← Back to team overview

desktop-packages team mailing list archive

  1. desktop-packages team
  2. Mailing list archive
  3. Message #118036

[Bug 1376326] Re: soffice.bin crashed with SIGSEGV in Tell()

  Thread Previous • Date Previous • • Thread Next 
Launchpad has imported 23 comments from the remote bug at
https://bugs.documentfoundation.org/show_bug.cgi?id=55665.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2012-10-05T13:35:42+00:00 Laurent Bonnaud wrote:

Problem description:

The attached ODT file cannot be saved as a RTF file.

Steps to reproduce:
1. Load the attached file in LibreOffice
2. Save it as RTF

Current behavior:

LibreOffice displays an error box with this message:
  Error saving the document
  Write Error.
  The file could not be written.

Expected behavior:

LibreOffice manages to save the file.

Platform (if different from the browser): 
              
Browser: Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/18.0 Firefox/18.0

This is with Version 3.6.2.2 (Build ID: da8c1e6)

PS: I could not select the correct version in the bug reporting Web
interface.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/1

------------------------------------------------------------------------
On 2012-10-05T13:50:29+00:00 Laurent Bonnaud wrote:

Created attachment 68118
File to reproduce the bug

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/3

------------------------------------------------------------------------
On 2012-10-09T05:21:46+00:00 Billhook wrote:

Confirmed on Windows Vista 32 bit on LO 3.6.2.2.

Furthermore, saving the same .odt file as a ".doc (97/XP/2003)" or as a
".doc (Word 95)" crashes LibreOffice completely.

I *could* save the attached .odt as .docx, .html and export as pdf.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/5

------------------------------------------------------------------------
On 2012-10-09T05:24:28+00:00 Billhook wrote:

@Laurent Did this work in previous versions of OpenOffice?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/7

------------------------------------------------------------------------
On 2012-10-09T05:32:13+00:00 Billhook wrote:

I wonder if this has anything to do with Bug 51262 - "big rtf file from
little odt file"

 * This document is quite big to start with (777 pages; 2,923,499 bytes)
 * It contains a lot of images, and that bug is apparently caused by images in the document.

Just speculation...

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/9

------------------------------------------------------------------------
On 2012-10-09T17:23:18+00:00 Laurent Bonnaud wrote:

I don't know if previous LO crashed or failed.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/11

------------------------------------------------------------------------
On 2012-10-09T17:51:24+00:00 Laurent Bonnaud wrote:

Saving this file to MS Word "DOC" format also crashes on Linux.

I tried with the LibreOffice binary provided in Ubuntu 12.10 and the
resulting debugging info can be found there:

  https://bugs.launchpad.net/df-libreoffice/+bug/1064560

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/13

------------------------------------------------------------------------
On 2012-10-09T18:11:48+00:00 Laurent Bonnaud wrote:

With the binary I downloaded from libreoffice.org there is no crash
information displayed.  The LO window just disappears.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/15

------------------------------------------------------------------------
On 2012-10-11T22:54:16+00:00 Mikekaganski wrote:

LO 3.6.1.2 under Win7Pro_x64:

Save as RTF -> Error saving the document
Save as DOC (97/XP/2003) -> Crash

but

Save as DOC (95) -> OK

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/17

------------------------------------------------------------------------
On 2012-10-11T23:17:40+00:00 Mikekaganski wrote:

Excuse me, the previous comment is partially incorrect.
If I open the file and immediately try to save as DOC (either 95 or 97+), LO crashes.

But if I open the file, then try to save as RTF, get the error message,
then try to save as DOC (either 95 or 97+), then the operation
succeedes.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/19

------------------------------------------------------------------------
On 2012-12-21T23:13:48+00:00 Lemoyne-castle wrote:

In Version 3.6.3.2 (Build ID: 58f22d5) on Ubuntu 10.04 was able to re-
create the RTF file save error but it did not crash when saved as .doc
(97-2003).

