desktop-packages team mailing list archive

Thread
Date
[Bug 1418551] Re: soffice.bin crashed with SIGSEGV in Application::GetSolarMutex()

To: desktop-packages@xxxxxxxxxxxxxxxxxxx
From: Bug Watch Updater <1418551@xxxxxxxxxxxxxxxxxx>
Date: Tue, 12 May 2015 14:19:40 -0000
Reply-to: Bug 1418551 <1418551@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Launchpad has imported 6 comments from the remote bug at
https://bugs.documentfoundation.org/show_bug.cgi?id=90969.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2015-04-30T14:38:03+00:00 Björn Michaelsen wrote:

regression vs. 4.3: crash on close from BASIC -- stacktrace downstream
at https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551/comments/8

------------------------------------------------------------------------
On 2015-04-30T14:39:57+00:00 Björn Michaelsen wrote:

StractraceTop:
#0  0x00007fe8106f7e7a in Application::GetSolarMutex () at /build/buildd/libreoffice-4.4.0~rc2/vcl/source/app/svapp.cxx:409
No locals.
#1  0x00007fe812acd81c in SolarMutexGuard (this=<synthetic pointer>) at /build/buildd/libreoffice-4.4.0~rc2/include/vcl/svapp.hxx:1567
No locals.
#2  DocBasicItem::~DocBasicItem (this=0x7fe7d83d1610, __in_chrg=<optimized out>) at /build/buildd/libreoffice-4.4.0~rc2/basic/source/classes/sb.cxx:112
No locals.
#3  0x00007fe812acd949 in DocBasicItem::~DocBasicItem (this=0x7fe7d83d1610, __in_chrg=<optimized out>) at /build/buildd/libreoffice-4.4.0~rc2/basic/source/classes/sb.cxx:116
No locals.
#4  0x00007fe812ad1835 in release (this=<optimized out>) at /build/buildd/libreoffice-4.4.0~rc2/include/cppuhelper/implbase1.hxx:109
No locals.
#5  ~Reference (this=0x7fe7d83d4c78, __in_chrg=<optimized out>) at /build/buildd/libreoffice-4.4.0~rc2/include/rtl/ref.hxx:75
No locals.
#6  ~pair (this=0x7fe7d83d4c70, __in_chrg=<optimized out>) at /usr/include/c++/4.9/bits/stl_pair.h:96
No locals.
#7  destroy<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > (this=<optimized out>, __p=0x7fe7d83d4c70) at /usr/include/c++/4.9/ext/new_allocator.h:124
No locals.
#8  destroy<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > (a=..., p=0x7fe7d83d4c70) at /usr/include/boost/unordered/detail/allocate.hpp:591
No locals.
#9  destroy_value_impl<std::allocator<boost::unordered::detail::ptr_node<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >, std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > (alloc=..., x=0x7fe7d83d4c70) at /usr/include/boost/unordered/detail/allocate.hpp:788
No locals.
#10 delete_node (this=<optimized out>, prev=0x7fe7d81ade10) at /usr/include/boost/unordered/detail/table.hpp:519
        n = 0x7fe7d83d4c70
#11 delete_nodes (end=0x0, prev=0x7fe7d81ade10, this=0x7fe812e09020 <rtl::Static<boost::unordered::unordered_map<StarBASIC const*, rtl::Reference<DocBasicItem>, boost::hash<StarBASIC const*>, std::equal_to<StarBASIC const*>, std::allocator<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >, (anonymous namespace)::GaDocBasicItems>::get()::instance>) at /usr/include/boost/unordered/detail/table.hpp:534
        count = <optimized out>
#12 delete_buckets (this=0x7fe812e09020 <rtl::Static<boost::unordered::unordered_map<StarBASIC const*, rtl::Reference<DocBasicItem>, boost::hash<StarBASIC const*>, std::equal_to<StarBASIC const*>, std::allocator<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >, (anonymous namespace)::GaDocBasicItems>::get()::instance>) at /usr/include/boost/unordered/detail/table.hpp:544
No locals.
#13 ~table (this=0x7fe812e09020 <rtl::Static<boost::unordered::unordered_map<StarBASIC const*, rtl::Reference<DocBasicItem>, boost::hash<StarBASIC const*>, std::equal_to<StarBASIC const*>, std::allocator<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >, (anonymous namespace)::GaDocBasicItems>::get()::instance>, __in_chrg=<optimized out>) at /usr/include/boost/unordered/detail/table.hpp:511
No locals.
#14 ~table_impl (this=0x7fe812e09020 <rtl::Static<boost::unordered::unordered_map<StarBASIC const*, rtl::Reference<DocBasicItem>, boost::hash<StarBASIC const*>, std::equal_to<StarBASIC const*>, std::allocator<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >, (anonymous namespace)::GaDocBasicItems>::get()::instance>, __in_chrg=<optimized out>) at /usr/include/boost/unordered/detail/unique.hpp:170
No locals.
#15 boost::unordered::unordered_map<StarBASIC const*, rtl::Reference<DocBasicItem>, boost::hash<StarBASIC const*>, std::equal_to<StarBASIC const*>, std::allocator<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >::~unordered_map (this=0x7fe812e09020 <rtl::Static<boost::unordered::unordered_map<StarBASIC const*, rtl::Reference<DocBasicItem>, boost::hash<StarBASIC const*>, std::equal_to<StarBASIC const*>, std::allocator<std::pair<StarBASIC const* const, rtl::Reference<DocBasicItem> > > >, (anonymous namespace)::GaDocBasicItems>::get()::instance>, __in_chrg=<optimized out>) at /usr/include/boost/unordered/unordered_map.hpp:1064
No locals.
#16 0x00007fe8152856a9 in __run_exit_handlers (status=0, listp=0x7fe8156096c8 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true) at exit.c:82

