48738 – Segfault during opening a file

Bug 48738 - Segfault during opening a file

Summary: Segfault during opening a file

Status:	RESOLVED INVALID

Alias:	None

Product:	LibreOffice
Classification:	Unclassified
Component:	Writer (show other bugs)
Version: (earliest affected)	3.5.1 release
Hardware:	x86-64 (AMD64) Linux (All)

Importance:	medium normal
Assignee:	Not Assigned

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2012-04-15 11:39 UTC by boday
Modified:	2012-10-20 20:57 UTC (History)
CC List:	2 users (show)

See Also:
Crash report or crash signature:

Attachments
The file that caused the error (25.18 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document) 2012-04-15 11:39 UTC, boday	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description boday 2012-04-15 11:39:25 UTC

Created attachment 60024 [details]
The file that caused the error

I have a *.docx file created in MS Office 2010 (attached). During opening the file a segfault occurs. Expected action: opening a file.

System: ArchLinux
Linux myhost 3.3.2-1-ck #1 SMP PREEMPT Fri Apr 13 15:00:51 EDT 2012 x86_64 Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz GenuineIntel GNU/Linux

LibreOffice 3.5.1.2 
Build ID: 350m1(Build:102)

LibreOffice has been installed from ArchLinux extra repository.

gdb.log below
===========================================================================
GNU gdb (GDB) 7.4
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-unknown-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/lib/libreoffice/program/soffice.bin...(no debugging symbols found)...done.
[?1034h(gdb) run
Starting program: /usr/lib/libreoffice/program/soffice.bin 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/libthread_db.so.1".
[New Thread 0x7fffed817700 (LWP 5046)]
[New Thread 0x7fffe5941700 (LWP 5047)]
[New Thread 0x7fffe5140700 (LWP 5048)]
[New Thread 0x7fffde370700 (LWP 5049)]
[New Thread 0x7fffd2649700 (LWP 5050)]
[New Thread 0x7fffcbb7f700 (LWP 5053)]
[Thread 0x7fffcbb7f700 (LWP 5053) exited]
[Thread 0x7fffe5941700 (LWP 5047) exited]
[New Thread 0x7fffe5941700 (LWP 5056)]
[New Thread 0x7fffcbb7f700 (LWP 5057)]
[New Thread 0x7fffc9591700 (LWP 5058)]
[New Thread 0x7fffc8d90700 (LWP 5059)]
[Thread 0x7fffc9591700 (LWP 5058) exited]
[Thread 0x7fffc8d90700 (LWP 5059) exited]
[Thread 0x7fffcbb7f700 (LWP 5057) exited]
[New Thread 0x7fffcbb7f700 (LWP 5061)]

