s=41dde73bc1ef456999f19c8b891e35e3;i=35d2c0;b=12a7f6d78b9141d5a6855362680b0d67;m=9b15f219d;t=603106e61b062;x=c922103e063f12cd executable: /usr/lib64/libreoffice/program/soffice.bin cmdline: /usr/lib64/libreoffice/program/soffice.bin --calc file:///home/ksetlak/Downloads/Nisse.ods --splash-pipe=5 cgroup: 0::/user.slice/user-1000.slice/user/app.slice/dbus-:1.2-org.gnome.Nautilus rootdir: / uid: 1000 kernel: 6.4.10-200.fc38.x86_64 package: libreoffice-core-1:7.5.5.2-1.fc38 runlevel: N 5 backtrace_rating: 4 crash_function: std::__glibcxx_assert_fail Truncated backtrace: Thread no. 1 (86 frames) #38 std::__glibcxx_assert_fail at ../../../../../libstdc++-v3/src/c++11/debug.cc:61 #39 std::vector<SfxPoolItemArray_Impl, std::allocator<SfxPoolItemArray_Impl> >::operator[] at /usr/include/c++/13/bits/stl_vector.h:1123 #41 SfxItemPool::Remove at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svl/source/items/itempool.cxx:788 #42 SfxItemSet::~SfxItemSet at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svl/source/items/itemset.cxx:176 #43 std::_Optional_payload_base<SfxItemSet>::_M_destroy at /usr/include/c++/13/optional:287 #44 std::_Optional_payload_base<SfxItemSet>::_M_reset at /usr/include/c++/13/optional:318 #45 std::_Optional_payload<SfxItemSet, false, false, false>::~_Optional_payload at /usr/include/c++/13/optional:439 #46 std::_Optional_base<SfxItemSet, false, false>::~_Optional_base at /usr/include/c++/13/optional:510 #47 std::optional<SfxItemSet>::~optional at /usr/include/c++/13/optional:705 #48 sdr::properties::DefaultProperties::~DefaultProperties at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/sdr/properties/defaultproperties.cxx:94 #49 sdr::properties::AttributeProperties::~AttributeProperties at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/sdr/properties/attributeproperties.cxx:225 #50 sdr::properties::TextProperties::~TextProperties at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/sdr/properties/textproperties.cxx:77 #51 sdr::properties::RectangleProperties::~RectangleProperties at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/sdr/properties/rectangleproperties.cxx:38 #52 sdr::properties::CaptionProperties::~CaptionProperties at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/sdr/properties/captionproperties.cxx:58 #54 std::default_delete<sdr::properties::BaseProperties>::operator() at /usr/include/c++/13/bits/unique_ptr.h:93 #55 std::__uniq_ptr_impl<sdr::properties::BaseProperties, std::default_delete<sdr::properties::BaseProperties> >::reset at /usr/include/c++/13/bits/unique_ptr.h:211 #56 std::unique_ptr<sdr::properties::BaseProperties, std::default_delete<sdr::properties::BaseProperties> >::reset at /usr/include/c++/13/bits/unique_ptr.h:509 #57 SdrObject::~SdrObject at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/svdraw/svdobj.cxx:479 #58 SdrCaptionObj::~SdrCaptionObj at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/svx/source/svdraw/svdocapt.cxx:216 #59 ScPostIt::~ScPostIt at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/postit.cxx:510 #60 std::default_delete<ScPostIt>::operator() at /usr/include/c++/13/bits/unique_ptr.h:99 #62 std::for_each<__gnu_cxx::__normal_iterator<ScPostIt**, std::vector<ScPostIt*, std::allocator<ScPostIt*> > >, std::default_delete<ScPostIt> > at /usr/include/c++/13/bits/stl_algo.h:3833 #63 mdds::mtv::noncopyable_managed_element_block<55, ScPostIt>::~noncopyable_managed_element_block at /usr/include/mdds-2.0/mdds/multi_type_vector/types.hpp:735 #64 mdds::mtv::element_block<mdds::mtv::noncopyable_managed_element_block<55, ScPostIt>, 55, ScPostIt*>::delete_block at /usr/include/mdds-2.0/mdds/multi_type_vector/types.hpp:375 #66 mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_managed_element_block<55, ScPostIt> >::delete_block at /usr/include/mdds-2.0/mdds/multi_type_vector/custom_func1.hpp:75 #67 mdds::mtv::soa::multi_type_vector<mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_managed_element_block<55, ScPostIt> >, mdds::mtv::default_trait>::delete_element_block at /usr/include/mdds-2.0/mdds/multi_type_vector/soa/main_def.inl:454 #68 