Bug 231719 - ooimpress crashes while closing a document
Summary: ooimpress crashes while closing a document
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Fedora
Classification: Fedora
Component: openoffice.org
Version: 6
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Jan Navratil
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 233403
TreeView+ depends on / blocked
 
Reported: 2007-03-10 18:25 UTC by John Poelstra
Modified: 2007-11-30 22:11 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2007-04-05 11:24:06 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
document that sometimes crashes on close (114.32 KB, application/vnd.oasis.opendocument.presentation)
2007-03-12 17:25 UTC, John Poelstra
no flags Details


Links
System ID Private Priority Status Summary Last Updated
OpenOffice.org 65879 0 None None None Never
OpenOffice.org 76123 0 None None None Never

Description John Poelstra 2007-03-10 18:25:15 UTC
Description of problem:

ooimpress crashes while closing a document


---start copy and paste here-
(I)    x.org loaded video driver of...
(II) Loading /usr/lib/xorg/modules/drivers/nv_drv.so
(III)  Desktop is: GNOME
(IV)   libgcj version is: libgcj-4.1.1-51.fc6-i386
(V)    kernel is: Linux 2.6.18-1.2798.fc6 #1 SMP Mon Oct 16 14:54:20 EDT 2006
i686 i686 i386
(VI)   OpenOffice.org core rpm version is: openoffice.org-core-2.0.4-5.5.10-i386
(VII)  depth of root window:    24 planes
(VIII) accessibility is: false
(VIV)  fedora release is: Fedora Core release 6 (Zod)
...start sestatus details ...
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 21
Policy from config file:        targeted
...end sestatus details ...
...start stackreport details ...
0x4ef32f28: /usr/lib/openoffice.org2.0/program/libuno_sal.so.3 + 0x22f28
0x4ef33bbb: /usr/lib/openoffice.org2.0/program/libuno_sal.so.3 + 0x23bbb
0x20d420:  + 0x420 (__kernel_sigreturn + 0x0)
0x42625578: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x689578
(SdrAttrObj::~SdrAttrObj() + 0x28)
0x426270dd: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x68b0dd
(SdrTextObj::~SdrTextObj() + 0x7d)
0x4263579a: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x69979a
(SdrRectObj::~SdrRectObj() + 0x4a)
0x427048fd: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x7688fd
(SdrObjList::Clear() + 0xad)
0x42705167: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x769167
(SdrObjList::~SdrObjList() + 0x37)
0x42705688: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x769688
(SdrPage::~SdrPage() + 0x1a8)
0x42761f48: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x7c5f48
(FmFormPage::~FmFormPage() + 0x58)
0x4327ff66: /usr/lib/openoffice.org2.0/program/libsd680li.so + 0x23ff66
(SdPage::~SdPage() + 0x136)
0x426f0427: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x754427
(SdrModel::DeletePage(unsigned short) + 0x27)
0x43263ded: /usr/lib/openoffice.org2.0/program/libsd680li.so + 0x223ded
0x426f1e72: /usr/lib/openoffice.org2.0/program/libsvx680li.so + 0x755e72
(SdrModel::ClearModel(unsigned char) + 0x52)
0x4326098f: /usr/lib/openoffice.org2.0/program/libsd680li.so + 0x22098f
0x4322ebaf: /usr/lib/openoffice.org2.0/program/libsd680li.so + 0x1eebaf
(sd::DrawDocShell::~DrawDocShell() + 0xff)
0x4f4cf598: /usr/lib/openoffice.org2.0/program/libtl680li.so + 0x6f598
(SvRefBase::QueryDelete() + 0x18)
0x4edb9513: /usr/lib/openoffice.org2.0/program/libsot680li.so + 0x12513
(SotObject::QueryDelete() + 0x33)
0x41c6799e: /usr/lib/openoffice.org2.0/program/libsfx680li.so + 0x24c99e
0x41c7860f: /usr/lib/openoffice.org2.0/program/libsfx680li.so + 0x25d60f
(SfxTopViewFrame::~SfxTopViewFrame() + 0x4f)
