Bug 2496621 - [abrt] libreoffice-core: SfxItemPool::cleanupItemInfos(): soffice.bin killed by SIGSEGV
Summary: [abrt] libreoffice-core: SfxItemPool::cleanupItemInfos(): soffice.bin killed ...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: libreoffice
Version: 44
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: libreoffice-sig
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:c541c9455f2efd7beb262473aff...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-02 16:50 UTC by Joshua
Modified: 2026-07-27 13:40 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)
File: os_info (712 bytes, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: proc_pid_status (1.49 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: open_fds (3.50 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: environ (3.21 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: maps (147.77 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: exploitable (81 bytes, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: backtrace (107.50 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: core_backtrace (43.31 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: dso_list (12.63 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: cpuinfo (3.58 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: mountinfo (3.05 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: var_log_messages (227 bytes, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details
File: limits (1.29 KB, text/plain)
2026-07-02 16:50 UTC, Joshua
no flags Details

Description Joshua 2026-07-02 16:50:25 UTC
Description of problem:
Simply closed Writer and said "No" when prompted to save the document.

Version-Release number of selected component:
libreoffice-core-1:26.2.4.2-4.fc44

Additional info:
reporter:       libreport-2.17.15
crash_function: SfxItemPool::cleanupItemInfos
backtrace_rating: 4
runlevel:       /bin/sh: line 1: runlevel: command not found
rootdir:        /
journald_cursor: s=3b4272de1da944d5bf7306dd1a29007c;i=5493249;b=98218b26006545a98bace0c7fc85d4a6;m=210d75512;t=655a34c4b0aa5;x=71006b514ab1caa7
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-libreoffice\x2dwriter
type:           CCpp
uid:            1000
comment:        Simply closed Writer and said "No" when prompted to save the document.
package:        libreoffice-core-1:26.2.4.2-4.fc44
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer --splash-pipe=5
kernel:         7.0.12-201.fc44.x86_64
executable:     /usr/lib64/libreoffice/program/soffice.bin
reason:         soffice.bin killed by SIGSEGV

Truncated backtrace:
Thread no. 1 (23 frames)
 #0 SfxItemPool::cleanupItemInfos at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/svl/source/items/itempool.cxx:344
 #1 SfxItemPool::~SfxItemPool at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/svl/source/items/itempool.cxx:564
 #2 SwAttrPool::~SwAttrPool at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/sw/source/core/attr/swatrset.cxx:88
 #3 rtl::Reference<SwAttrPool>::clear at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/include/rtl/ref.hxx:193
 #4 SwDoc::~SwDoc at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/sw/source/core/doc/docnew.cxx:627
 #5 SwDoc::release at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/sw/source/core/doc/doc.cxx:137
 #7 o3tl::default_delete<SwDocFac>::operator() at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/include/o3tl/deleter.hxx:46
 #9 std::__uniq_ptr_impl<SwDocFac, o3tl::default_delete<SwDocFac> >::reset at /usr/include/c++/16/bits/unique_ptr.h:204
 #10 std::unique_ptr<SwDocFac, o3tl::default_delete<SwDocFac> >::reset at /usr/include/c++/16/bits/unique_ptr.h:530
 #11 SwTransferable::~SwTransferable at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/sw/source/uibase/dochdl/swdtflvr.cxx:296
 #13 com::sun::star::uno::Reference<com::sun::star::datatransfer::XTransferable>::~Reference at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/include/com/sun/star/uno/Reference.hxx:114
 #14 QtMimeData::~QtMimeData at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/vcl/inc/qt6/../qt5/QtTransferable.hxx:115
 #16 QtWaylandClient::QWaylandClipboard::~QWaylandClipboard at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/plugins/platforms/wayland/qwaylandclipboard.cpp:31
 #18 QScopedPointerDeleter<QPlatformClipboard>::cleanup at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/corelib/tools/qscopedpointer.h:17
 #19 QScopedPointer<QPlatformClipboard, QScopedPointerDeleter<QPlatformClipboard> >::~QScopedPointer at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/corelib/tools/qscopedpointer.h:82
 #20 QtWaylandClient::QWaylandIntegration::~QWaylandIntegration at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/plugins/platforms/wayland/qwaylandintegration.cpp:108
 #22 QGuiApplicationPrivate::~QGuiApplicationPrivate at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/gui/kernel/qguiapplication.cpp:1861
 #23 QApplicationPrivate::~QApplicationPrivate at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/widgets/kernel/qapplication.cpp:149
 #24 QApplication::~QApplication at /usr/src/debug/qt6-qtbase-6.11.1-1.fc44.x86_64/src/widgets/kernel/qapplication.cpp:722
 #25 std::default_delete<QApplication>::operator() at /usr/include/c++/16/bits/unique_ptr.h:86
 #26 std::__uniq_ptr_impl<QApplication, std::default_delete<QApplication> >::reset at /usr/include/c++/16/bits/unique_ptr.h:204
 #27 std::unique_ptr<QApplication, std::default_delete<QApplication> >::reset at /usr/include/c++/16/bits/unique_ptr.h:530
 #28 QtInstance::~QtInstance at /usr/src/debug/libreoffice-26.2.4.2-4.fc44.x86_64/vcl/qt6/../qt5/QtInstance.cxx:328

