1) lsb_release -rd Description: Ubuntu precise (development branch) Release: 12.04 2) apt-cache policy libreoffice-writer libreoffice-writer: Installed: 1:3.5.0-1ubuntu4 Candidate: 1:3.5.0-1ubuntu4 Version table: *** 1:3.5.0-1ubuntu4 0 500 http://us.archive.ubuntu.com/ubuntu/ precise/main i386 Packages 100 /var/lib/dpkg/status [Comment: Build-ID: 350m1(Build:13)] 3) What is expected to happen in a blank Writer document with View -> Toolbars -> Drawing checked is click Text icon, and create a Text box in the top right of the page (beteen the header and the body) and it does not crash. 4) What happens is it crashes consistently. A video of this may be found at: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/941033/+attachment/2788200/+files/libreoffice-crash.ogv ProblemType: Crash DistroRelease: Ubuntu 12.04 Package: libreoffice-core 1:3.5.0-1ubuntu4 ProcVersionSignature: Ubuntu 3.2.0-17.27-generic 3.2.6 Uname: Linux 3.2.0-17-generic i686 ApportVersion: 1.93-0ubuntu2 Architecture: i386 CrashCounter: 1 Date: Sat Feb 25 14:38:00 2012 EcryptfsInUse: Yes ExecutablePath: /usr/lib/libreoffice/program/soffice.bin ExecutableTimestamp: 1330135917 InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1) LocalLibraries: /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/libdle.so.1 /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/libsx.so /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/dudenkorrektor.uno.so /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/libdpf.so.2 ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --writer /home/thomas/Schule/0_Mathe/M6/6.3_Flaechen-_und_Rauminhalt/6.3.2_Volumen/Arbeitsblaetter/AB_Einheitenvergleich.odt --splash-pipe=6 ProcCwd: /home/thomas SegvAnalysis: Segfault happened at: 0x1dae324 <_ZNK6Window9GetCursorEv+4>: mov 0xf4(%eax),%eax PC (0x01dae324) ok source "0xf4(%eax)" (0x408500f4) not located in a known VMA region (needed readable region)! destination "%eax" ok SegvReason: reading unknown VMA Signal: 11 SourcePackage: libreoffice StacktraceTop: Window::GetCursor() const () from /usr/lib/libreoffice/program/libvcllo.so ?? () from /usr/lib/libreoffice/program/../program/libsvxcorelo.so Timer::Timeout() () from /usr/lib/libreoffice/program/libvcllo.so Timer::ImplTimerCallbackProc() () from /usr/lib/libreoffice/program/libvcllo.so ?? () from /usr/lib/libreoffice/program/libvclplug_gtklo.so Title: soffice.bin crashed with SIGSEGV in Window::GetCursor() UpgradeStatus: Upgraded to precise on 2012-02-23 (2 days ago) UserGroups: adm admin audio cdrom dialout dip fax floppy fuse lp lpadmin netdev plugdev powerdev sambashare tape vboxusers video
Also see: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/941033/
Created attachment 58205 [details] [review] Possible fix Hi! This seems to solve it, or maybe it's just less frequent... Anyway, it is a step closer to the final solution. made changes in svx/source/sdr/overlay/overlaymanagerbuffered.cxx in IMPL_LINK(OverlayManagerBuffered, ImpBufferTimerHandler, AutoTimer*, /*pTimer*/) Szabolcs
Created attachment 58243 [details] valgrind log adding a valgrind log to show that the this of the handler is deleted before the end of the method
Caolan McNamara committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=131e5d35a4edb9f8875a197e8e0382c168834f70 Resolves: fdo#46728 reference count the overlay managers
Caolan McNamara committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=badbf0c9259a6ff3928958332532c5a9ed8c5774 Related: fdo#46728 it would help to initialize the reference count I suppose
I love you, guys! :)
Caolan McNamara committed a patch related to this issue. It has been pushed to "libreoffice-3-5": http://cgit.freedesktop.org/libreoffice/core/commit/?id=849fc81ababc87ccc2a13091d3eed33b9151a845&g=libreoffice-3-5 Resolves: fdo#46728 reference count the overlay managers It will be available in LibreOffice 3.5.2.
Caolan McNamara committed a patch related to this issue. It has been pushed to "libreoffice-3-5": http://cgit.freedesktop.org/libreoffice/core/commit/?id=a270cc4547c813ace05792d114998ee1199c30ff&g=libreoffice-3-5 Related: fdo#46728 it would help to initialize the reference count I suppose It will be available in LibreOffice 3.5.2.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.