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/21

------------------------------------------------------------------------
On 2013-05-09T20:23:01+00:00 lengo wrote:

Running 4.0.2.2 and it crashes every time I try to save a file with
tables, pictures, different field types, footnotes, and comments, etc.,
to .rtf. I don't try to save to .rtf often, so I'm just noticing this
behaviour now. Saving to .pdf, .doc, .docx all work fine.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/23

------------------------------------------------------------------------
On 2013-09-12T11:12:40+00:00 Barta-c wrote:

I think it's "inherited from LibO" I was able to reproduce both RTF and
DOC crashes with multiple LibO release up to 3.3.3 (I don't have 3.3.0)
and the bug is present in AOO 4.0.0 too.

edited summary. changed version and component fields.
added expert devs to CC list

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/25

------------------------------------------------------------------------
On 2013-09-12T11:13:10+00:00 Barta-c wrote:

P.S. tested under Win7 64bit

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/27

------------------------------------------------------------------------
On 2013-09-14T01:10:07+00:00 Mikekaganski wrote:

The test document seems to be broken.

1. If I open the file using any version starting from 3.3.0.4 and up to
4.1.1.2 under Win7x64, it opens with first page empty. When I scroll it
down (so that I see some graphics on some pages), and then return to the
first page, there are "ghost" graphics in the top left corner of the
first page. They may be selected and moved, but if I scroll the document
down and up again, they disappear and other graphics appear.

2. The 4.1.2.1 opens the document (with empty first page), and then
crashes after a couple of seconds (looks like it continues to process
the document after initial display, and the crash happens on some stage
of this delayed processing). So, the problem is worse in 4.1.2.1.

Despite the document itself is broken, I think the bug should be fixed,
because the crash indicates some flaw in the code that doesn't expect
something wrong in the input data. Fixing it will make the software more
robust.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/29

------------------------------------------------------------------------
On 2014-07-18T18:27:46+00:00 Alexpikptz wrote:

I reproduce behavior described in comment 9 with LibreOffice 4.2.5 and
4.3.0.3 on Debian x86_64, but the file is saved as rtf with LibreOffice
4.3.0.3 without errors.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/31

------------------------------------------------------------------------
On 2014-10-01T16:07:24+00:00 Laurent Bonnaud wrote:

I tested again in Ubuntu 14.10 with LO 1:4.3.2-0ubuntu1:

 - saving as RTF works
 - saving as DOC crashes

I opened a new bug with updated information:

  https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/36

------------------------------------------------------------------------
On 2014-10-01T20:22:14+00:00 JBF wrote:

This odt file has been created by conversion from a .doc file. You can verify this point by checking the names of numbering styles, you will find style names like WW8Num1 which are WinWord8 style names.
If you open the Navigator to examine the objects of this document, you will see that there is 10 hidden tables. AFAIK LibreOffice does not have the ability to hide a table. 

I suggest 2 ways to try to fix the problem:
1/ unzip the .odt and remove the hidden tables from the content.xml and compress the file again.
2/ come back to the original .doc file with MS-Word, make sure that all objects included in the document are not hidden, save the file under another name in both formats doc and docx. Convert these new files to .odt using the current stable "Fresh' version of LibreOffice.


Best regards. JBF

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/43

------------------------------------------------------------------------
On 2014-10-02T08:36:41+00:00 Laurent Bonnaud wrote:

Thank you for the analysis of this crash!  I will update the bug
title...

Thanks again for the workaround!  However LO needs a fix anyway.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/45

------------------------------------------------------------------------
On 2014-10-02T09:55:15+00:00 JBF wrote:

(In reply to Laurent Bonnaud from comment #18)
> Thank you for the analysis of this crash!  I will update the bug title...
> 
> Thanks again for the workaround!  However LO needs a fix anyway.

It worked ? which one ? ;-)

Best regards. JBF

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/47

------------------------------------------------------------------------
On 2014-10-02T10:48:03+00:00 Laurent Bonnaud wrote:

> It worked ? which one ? ;-)

I did not even try because I do not care about this document (it is not
even mine).

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/49

------------------------------------------------------------------------
On 2015-05-07T14:21:09+00:00 Mikekaganski wrote:

Created attachment 115415
Minimal test case for bug 55665

(In reply to Jean-Baptiste Faure from comment #17)
> If you open the Navigator to examine the objects of this document, you will
> see that there is 10 hidden tables. AFAIK LibreOffice does not have the
> ability to hide a table.
These hidden tables are parts of custom page styles that are defined in the document, but not used. LO can easily create these. To get rid of the tables, simply remove all custom page styles, or aply each style and remove tables from its header/footer, or just remove headers/footers altogether.