Comment 1 Joshua 2026-07-02 16:50:29 UTC
Created attachment 2147466 [details]
File: os_info

Comment 2 Joshua 2026-07-02 16:50:31 UTC
Created attachment 2147467 [details]
File: proc_pid_status

Comment 3 Joshua 2026-07-02 16:50:32 UTC
Created attachment 2147468 [details]
File: open_fds

Comment 4 Joshua 2026-07-02 16:50:34 UTC
Created attachment 2147469 [details]
File: environ

Comment 5 Joshua 2026-07-02 16:50:37 UTC
Created attachment 2147470 [details]
File: maps

Comment 6 Joshua 2026-07-02 16:50:38 UTC
Created attachment 2147471 [details]
File: exploitable

Comment 7 Joshua 2026-07-02 16:50:40 UTC
Created attachment 2147472 [details]
File: backtrace

Comment 8 Joshua 2026-07-02 16:50:43 UTC
Created attachment 2147473 [details]
File: core_backtrace

Comment 9 Joshua 2026-07-02 16:50:44 UTC
Created attachment 2147474 [details]
File: dso_list

Comment 10 Joshua 2026-07-02 16:50:46 UTC
Created attachment 2147475 [details]
File: cpuinfo

Comment 11 Joshua 2026-07-02 16:50:47 UTC
Created attachment 2147476 [details]
File: mountinfo

Comment 12 Joshua 2026-07-02 16:50:49 UTC
Created attachment 2147477 [details]
File: var_log_messages

Comment 13 Joshua 2026-07-02 16:50:50 UTC
Created attachment 2147478 [details]
File: limits

Comment 14 Joshua 2026-07-27 13:40:50 UTC
Simply closed Writer and said "No" when prompted to save the document.


reporter:       libreport-2.17.15
crash_function: SfxItemPool::cleanupItemInfos
backtrace_rating: 4
runlevel:       /bin/sh: line 1: runlevel: command not found
rootdir:        /
journald_cursor: s=3b4272de1da944d5bf7306dd1a29007c;i=5493249;b=98218b26006545a98bace0c7fc85d4a6;m=210d75512;t=655a34c4b0aa5;x=71006b514ab1caa7
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-libreoffice\x2dwriter
type:           CCpp
uid:            1000
comment:        Simply closed Writer and said "No" when prompted to save the document.
package:        libreoffice-core-1:26.2.4.2-4.fc44
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --writer --splash-pipe=5
kernel:         7.0.12-201.fc44.x86_64
executable:     /usr/lib64/libreoffice/program/soffice.bin
reason:         soffice.bin killed by SIGSEGV


Note You need to log in before you can comment on or make changes to this bug.