0x41c77b51: /usr/lib/openoffice.org2.0/program/libsfx680li.so + 0x25cb51
(SfxTopViewFrame::Close() + 0x61)
0x41c55b0d: /usr/lib/openoffice.org2.0/program/libsfx680li.so + 0x23ab0d
0x41c81f17: /usr/lib/openoffice.org2.0/program/libsfx680li.so + 0x266f17
(SfxBaseController::dispose() + 0x487)
0x432f4de7: /usr/lib/openoffice.org2.0/program/libsd680li.so + 0x2b4de7
0x42c45274: /usr/lib/openoffice.org2.0/program/libfwk680li.so + 0x72274
0x42c4478f: /usr/lib/openoffice.org2.0/program/libfwk680li.so + 0x7178f
0x42c1a7e0: /usr/lib/openoffice.org2.0/program/libfwk680li.so + 0x477e0
0x42c7c317: /usr/lib/openoffice.org2.0/program/libfwk680li.so + 0xa9317
0x42c7cf08: /usr/lib/openoffice.org2.0/program/libfwk680li.so + 0xa9f08
0x42c7d344: /usr/lib/openoffice.org2.0/program/libfwk680li.so + 0xaa344
0x4fa582d5: /usr/lib/openoffice.org2.0/program/libvcl680li.so + 0x2e42d5
0x4f9f5de6: /usr/lib/openoffice.org2.0/program/libvcl680li.so + 0x281de6
0x9fd381: /usr/lib/openoffice.org2.0/program/libvclplug_gen680li.so + 0x50381
(SalDisplay::DispatchInternalEvent() + 0xb1)
0xe7ed06: /usr/lib/openoffice.org2.0/program/libvclplug_gtk680li.so + 0xfd06
0xe7ed41: /usr/lib/openoffice.org2.0/program/libvclplug_gtk680li.so + 0xfd41
0x4e50f6e1: /lib/libglib-2.0.so.0 + 0x296e1
0x4e511442: /lib/libglib-2.0.so.0 + 0x2b442 (g_main_context_dispatch + 0x182)
0x4e51441f: /lib/libglib-2.0.so.0 + 0x2e41f
0x4e514985: /lib/libglib-2.0.so.0 + 0x2e985 (g_main_context_iteration + 0x65)
0xe80c31: /usr/lib/openoffice.org2.0/program/libvclplug_gtk680li.so + 0x11c31
0x9fe8a7: /usr/lib/openoffice.org2.0/program/libvclplug_gen680li.so + 0x518a7
(X11SalInstance::Yield(bool, bool) + 0x37)
0x4f809618: /usr/lib/openoffice.org2.0/program/libvcl680li.so + 0x95618
(Application::Yield(bool) + 0x68)
0x4f8096ec: /usr/lib/openoffice.org2.0/program/libvcl680li.so + 0x956ec
(Application::Execute() + 0x3c)
0x42f65359: /usr/lib/openoffice.org2.0/program/libsoffice.so + 0x26359
(desktop::Desktop::Main() + 0x1779)
0x4f80f1bc: /usr/lib/openoffice.org2.0/program/libvcl680li.so + 0x9b1bc
0x4f80f2c5: /usr/lib/openoffice.org2.0/program/libvcl680li.so + 0x9b2c5
(SVMain() + 0x35)
0x42f56a69: /usr/lib/openoffice.org2.0/program/libsoffice.so + 0x17a69 (sal_main
+ 0x59)
0x42f56af4: /usr/lib/openoffice.org2.0/program/libsoffice.so + 0x17af4 (main + 0x44)
0x4e115f2c: /lib/libc.so.6 + 0x15f2c (__libc_start_main + 0xdc)
0x80484a1: /usr/lib/openoffice.org2.0/program/simpress.bin + 0x4a1
...end stackreport details ...
...start sample ldd details ...
        linux-gate.so.1 =>  (0x00fc6000)
        libuno_sal.so.3 => /usr/lib/openoffice.org2.0/program/libuno_sal.so.3
(0x00559000)
        libuno_salhelpergcc3.so.3 =>
/usr/lib/openoffice.org2.0/program/libuno_salhelpergcc3.so.3 (0x002f9000)
        libstore.so.3 => /usr/lib/openoffice.org2.0/program/libstore.so.3
(0x00242000)
        libdl.so.2 => /lib/libdl.so.2 (0x00319000)
        libpthread.so.0 => /lib/libpthread.so.0 (0x007fe000)
        libstlport_gcc.so =>
/usr/lib/openoffice.org2.0/program/libstlport_gcc.so (0x00110000)
        libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0x00b5e000)
        libm.so.6 => /lib/libm.so.6 (0x00dc0000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x009a8000)
        libc.so.6 => /lib/libc.so.6 (0x003bb000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x001d7000)
        /lib/ld-linux.so.2 (0x4d731000)
...end sample ldd details ...
---end copy and paste here---

Comment 1 Caolan McNamara 2007-03-12 08:34:07 UTC
Does this happen every time you close any presentation, or just with one
particular one (if so then attach the offender), or is it not reproducible ?