Actually, the problem is not the tables. There is a bug processing one
of OLE objects in the file, namely Object 65. It is a formula on page
525 ((1) of C.11.2.1.3.1 SIGMOID descriptor). Removing it, the problem
disappears. Besides, scrolling so that it gets displayed on screen
removes the crash, too.

Here is the minimal test file that is enough to show the problem. It contains the following required items:
1. Some paragraphs to move OLE objects to second page (manual page break doesn't do the trick)
2. The problematic OLE itself
3. Another OLE just next to problematic one

Submitted patch to gerrit - https://gerrit.libreoffice.org/15667

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/51

------------------------------------------------------------------------
On 2015-05-07T15:53:57+00:00 Libreoffice-commits wrote:

Mike Kaganski committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=a612c2ee5f6e9c40f33e7aa1b8d79ffee5cb4c9b

tdf#55665: Fix a corner case OLE processing

It will be available in 5.0.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds
Affected users are encouraged to test the fix and report feedback.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1376326/comments/52


** Changed in: df-libreoffice
       Status: Unknown => Fix Released

** Changed in: df-libreoffice
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libreoffice in Ubuntu.
https://bugs.launchpad.net/bugs/1376326

Title:
  soffice.bin crashed with SIGSEGV in Tell()

Status in LibreOffice Productivity Suite:
  Fix Released
Status in libreoffice package in Ubuntu:
  Triaged

Bug description:
  LO crashed while saving the attached file as a MS Word DOC file.

  ProblemType: Crash
  DistroRelease: Ubuntu 14.10
  Package: libreoffice-core 1:4.3.2-0ubuntu1
  ProcVersionSignature: Ubuntu 3.16.0-18.25-generic 3.16.3
  Uname: Linux 3.16.0-18-generic x86_64
  ApportVersion: 2.14.7-0ubuntu2
  Architecture: amd64
  CurrentDesktop: KDE
  Date: Wed Oct  1 17:46:01 2014
  EcryptfsInUse: Yes
  ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
  ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --writer 11_03pu-reduced.odt --splash-pipe=5
  SegvAnalysis:
   Segfault happened at: 0x7f6dffd7120b <_ZN13GraphicFilter13ImportGraphicER7GraphicRKN3rtl8OUStringER8SvStreamtPtjPN3com3sun4star3uno8SequenceINSB_5beans13PropertyValueEEEP18WMF_EXTERNALHEADER+2107>:	movzwl 0x2c(%rbx),%eax
   PC (0x7f6dffd7120b) ok
   source "0x2c(%rbx)" (0x0000002c) not located in a known VMA region (needed readable region)!
   destination "%eax" ok
  SegvReason: reading NULL VMA
  Signal: 11
  SourcePackage: libreoffice
  StacktraceTop:
   GraphicFilter::ImportGraphic(Graphic&, rtl::OUString const&, SvStream&, unsigned short, unsigned short*, unsigned int, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>*, WMF_EXTERNALHEADER*) () from /usr/lib/libreoffice/program/libvcllo.so
   GraphicFilter::ImportGraphic(Graphic&, rtl::OUString const&, SvStream&, unsigned short, unsigned short*, unsigned int, WMF_EXTERNALHEADER*) () from /usr/lib/libreoffice/program/libvcllo.so
   ?? () from /usr/lib/libreoffice/program/../program/libmswordlo.so
   ?? () from /usr/lib/libreoffice/program/../program/libmswordlo.so
   ?? () from /usr/lib/libreoffice/program/../program/libmswordlo.so
  Title: soffice.bin crashed with SIGSEGV in GraphicFilter::ImportGraphic()
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: adm autopilot cdrom dip fuse libvirtd lpadmin plugdev sambashare staff sudo

To manage notifications about this bug go to:
https://bugs.launchpad.net/df-libreoffice/+bug/1376326/+subscriptions
  Thread Previous • Date Previous • • Thread Next