Bug 603955 – [abrt] crash in sd::DrawViewShell::GetStatusBarState

Bug 603955 - [abrt] crash in sd::DrawViewShell::GetStatusBarState

Summary:	[abrt] crash in sd::DrawViewShell::GetStatusBarState

Status:	CLOSED INSUFFICIENT_DATA

Aliases:	None

Product:	Fedora
Classification:	Fedora
Component:	openoffice.org (Show other bugs)
Sub Component:
Version:	13
Hardware:	x86_64 Linux

Priority	low Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Caolan McNamara
QA Contact:	Fedora Extras Quality Assurance
Docs Contact:

URL:
Whiteboard:	abrt_hash:db6d8a92d91f9dec0273e8a3c92...
Keywords:

Duplicates:	660508 (view as bug list)
Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2010-06-14 20:41 EDT by tjyuviaej
Modified:	2011-03-08 15:34 EST (History)
CC List:	3 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2010-06-21 11:00:51 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
File: backtrace (99.51 KB, text/plain) 2010-06-14 20:41 EDT, tjyuviaej	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description tjyuviaej 2010-06-14 20:41:04 EDT

abrt 1.1.1 detected a crash.

architecture: x86_64
Attached file: backtrace
cmdline: /usr/lib64/openoffice.org3/program/simpress.bin -impress
component: openoffice.org
crash_function: operator-=
executable: /usr/lib64/openoffice.org3/program/simpress.bin
global_uuid: db6d8a92d91f9dec0273e8a3c92e20e3ff26f470
kernel: 2.6.33.5-112.fc13.x86_64
package: openoffice.org-impress-1:3.2.0-12.24.fc13
rating: 4
reason: Process /usr/lib64/openoffice.org3/program/simpress.bin was killed by signal 11 (SIGSEGV)
release: Fedora release 13 (Goddard)

How to reproduce
-----
1. Run ooimpress
2. Edit 8.4MB file for a while
3. Crash

Comment 1 tjyuviaej 2010-06-14 20:41:06 EDT

Created attachment 424003 [details]
File: backtrace

Comment 2 David Tardon 2010-06-15 02:32:50 EDT

I see one use of uninitialized value in StatusBar under valgrind that might be related to this, but I doubt it somehow... Can you reproduce the crash? What were you doing when it happened?

Comment 3 tjyuviaej 2010-06-15 22:32:52 EDT

I'm not clear how to reproduce.  But I found a heavy disk access before crash.

I don't remember the RES and SHR in top command. However VIRT is about 2.8GB.
My Fedora box has 3081MB memory and 5117MB swap.

When the crash occurred, I edit a 8.5MB odp file for about one or two hour with firefox, thunderbird and GNOME desktop.

Comment 4 Caolan McNamara 2010-06-18 12:07:55 EDT

Do you still have the .odp, maybe there's some embedded format or something inside it that does something interesting on save with the status bar.

----

sd/source/ui/view/drviewsa.cxx does have...

if( SFX_ITEM_AVAILABLE == rSet.GetItemState( SID_ATTR_ZOOMSLIDER ) )
{
   ...
   SdrPageView* pPageView = mpDrawView->GetSdrPageView();
   if( pPageView )
   {
       ...
   }
}
...
Point aPos = GetActiveWindow()->PixelToLogic(maMousePos);
mpDrawView->GetSdrPageView()->LogicToPagePos(aPos);

which begs the question of why bother checking for non-NULL pPageView if its definitely going to dereference it afterwards anyway,

Comment 5 Takanori MATSUURA 2010-06-20 22:07:35 EDT

I still have the .odp file.

I don't think I want to put the file here but I can send you directly. If you want to investigate this bug with my .odp file, please let me know.

Comment 6 Takanori MATSUURA 2010-06-20 22:15:47 EDT

Please ignore my comment #5.

Comment 7 tjyuviaej 2010-06-20 22:16:54 EDT

I still have the .odp file.

I don't think I want to put the file here but I can send you directly. If you
want to investigate this bug with my .odp file, please let me know.

Comment 8 Caolan McNamara 2010-06-21 06:18:07 EDT

Sure, send it on to me, it's worth a shot

Comment 9 Caolan McNamara 2010-06-21 11:00:51 EDT

I got the .odp, played around with it a bit and did some load/save under valgrind, but nothing jumped out at me as a source for this :-(

Comment 10 Caolan McNamara 2011-03-08 15:34:21 EST

*** Bug 660508 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.