Comment 2 John Poelstra 2007-03-12 17:25:35 UTC
Created attachment 149847 [details]
document that sometimes crashes on close

Comment 3 John Poelstra 2007-03-12 17:27:59 UTC
it has happened more than once.  i've tried to intentionally recreate the crash
and I am unable to.

Comment 4 Caolan McNamara 2007-03-12 17:48:25 UTC
Do you think any of the following scenarios are the most likely...

crashed after I exited when I had been...
a) just displaying the presentation full screen, I didn't make any changes to
the presentation
b) had been editing the presentation in the "normal" tab and was in that tab
when I exited
c) had been editing the presentation in the "outline" tab and was in that tab
when I exited
d) had been doing a mixture of editing and viewing

It's not crashing for me, but I can see from the trace that it's due to deleting
a SdrTextObj which (unfortunately) is just the editable area of a drawing
object, and so there's loads of them in this document, but it might also be one
in e.g. the "undo" list if one was deleted. So I'm trying to determine if this
might be due to some editing scenario. 


Comment 5 Jan Navratil 2007-03-12 17:53:54 UTC
I managed to reproduce it. The attached file crashed on exit every time for me.
I open a document and then close the application. No editing, no viewing .... 
 

Comment 6 John Poelstra 2007-03-12 17:54:49 UTC
I was mostly viewing... ocassionally flipping to full screen, but mostly paging
through the slides (using page-up and page-down keys) in "normal" view,
occassionally copying and pasting the exercises to a text editor as I worked
through the slides to learn TaskJuggler.  I think there were a few times where I
unintentionally changed a slide or deleted text.

Comment 7 A S Alam 2007-03-22 05:34:15 UTC
cloning for rawhide (Devel)

Comment 8 Caolan McNamara 2007-04-05 11:21:43 UTC
digg around a bit I see that
http://qa.openoffice.org/issues/show_bug.cgi?id=65879 is the same stacktrace,
except under windows. And that one is apparently semi-reproducible. Possible
that this is somehow related to shutting down impress while a textbox is active
after some properties have been modified. 

But I still can't reproduce this myself, valgrind only shows...

==17271== Source and destination overlap in memcpy(0x6885004, 0x6885004, 16)
==17271==    at 0x40240B6: memcpy (mc_replace_strmem.c:116)
==17271==    by 0x5408DC2: SfxFrame::SetToolSpaceBorderPixel_Impl(SvBorder
const&) (frame.cxx:1352)
==17271==    by 0x540BF3F: SfxFrame::Resize() (frame.cxx:1555)
==17271==    by 0x5420F12: SfxTopWindow_Impl::DoResize() (topfrm.cxx:352)
==17271==    by 0x542127F: SfxTopWindow_Impl::StateChanged(unsigned short)
(topfrm.cxx:340)
==17271==    by 0x4FB0015: Window::ImplCallInitShow() (window.cxx:1638)
==17271==    by 0x4FB007B: Window::ImplCallInitShow() (window.cxx:1653)
==17271==    by 0x4FB007B: Window::ImplCallInitShow() (window.cxx:1653)
==17271==    by 0x4FB007B: Window::ImplCallInitShow() (window.cxx:1653)
==17271==    by 0x4FC04BF: Window::Show(unsigned char, unsigned short)
(window.cxx:6426)
==17271==    by 0x4FC05AB: Window::Show(unsigned char, unsigned short)
(window.cxx:6454)
==17271==    by 0x4B1E65D: VCLXWindow::setVisible(unsigned char)
(vclxwindow.cxx:1328)

a fix for which I've upstreamed as
http://www.openoffice.org/issues/show_bug.cgi?id=76123

Comment 9 Caolan McNamara 2007-04-05 11:24:06 UTC
Closing->Upstream for http://www.openoffice.org/issues/show_bug.cgi?id=65879

If either a way for us to reproduce this shows up, or upstream figures out a fix
I'll fold it back to out versions.


Note You need to log in before you can comment on or make changes to this bug.