Program received signal SIGSEGV, Segmentation fault.
0x00007fffb7ac7fe1 in ?? ()
   from /usr/lib/libreoffice/program/../program/libooxmllo.so
(gdb) backtrace
#0  0x00007fffb7ac7fe1 in ?? ()
   from /usr/lib/libreoffice/program/../program/libooxmllo.so
#1  0x00007fffba8338fc in ?? ()
   from /usr/lib/libreoffice/program/../program/fastsax.uno.so
#2  0x00007fffee00fa34 in ?? () from /usr/lib/libexpat.so.1
#3  0x00007fffee010c91 in ?? () from /usr/lib/libexpat.so.1
#4  0x00007fffee00db07 in ?? () from /usr/lib/libexpat.so.1
#5  0x00007fffee00f4bb in ?? () from /usr/lib/libexpat.so.1
#6  0x00007fffee012a9d in XML_ParseBuffer () from /usr/lib/libexpat.so.1
#7  0x00007fffba832879 in ?? ()
   from /usr/lib/libreoffice/program/../program/fastsax.uno.so
#8  0x00007fffba836a47 in ?? ()
   from /usr/lib/libreoffice/program/../program/fastsax.uno.so
#9  0x00007fffb7ab7f45 in ?? ()
   from /usr/lib/libreoffice/program/../program/libooxmllo.so
#10 0x00007fffb80e0788 in WriterFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/../program/libwriterfilterlo.so
#11 0x00007ffff5949f29 in SfxObjectShell::ImportFrom(SfxMedium&, bool) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#12 0x00007ffff5942492 in SfxObjectShell::DoLoad(SfxMedium*) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#13 0x00007ffff597b379 in SfxBaseModel::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#14 0x00007ffff59bfc8b in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#15 0x00007fffdf8a0d12 in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#16 0x00007fffdf8a2408 in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#17 0x00007fffdf8376eb in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#18 0x00007fffdf837c88 in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#19 0x00007ffff66c5f4e in comphelper::SynchronousDispatch::dispatch(com::sun::star::uno::Reference<com::sun::star::uno::XInterface> const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/libcomphelpgcc3.so
#20 0x00007ffff57a5158 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#21 0x00007ffff581f9f0 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#22 0x00007ffff5821c9b in SfxDispatcher::Execute(unsigned short, unsigned short, unsigned short, SfxItemSet const&) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#23 0x00007ffff57a620c in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#24 0x00007ffff581f9f0 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#25 0x00007ffff5821684 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#26 0x00007ffff59a67ba in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#27 0x00007ffff3c2f568 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#28 0x00007ffff3c3895e in SalGenericDisplay::DispatchInternalEvent() ()
   from /usr/lib/libreoffice/program/libvcllo.so
#29 0x00007fffeafd2b02 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#30 0x00007fffeafd2b89 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#31 0x00007fffe97258bd in g_main_context_dispatch ()
   from /usr/lib/libglib-2.0.so.0
#32 0x00007fffe97260b8 in ?? () from /usr/lib/libglib-2.0.so.0
#33 0x00007fffe9726289 in g_main_context_iteration ()
   from /usr/lib/libglib-2.0.so.0
#34 0x00007fffeafd2869 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#35 0x00007fffeafd373d in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#36 0x00007ffff39c9381 in Application::Yield(bool) ()
   from /usr/lib/libreoffice/program/libvcllo.so
#37 0x00007ffff39c9437 in Application::Execute() ()
   from /usr/lib/libreoffice/program/libvcllo.so
#38 0x00007ffff792e09d in ?? ()
   from /usr/lib/libreoffice/program/libsofficeapp.so
#39 0x00007ffff39cff61 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#40 0x00007ffff39d0005 in SVMain() ()
   from /usr/lib/libreoffice/program/libvcllo.so
#41 0x00007ffff7955195 in soffice_main ()
   from /usr/lib/libreoffice/program/libsofficeapp.so
#42 0x00000000004005fb in ?? ()
#43 0x00007ffff7592455 in __libc_start_main () from /lib/libc.so.6
#44 0x0000000000400631 in ?? ()
#45 0x00007fffffffe748 in ?? ()
#46 0x0000000000000000 in ?? ()
(gdb) thread apply all bt

Thread 12 (Thread 0x7fffcbb7f700 (LWP 5061)):
#0  0x00007ffff715cc61 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/libpthread.so.0
#1  0x00007ffff7b8e9cc in osl_waitCondition ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#2  0x00007fffeb24e724 in ?? ()
   from /usr/lib/libreoffice/program/../program/configmgr.uno.so
#3  0x00007fffeb252e6a in ?? ()
   from /usr/lib/libreoffice/program/../program/configmgr.uno.so
#4  0x00007ffff7b9174c in ?? ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#5  0x00007ffff7158e0e in start_thread () from /lib/libpthread.so.0
#6  0x00007ffff76551ed in clone () from /lib/libc.so.6

Thread 8 (Thread 0x7fffe5941700 (LWP 5056)):
#0  0x00007ffff715cc61 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/libpthread.so.0
#1  0x00007fffe99d8475 in ?? () from /usr/lib/libgthread-2.0.so.0
#2  0x00007fffe96fa4df in ?? () from /usr/lib/libglib-2.0.so.0
#3  0x00007fffe974d6e1 in ?? () from /usr/lib/libglib-2.0.so.0
#4  0x00007fffe974b186 in ?? () from /usr/lib/libglib-2.0.so.0
#5  0x00007ffff7158e0e in start_thread () from /lib/libpthread.so.0
#6  0x00007ffff76551ed in clone () from /lib/libc.so.6

