crash in SwXTextDocument::getRendererCount

[Björn Michaelsen]

on LibreOffice 3.5, see rhbz#890080 for details

[David (david-redhat-bugs)]

Version-Release number of selected component:
libreoffice-core-3.5.7.2-7.fc17

Additional info:
libreport version: 2.0.18
abrt_version: 2.0.18
backtrace_rating: 3
cmdline: /usr/lib64/libreoffice/program/soffice.bin --writer --splash-pipe=6
crash_function: os::die
kernel: 3.6.10-2.fc17.x86_64

truncated backtrace:
:Thread no. 1 (10 frames)
: #2 os::die at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os/linux/vm/os_linux.cpp:1597
: #3 VMError::report_and_die at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/utilities/vmError.cpp:1022
: #4 crash_handler at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os/linux/vm/vmError_linux.cpp:106
: #6 ??
: #7 os::abort at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os/linux/vm/os_linux.cpp:1578
: #8 VMError::report_and_die at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/share/vm/utilities/vmError.cpp:1018
: #9 JVM_handle_linux_signal at /usr/src/debug/java-1.7.0-openjdk/openjdk/hotspot/src/os_cpu/linux_x86/vm/os_linux_x86.cpp:528
: #11 SwView::RecheckBrowseMode at /usr/src/debug/libreoffice-3.5.7.2/solver/unxlngx6.pro/inc/svl/eitem.hxx:51
: #12 SwXTextDocument::getRendererCount at /usr/src/debug/libreoffice-3.5.7.2/sw/source/ui/uno/unotxdoc.cxx:2564
: #13 SfxPrinterController::getPageCount at /usr/src/debug/libreoffice-3.5.7.2/sfx2/source/view/viewprn.cxx:241

Potential duplicate bug: 706076

[David (david-redhat-bugs)]

Created attachment 668642
File: core_backtrace

[David (david-redhat-bugs)]

Created attachment 668643
File: environ

[David (david-redhat-bugs)]

Created attachment 668644
File: backtrace

[David (david-redhat-bugs)]

Created attachment 668645
File: limits

[David (david-redhat-bugs)]

Created attachment 668646
File: smolt_data

[David (david-redhat-bugs)]

Created attachment 668647
File: cgroup

[David (david-redhat-bugs)]

Created attachment 668648
File: executable

[David (david-redhat-bugs)]

Created attachment 668649
File: maps

[David (david-redhat-bugs)]

Created attachment 668650
File: dso_list

[David (david-redhat-bugs)]

Created attachment 668651
File: proc_pid_status

[David (david-redhat-bugs)]

Created attachment 668652
File: open_fds

[David (david-redhat-bugs)]

Created attachment 668653
File: var_log_messages

[Michael (michael-redhat-bugs)]

crash because pSwView is 0 in "pSwView->RecheckBrowseMode();"

apparently this pSwView was introduced in OOo 3.4 in commit 2f9f480b22f2fff59d9c48b4b46706c3d5223e66
so it's likely this crash is a regression.

pSwView is checked for 0 in every use except the one the one that
causes this crash here, so i'll assume it's a simple oversight.

fixed upstream master in commit 1c52268a5bc6d79c6ee1344e4e341c7e3820d4e0
and backported to 4.0 branch and proposed for 3.6 branch;
added to f17 package, should be in next update for that.

[Björn Michaelsen (bjoern-michaelsen)]

http://anonscm.debian.org/gitweb/?p=pkg-openoffice/libreoffice.git;a=commit;h=560eb17d49039eb57f8c1f56a729a43174b59892

[Fedora (fedora-redhat-bugs)]

libreoffice-3.5.7.2-8.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/libreoffice-3.5.7.2-8.fc17

[Fedora (fedora-redhat-bugs)]

Package libreoffice-3.5.7.2-8.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing libreoffice-3.5.7.2-8.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-1280/libreoffice-3.5.7.2-8.fc17
then log in and leave karma (feedback).

[Fedora (fedora-redhat-bugs)]

libreoffice-3.5.7.2-9.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/libreoffice-3.5.7.2-9.fc17

[Björn Michaelsen (bjoern-michaelsen)]

lp#1097782: released on Fedora 17 and upstream, one-line change adding a check for a NULL pointer (most possibly a regression against 3.3 too), crasher, thus dataloss

[Fedora (fedora-redhat-bugs)]

libreoffice-3.5.7.2-9.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.