Bug 963616 - [abrt] libreoffice-core-3.6.6.2-5.fc18: ScHTMLLayoutParser::CloseEntry: Process /usr/lib64/libreoffice/program/soffice.bin was killed by signal 11 (SIGSEGV)
[abrt] libreoffice-core-3.6.6.2-5.fc18: ScHTMLLayoutParser::CloseEntry: Proce...
Status: CLOSED INSUFFICIENT_DATA
Product: Fedora
Classification: Fedora
Component: libreoffice (Show other bugs)
18
x86_64 Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Caolan McNamara
Fedora Extras Quality Assurance
abrt_hash:0a9217f8c819011d3a7152d673b...
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2013-05-16 05:04 EDT by vikram goyal
Modified: 2013-06-10 05:46 EDT (History)
6 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2013-06-10 05:46:31 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
File: backtrace (64.26 KB, text/plain)
2013-05-16 05:04 EDT, vikram goyal
no flags Details
File: cgroup (130 bytes, text/plain)
2013-05-16 05:04 EDT, vikram goyal
no flags Details
File: core_backtrace (6.58 KB, text/plain)
2013-05-16 05:04 EDT, vikram goyal
no flags Details
File: dso_list (25.19 KB, text/plain)
2013-05-16 05:05 EDT, vikram goyal
no flags Details
File: environ (2.30 KB, text/plain)
2013-05-16 05:05 EDT, vikram goyal
no flags Details
File: limits (1.29 KB, text/plain)
2013-05-16 05:05 EDT, vikram goyal
no flags Details
File: maps (120.75 KB, text/plain)
2013-05-16 05:05 EDT, vikram goyal
no flags Details
File: open_fds (852 bytes, text/plain)
2013-05-16 05:05 EDT, vikram goyal
no flags Details
File: proc_pid_status (941 bytes, text/plain)
2013-05-16 05:06 EDT, vikram goyal
no flags Details
File: var_log_messages (527 bytes, text/plain)
2013-05-16 05:06 EDT, vikram goyal
no flags Details

  None (edit)
Description vikram goyal 2013-05-16 05:04:29 EDT
Description of problem:
I pasted an alphanumeric string copying from a webpage by highlighting it, into a column in a spread sheet by clicking middle mouse button. As soon as I clicked the mouse pasting the text in the column oocalc crashed.

Normally there is a import dialog box whith a message "Select The Language To Use For Import" which I have to OK to continue pasting the string, but that did not appear. The app crashed just after clicking.

Thanks!


Version-Release number of selected component:
libreoffice-core-3.6.6.2-5.fc18

Additional info:
backtrace_rating: 4
cmdline:        /usr/lib64/libreoffice/program/soffice.bin --calc '/home/vikram/Desktop/attachments/email id-Sanay.xlsx' --splash-pipe=6
crash_function: ScHTMLLayoutParser::CloseEntry
executable:     /usr/lib64/libreoffice/program/soffice.bin
kernel:         3.8.11-200.fc18.x86_64
uid:            1000
ureports_counter: 1

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 ScHTMLLayoutParser::CloseEntry at /usr/src/debug/libreoffice-3.6.6.2/sc/source/filter/html/htmlpars.cxx:897
 #1 ScHTMLLayoutParser::NextRow at /usr/src/debug/libreoffice-3.6.6.2/sc/source/filter/html/htmlpars.cxx:383
 #2 TableRowOff at /usr/src/debug/libreoffice-3.6.6.2/sc/source/filter/html/htmlpars.cxx:1110
 #3 ScHTMLLayoutParser::ProcToken at /usr/src/debug/libreoffice-3.6.6.2/sc/source/filter/html/htmlpars.cxx:1684
 #4 ScHTMLLayoutParser::HTMLImportHdl at /usr/src/debug/libreoffice-3.6.6.2/sc/source/filter/html/htmlpars.cxx:940
 #5 EditHTMLParser::NextToken at /usr/src/debug/libreoffice-3.6.6.2/editeng/source/editeng/eehtml.cxx:524
 #6 HTMLParser::Continue at /usr/src/debug/libreoffice-3.6.6.2/svtools/source/svhtml/parhtml.cxx:349
 #7 HTMLParser::CallParser at /usr/src/debug/libreoffice-3.6.6.2/svtools/source/svhtml/parhtml.cxx:331
 #8 EditHTMLParser::CallParser at /usr/src/debug/libreoffice-3.6.6.2/editeng/source/editeng/eehtml.cxx:104
 #9 ImpEditEngine::ReadHTML at /usr/src/debug/libreoffice-3.6.6.2/editeng/source/editeng/impedit4.cxx:197
Comment 1 vikram goyal 2013-05-16 05:04:50 EDT
Created attachment 748672 [details]
File: backtrace
Comment 2 vikram goyal 2013-05-16 05:04:54 EDT
Created attachment 748673 [details]
File: cgroup
Comment 3 vikram goyal 2013-05-16 05:04:57 EDT
Created attachment 748674 [details]
File: core_backtrace
Comment 4 vikram goyal 2013-05-16 05:05:03 EDT
Created attachment 748675 [details]
File: dso_list
Comment 5 vikram goyal 2013-05-16 05:05:36 EDT
Created attachment 748676 [details]
File: environ
Comment 6 vikram goyal 2013-05-16 05:05:40 EDT
Created attachment 748677 [details]
File: limits
Comment 7 vikram goyal 2013-05-16 05:05:54 EDT
Created attachment 748678 [details]
File: maps
Comment 8 vikram goyal 2013-05-16 05:05:58 EDT
Created attachment 748679 [details]
File: open_fds
Comment 9 vikram goyal 2013-05-16 05:06:03 EDT
Created attachment 748680 [details]
File: proc_pid_status
Comment 10 vikram goyal 2013-05-16 05:06:06 EDT
Created attachment 748681 [details]
File: var_log_messages
Comment 11 Eike Rathke 2013-05-16 06:28:09 EDT
Is this reproducible with a specific content of a specific web page?
Comment 12 David Tardon 2013-05-16 06:31:04 EDT
Looks like we are calling back() on an empty vector. The question is if it can be empty or if the real problem is elsewhere. Is the crash easily reproducible? If yes, could you give us instructions how to do it? If not, I will just put in a check.
Comment 13 Eike Rathke 2013-05-16 06:48:24 EDT
The real problem must be elsewhere which I'd like to fix instead of blindly curing an alleged problem. The bTabInTabCell status in itself says that we still are in some cell and according to the implied logic maBack must have at least one entry. Finding why it doesn't would be good. If NewActEntry() is not called with maList.back() then there's no valid pActEntry, so we'd have to either keep that around instead of deleting it or create a new one, but then again results would be wrong.

Note You need to log in before you can comment on or make changes to this bug.