Thread 6 (Thread 0x7fffd2649700 (LWP 5050)):
#0  0x00007ffff764d06f in poll () from /lib/libc.so.6
#1  0x00007fffe94826e8 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_genlo.so
#2  0x00007ffff7b9174c in ?? ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#3  0x00007ffff7158e0e in start_thread () from /lib/libpthread.so.0
#4  0x00007ffff76551ed in clone () from /lib/libc.so.6

Thread 5 (Thread 0x7fffde370700 (LWP 5049)):
#0  0x00007ffff764d06f in poll () from /lib/libc.so.6
#1  0x00007fffe949c3b1 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_genlo.so
#2  0x00007fffe949c596 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_genlo.so
#3  0x00007ffff7b9174c in ?? ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#4  0x00007ffff7158e0e in start_thread () from /lib/libpthread.so.0
#5  0x00007ffff76551ed in clone () from /lib/libc.so.6

Thread 4 (Thread 0x7fffe5140700 (LWP 5048)):
#0  0x00007ffff7655eed in accept () from /lib/libc.so.6
#1  0x00007ffff7b98a5f in osl_acceptPipe ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#2  0x00007ffff7951df2 in ?? ()
   from /usr/lib/libreoffice/program/libsofficeapp.so
#3  0x00007ffff795467a in ?? ()
   from /usr/lib/libreoffice/program/libsofficeapp.so
#4  0x00007ffff7b9174c in ?? ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#5  0x00007ffff7158e0e in start_thread () from /lib/libpthread.so.0
#6  0x00007ffff76551ed in clone () from /lib/libc.so.6

Thread 2 (Thread 0x7fffed817700 (LWP 5046)):
#0  0x00007ffff715cc61 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/libpthread.so.0
#1  0x00007ffff7bb71ff in ?? ()
   from /usr/lib/libreoffice/program/../ure-link/lib/libuno_sal.so.3
#2  0x00007ffff7158e0e in start_thread () from /lib/libpthread.so.0
#3  0x00007ffff76551ed in clone () from /lib/libc.so.6

