Bug 41275 - FILEOPEN writer crashes with SIGFPE when opening doc file
Summary: FILEOPEN writer crashes with SIGFPE when opening doc file
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
3.3.2 release
Hardware: x86 (IA32) Linux (All)
: medium critical
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-09-27 14:50 UTC by Hendrik Lönngren
Modified: 2012-09-06 06:54 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hendrik Lönngren 2011-09-27 14:50:48 UTC
On an Ubuntu 11.04 live system, trying to open a certain doc file makes LibreOffice crash while importing. Unfortunately, I cannot provide steps to reproduce since I cannot publish the file. By the way, opening the file with Wordpad on Windows XP also fails.

The problem seems to lie in the function SetDocumentGrid of libmswordli.so, as reported by gdb:

Program received signal SIGFPE, Arithmetic exception.
0x061c9dc6 in SetDocumentGrid ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
(gdb) bt
#0 0x061c9dc6 in SetDocumentGrid ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#1 0x0617f8ea in SetSegmentToPageDesc ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#2 0x0618ab4d in SetSwFmtPageDesc ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#3 0x0618b0d4 in InsertSegments ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#4 0x0618cef7 in CoreLoad ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#5 0x0618e8ee in LoadThroughDecryption ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#6 0x0618f41e in LoadDoc ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#7 0x0618f55e in Read ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#8 0x047d700c in Read ()
   from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
#9 0x048bf7ef in ConvertFrom ()
   from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
...

At first glance, I see only one line in the function in ww8par6.cxx that might cause an arithmetic exception, namely line 311:

    aGrid.SetLines(writer_cast<sal_uInt16>(nTextareaHeight/nLinePitch));

Might nLinePitch being 0 be the problem?

Downstream bug report is here: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/860650
Comment 1 Björn Michaelsen 2011-12-23 12:37:23 UTC
[This is an automated message.]
This bug was filed before the changes to Bugzilla on 2011-10-16. Thus it
started right out as NEW without ever being explicitly confirmed. The bug is
changed to state NEEDINFO for this reason. To move this bug from NEEDINFO back
to NEW please check if the bug still persists with the 3.5.0 beta1 or beta2 prereleases.
Details on how to test the 3.5.0 beta1 can be found at:
http://wiki.documentfoundation.org/QA/BugHunting_Session_3.5.0.-1

more detail on this bulk operation: http://nabble.documentfoundation.org/RFC-Operation-Spamzilla-tp3607474p3607474.html
Comment 2 sasha.libreoffice 2012-02-16 06:06:58 UTC
Still reproducible in 3.5.0 version?
Comment 3 Florian Reisinger 2012-08-14 14:03:22 UTC
Dear bug submitter!

Due to the fact, that there are a lot of NEEDINFO bugs with no answer within the last six months, we close all of these bugs.

To keep this message short, more infos are available @ https://wiki.documentfoundation.org/QA/NeedinfoClosure#Statement

Thanks for understanding and hopefully updating your bug, so that everything is prepared for developers to fix your problem.

Yours!

Florian
Comment 4 Florian Reisinger 2012-08-14 14:04:17 UTC
Dear bug submitter!

Due to the fact, that there are a lot of NEEDINFO bugs with no answer within the last six months, we close all of these bugs.

To keep this message short, more infos are available @ https://wiki.documentfoundation.org/QA/NeedinfoClosure#Statement

Thanks for understanding and hopefully updating your bug, so that everything is prepared for developers to fix your problem.

Yours!

Florian
Comment 5 Florian Reisinger 2012-08-14 14:08:49 UTC
Dear bug submitter!

Due to the fact, that there are a lot of NEEDINFO bugs with no answer within the last six months, we close all of these bugs.

To keep this message short, more infos are available @ https://wiki.documentfoundation.org/QA/NeedinfoClosure#Statement

Thanks for understanding and hopefully updating your bug, so that everything is prepared for developers to fix your problem.

Yours!

Florian
Comment 6 Florian Reisinger 2012-08-14 14:10:51 UTC
Dear bug submitter!

Due to the fact, that there are a lot of NEEDINFO bugs with no answer within the last six months, we close all of these bugs.

To keep this message short, more infos are available @ https://wiki.documentfoundation.org/QA/NeedinfoClosure#Statement

Thanks for understanding and hopefully updating your bug, so that everything is prepared for developers to fix your problem.

Yours!

Florian
Comment 7 Hendrik Lönngren 2012-09-05 11:59:26 UTC
Not reproducible in LibreOffice 3.5.2.2, so I assume it is fixed.
Comment 8 sasha.libreoffice 2012-09-06 06:54:01 UTC
Thanks for additional testing
Due to last comment, changing status to WorksForMe

If problem will appear again, please, change status to Reopened