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551/comments/9

------------------------------------------------------------------------
On 2015-04-30T14:57:04+00:00 Björn Michaelsen wrote:

This seems to be caused by a1fad26e045ff1fec0c63243e3516ef2da7f390d
"fdo#84935: basic: DocBasicItem is a UNO service, lock SolarMutex in
dtor"

The GaDocBasicItems is a rtl::Static<> and seems to thus live longer
than even the SolarMutex -- as the change above is trying to get a guard
for the mutex in dtor, that map has to be cleared before the SolarMutex
is gone.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551/comments/10

------------------------------------------------------------------------
On 2015-05-04T08:50:32+00:00 Fdbugs-a wrote:

A likely commit has been identified - marking as bisected

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551/comments/12

------------------------------------------------------------------------
On 2015-05-12T12:21:52+00:00 Libreoffice-commits wrote:

Michael Stahl committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=be88e305eeac88e51f83efc004d4b60b87f1e757

tdf#90969: basic: add horrible hack to avoid crash due to ...

It will be available in 5.0.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds
Affected users are encouraged to test the fix and report feedback.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551/comments/14

------------------------------------------------------------------------
On 2015-05-12T12:23:20+00:00 Mstahl wrote:

added a work-around for the BASIC global variable madness on master

Reply at:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1418551/comments/15


** Changed in: df-libreoffice
       Status: Unknown => Fix Released

** Changed in: df-libreoffice
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libreoffice in Ubuntu.
https://bugs.launchpad.net/bugs/1418551

Title:
  soffice.bin crashed with SIGSEGV in Application::GetSolarMutex()

Status in LibreOffice Productivity Suite:
  Fix Released
Status in libreoffice package in Ubuntu:
  Incomplete

Bug description:
  closed libreoffice calc
  a java update has been running while soffice.bin was in action...

  ProblemType: Crash
  DistroRelease: Ubuntu 15.04
  Package: libreoffice-core 1:4.4.0~rc2-0ubuntu3
  ProcVersionSignature: Ubuntu 3.18.0-11.12-generic 3.18.3
  Uname: Linux 3.18.0-11-generic x86_64
  ApportVersion: 2.15.1-0ubuntu4
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Thu Feb  5 14:20:32 2015
  ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
  ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --calc --splash-pipe=6
  SegvAnalysis:
   Segfault happened at: 0x7fe8106f7e7a <_ZN11Application13GetSolarMutexEv+10>:	mov    0x8(%rax),%rdi
   PC (0x7fe8106f7e7a) ok
   source "0x8(%rax)" (0x00000008) not located in a known VMA region (needed readable region)!
   destination "%rdi" ok
  SegvReason: reading NULL VMA
  Signal: 11
  SourcePackage: libreoffice
  StacktraceTop:
   Application::GetSolarMutex() () from /usr/lib/libreoffice/program/libvcllo.so
   ?? () from /usr/lib/libreoffice/program/libsblo.so
   ?? () from /usr/lib/libreoffice/program/libsblo.so
   ?? () from /usr/lib/libreoffice/program/libsblo.so
   __run_exit_handlers (status=0, listp=0x7fe8156096c8 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true) at exit.c:82
  Title: soffice.bin crashed with SIGSEGV in Application::GetSolarMutex()
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: admin bacula dialout fuse libvirtd pcscd plugdev sudo

To manage notifications about this bug go to:
https://bugs.launchpad.net/df-libreoffice/+bug/1418551/+subscriptions