mdds::mtv::soa::multi_type_vector<mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_managed_element_block<55, ScPostIt> >, mdds::mtv::default_trait>::delete_element_blocks at /usr/include/mdds-2.0/mdds/multi_type_vector/soa/main_def.inl:462 #69 mdds::mtv::soa::multi_type_vector<mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_managed_element_block<55, ScPostIt> >, mdds::mtv::default_trait>::clear at /usr/include/mdds-2.0/mdds/multi_type_vector/soa/main_def.inl:1220 #70 ScColumn::FreeAll at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/column3.cxx:247 #71 ScColumn::~ScColumn at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/column.cxx:98 #72 o3tl::default_delete<ScColumn>::operator() at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/o3tl/deleter.hxx:46 #74 std::__uniq_ptr_impl<ScColumn, o3tl::default_delete<ScColumn> >::reset at /usr/include/c++/13/bits/unique_ptr.h:211 #75 std::unique_ptr<ScColumn, o3tl::default_delete<ScColumn> >::reset at /usr/include/c++/13/bits/unique_ptr.h:509 #76 ScColContainer::Clear at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/colcontainer.cxx:42 #77 ScColContainer::~ScColContainer at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/colcontainer.cxx:33 #78 o3tl::default_delete<ScTable>::operator() at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/o3tl/deleter.hxx:46 #80 std::unique_ptr<ScTable, o3tl::default_delete<ScTable> >::~unique_ptr at /usr/include/c++/13/bits/unique_ptr.h:404 #81 std::_Destroy<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> > > at /usr/include/c++/13/bits/stl_construct.h:151 #82 std::_Destroy_aux<false>::__destroy<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> >*> at /usr/include/c++/13/bits/stl_construct.h:163 #83 std::_Destroy<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> >*> at /usr/include/c++/13/bits/stl_construct.h:196 #84 std::_Destroy<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> >*, std::unique_ptr<ScTable, o3tl::default_delete<ScTable> > > at /usr/include/c++/13/bits/alloc_traits.h:947 #85 std::vector<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> >, std::allocator<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> > > >::_M_erase_at_end at /usr/include/c++/13/bits/stl_vector.h:1934 #86 std::vector<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> >, std::allocator<std::unique_ptr<ScTable, o3tl::default_delete<ScTable> > > >::clear at /usr/include/c++/13/bits/stl_vector.h:1603 #87 ScDocument::Clear at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/documen9.cxx:507 #88 ScDocument::~ScDocument at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/core/data/documen2.cxx:382 #89 o3tl::default_delete<ScDocument>::operator() at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/o3tl/deleter.hxx:46 #91 std::_Sp_counted_deleter<ScDocument*, o3tl::default_delete<ScDocument>, std::allocator<void>, (__gnu_cxx::_Lock_policy)2>::_M_dispose at /usr/include/c++/13/bits/shared_ptr_base.h:527 #92 std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release at /usr/include/c++/13/bits/shared_ptr_base.h:346 #94 std::__shared_count<(__gnu_cxx::_Lock_policy)2>::~__shared_count at /usr/include/c++/13/bits/shared_ptr_base.h:1071 #95 std::__shared_ptr<ScDocument, (__gnu_cxx::_Lock_policy)2>::~__shared_ptr at /usr/include/c++/13/bits/shared_ptr_base.h:1524 #96 std::__shared_ptr<ScDocument, (__gnu_cxx::_Lock_policy)2>::reset at /usr/include/c++/13/bits/shared_ptr_base.h:1642 #97 ScTransferObj::~ScTransferObj at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/sc/source/ui/app/transobj.cxx:191 #99 com::sun::star::uno::Reference<com::sun::star::datatransfer::XTransferable>::~Reference at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/com/sun/star/uno/Reference.hxx:114 #100 GtkInstDragSource::~GtkInstDragSource at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/unx/gtk3/gtkinst.cxx:1764 #102 com::sun::star::uno::Reference<com::sun::star::datatransfer::dnd::XDragSource>::~Reference at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/com/sun/star/uno/Reference.hxx:114 #103 ImplFrameData::~ImplFrameData at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/inc/window.h:129 #104 vcl::Window::dispose at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/window/window.cxx:541 #105 VclPtr<vcl::Window>::disposeAndClear at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/vcl/vclptr.hxx:206 #106 vcl::Window::dispose at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/window/window.cxx:508 #107 VclPtr<vcl::Window>::disposeAndClear at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/vcl/vclptr.hxx:206 #108 VCLXWindow::dispose at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/toolkit/source/awt/vclxwindow.cxx:931 #109 (anonymous namespace)::XFrameImpl::disposing at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/framework/source/services/frame.cxx:2187 #110 cppu::WeakComponentImplHelperBase::dispose at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/cppuhelper/source/implbase.cxx:104 #111 cppu::PartialWeakComponentImplHelper<com::sun::star::lang::XServiceInfo, com::sun::star::frame::XDispatch, com::sun::star::document::XDocumentEventListener, com::sun::star::util::XChangesListener, com::sun::star::util::XModifyListener>::dispose at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/cppuhelper/compbase.hxx:88 #112 (anonymous namespace)::XFrameImpl::close at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/framework/source/services/frame.cxx:1734 #113 framework::Desktop::impl_closeFrames at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/framework/source/services/desktop.cxx:1703 #114 framework::Desktop::terminate at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/framework/source/services/desktop.cxx:215 #115 framework::CloseDispatcher::implts_terminateApplication at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/framework/source/dispatch/closedispatcher.cxx:549 #116 framework::CloseDispatcher::impl_asyncCallback at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/framework/source/dispatch/closedispatcher.cxx:403 #117 Link<void*, void>::Call at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/include/tools/link.hxx:110 #118 ImplHandleUserEvent at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/window/winproc.cxx:2287 #119 ImplWindowFrameProc at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/window/winproc.cxx:2857 #120 operator() at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/app/salusereventlist.cxx:119 #121 SalUserEventList::DispatchUserEvents at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/app/salusereventlist.cxx:120 #122 call_userEventFn at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/unx/gtk3/gtkdata.cxx:824 #126 g_main_context_iterate.isra.0 at ../glib/gmain.c:4276 #127 g_main_context_iteration at ../glib/gmain.c:4343 #128 GtkSalData::Yield at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/unx/gtk3/gtkdata.cxx:405 #129 GtkInstance::DoYield at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/unx/gtk3/gtkinst.cxx:431 #130 ImplYield at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/app/svapp.cxx:475 #131 Application::Execute at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/app/svapp.cxx:453 #132 desktop::Desktop::Main at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/desktop/source/app/app.cxx:1604 #133 ImplSVMain at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/app/svmain.cxx:203 #134 SVMain at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/vcl/source/app/svmain.cxx:235 #135 soffice_main at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/desktop/source/app/sofficemain.cxx:94 #136 sal_main at /usr/src/debug/libreoffice-7.5.5.2-1.fc38.x86_64/desktop/source/app/main.c:51
Created attachment 1983793 [details] File: proc_pid_status
Created attachment 1983794 [details] File: maps
Created attachment 1983795 [details] File: limits
Created attachment 1983796 [details] File: environ
Created attachment 1983797 [details] File: open_fds
Created attachment 1983798 [details] File: mountinfo
Created attachment 1983799 [details] File: os_info
Created attachment 1983800 [details] File: cpuinfo
Created attachment 1983801 [details] File: core_backtrace
Created attachment 1983802 [details] File: exploitable
Created attachment 1983803 [details] File: dso_list
Created attachment 1983804 [details] File: var_log_messages
Created attachment 1983805 [details] File: backtrace