Thread 1 (Thread 0x7ffff7fb98c0 (LWP 5043)):
#0  0x00007fffb7ac7fe1 in ?? ()
   from /usr/lib/libreoffice/program/../program/libooxmllo.so
#1  0x00007fffba8338fc in ?? ()
   from /usr/lib/libreoffice/program/../program/fastsax.uno.so
#2  0x00007fffee00fa34 in ?? () from /usr/lib/libexpat.so.1
#3  0x00007fffee010c91 in ?? () from /usr/lib/libexpat.so.1
#4  0x00007fffee00db07 in ?? () from /usr/lib/libexpat.so.1
#5  0x00007fffee00f4bb in ?? () from /usr/lib/libexpat.so.1
#6  0x00007fffee012a9d in XML_ParseBuffer () from /usr/lib/libexpat.so.1
#7  0x00007fffba832879 in ?? ()
   from /usr/lib/libreoffice/program/../program/fastsax.uno.so
#8  0x00007fffba836a47 in ?? ()
   from /usr/lib/libreoffice/program/../program/fastsax.uno.so
#9  0x00007fffb7ab7f45 in ?? ()
   from /usr/lib/libreoffice/program/../program/libooxmllo.so
#10 0x00007fffb80e0788 in WriterFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/../program/libwriterfilterlo.so
#11 0x00007ffff5949f29 in SfxObjectShell::ImportFrom(SfxMedium&, bool) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#12 0x00007ffff5942492 in SfxObjectShell::DoLoad(SfxMedium*) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#13 0x00007ffff597b379 in SfxBaseModel::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#14 0x00007ffff59bfc8b in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#15 0x00007fffdf8a0d12 in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#16 0x00007fffdf8a2408 in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#17 0x00007fffdf8376eb in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#18 0x00007fffdf837c88 in ?? ()
   from /usr/lib/libreoffice/program/../program/libfwklo.so
#19 0x00007ffff66c5f4e in comphelper::SynchronousDispatch::dispatch(com::sun::star::uno::Reference<com::sun::star::uno::XInterface> const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/libcomphelpgcc3.so
#20 0x00007ffff57a5158 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#21 0x00007ffff581f9f0 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#22 0x00007ffff5821c9b in SfxDispatcher::Execute(unsigned short, unsigned short, unsigned short, SfxItemSet const&) ()
   from /usr/lib/libreoffice/program/libsfxlo.so
#23 0x00007ffff57a620c in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#24 0x00007ffff581f9f0 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#25 0x00007ffff5821684 in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#26 0x00007ffff59a67ba in ?? () from /usr/lib/libreoffice/program/libsfxlo.so
#27 0x00007ffff3c2f568 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#28 0x00007ffff3c3895e in SalGenericDisplay::DispatchInternalEvent() ()
   from /usr/lib/libreoffice/program/libvcllo.so
#29 0x00007fffeafd2b02 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#30 0x00007fffeafd2b89 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#31 0x00007fffe97258bd in g_main_context_dispatch ()
   from /usr/lib/libglib-2.0.so.0
#32 0x00007fffe97260b8 in ?? () from /usr/lib/libglib-2.0.so.0
#33 0x00007fffe9726289 in g_main_context_iteration ()
   from /usr/lib/libglib-2.0.so.0
#34 0x00007fffeafd2869 in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#35 0x00007fffeafd373d in ?? ()
   from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#36 0x00007ffff39c9381 in Application::Yield(bool) ()
   from /usr/lib/libreoffice/program/libvcllo.so
#37 0x00007ffff39c9437 in Application::Execute() ()
   from /usr/lib/libreoffice/program/libvcllo.so
#38 0x00007ffff792e09d in ?? ()
   from /usr/lib/libreoffice/program/libsofficeapp.so
#39 0x00007ffff39cff61 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#40 0x00007ffff39d0005 in SVMain() ()
   from /usr/lib/libreoffice/program/libvcllo.so
#41 0x00007ffff7955195 in soffice_main ()
   from /usr/lib/libreoffice/program/libsofficeapp.so
#42 0x00000000004005fb in ?? ()
#43 0x00007ffff7592455 in __libc_start_main () from /lib/libc.so.6
#44 0x0000000000400631 in ?? ()
#45 0x00007fffffffe748 in ?? ()
#46 0x0000000000000000 in ?? ()
(gdb) quit
A debugging session is active.

	Inferior 1 [process 5043] will be killed.

Quit anyway? (y or n)

Comment 1 Jean-Baptiste Faure 2012-04-15 12:07:33 UTC

I do not reproduce the crash under Ubuntu 11.10 x86_64 with FR langpack with:
- LO 3.5.2, but math formulas that are not pictures are missing
- LO 3.5.3 rc0+ (LibreOffice 3.5.3rc0+ Version ID : 51c8c95-a73d29c-6845e52-f269e46-31eca31), math formulas are there
- master (version 3.6.0alpha0+  (Build ID: 3074bc8))

I suggest you to upgrade to the current release and to try the first release candidate for LO 3.5.3 which will be available soon (http://www.libreoffice.org/download/pre-releases/)

Best regards. JBF

Comment 2 Julien Nabet 2012-04-17 14:54:30 UTC

On Pc debian x86-64, I didn't reproduce the problem with 3.5 branch.

Could you try with 3.5.2 (and with a brand new profile if possible) ?

Comment 3 Michael Meeks 2012-06-07 07:54:53 UTC

It'd be really useful to get a trace with debuginfo as well - sadly this trace is not particularly useful as-is :-)

Comment 4 Julien Nabet 2012-10-20 20:57:38 UTC

Since there has been no feedback for months, I'll put to RESOLVED/INVALID.

boday: if you reproduce the problem with a newer LO version (3.5.6 or 3.6.2) and after having renamed your LO profile, don't hesitate to reopen this tracker.