Crash with SdrObjList nullptr

[errors.ubuntu.com bug bridge]

The Ubuntu Error Tracker has been receiving reports about a problem regarding libreoffice. This problem was most recently seen with version 1:5.1.2-0ubuntu1, the problem page at https://errors.ubuntu.com/problem/e02992bc9c1ba9d94da5a2607c2b5905755bc789 contains more details.

[nawfal (nawfal-redhat-bugs)]

Version-Release number of selected component:
libreoffice-core-5.0.4.2-3.fc23

Additional info:
reporter: libreport-2.6.3
backtrace_rating: 4
cmdline: /usr/lib64/libreoffice/program/soffice.bin --impress --splash-pipe=5
crash_function: SdrObjList::GetObjCount
executable: /usr/lib64/libreoffice/program/soffice.bin
global_pid: 31863
kernel: 4.3.3-301.fc23.x86_64
runlevel: N 5
type: CCpp
uid: 1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 SdrObjList::GetObjCount at /usr/src/debug/libreoffice-5.0.4.2/svx/source/svdraw/svdpage.cxx:679
 #1 SdrEditView::ImpCheckToTopBtmPossible at /usr/src/debug/libreoffice-5.0.4.2/svx/source/svdraw/svdedtv2.cxx:487
 #2 SdrEditView::CheckPossibilities at /usr/src/debug/libreoffice-5.0.4.2/svx/source/svdraw/svdedtv.cxx:637
 #3 E3dView::CheckPossibilities at /usr/src/debug/libreoffice-5.0.4.2/svx/source/engine3d/view3d.cxx:1617
 #4 sd::View::CheckPossibilities at /usr/src/debug/libreoffice-5.0.4.2/sd/source/ui/view/sdview.cxx:1197
 #5 SdrEditView::ForcePossibilities at /usr/src/debug/libreoffice-5.0.4.2/include/svx/svdedtv.hxx:169
 #6 SdrEditView::IsConvertToPathObjPossible at /usr/src/debug/libreoffice-5.0.4.2/include/svx/svdedtv.hxx:354
 #7 sd::DrawViewShell::GetMenuState at /usr/src/debug/libreoffice-5.0.4.2/sd/source/ui/view/drviews7.cxx:268
 #8 SfxShell::CallState at /usr/src/debug/libreoffice-5.0.4.2/include/sfx2/shell.hxx:212
 #9 SfxShell::CanExecuteSlot_Impl at /usr/src/debug/libreoffice-5.0.4.2/sfx2/source/control/shell.cxx:405

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117568
File: backtrace

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117569
File: cgroup

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117570
File: core_backtrace

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117571
File: dso_list

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117572
File: environ

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117573
File: exploitable

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117574
File: limits

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117575
File: maps

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117576
File: mountinfo

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117577
File: namespaces

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117578
File: open_fds

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117579
File: proc_pid_status

[nawfal (nawfal-redhat-bugs)]

Created attachment 1117580
File: var_log_messages

[Caolan (caolan-redhat-bugs)]

any idea what you selected when this crash ?

[nawfal (nawfal-redhat-bugs)]

Sorry can't remember!!

[Caolan (caolan-redhat-bugs)]

I committed a plausible workaround upstream

[nawfal (nawfal-redhat-bugs)]

Means that you have an idea about the cause ? I didn't read the logs yet !!!

[Martin Pitt (pitti)]

Hello errors.ubuntu.com, or anyone else affected,

Accepted libreoffice into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/libreoffice/1:5.1.3-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Björn Michaelsen (bjoern-michaelsen)]

Hard to reproduce, no known reports of this one on 5.1.3 => setting this to verification-done.

[Launchpad Janitor (janitor)]

This bug was fixed in the package libreoffice - 1:5.1.3-0ubuntu1

---------------
libreoffice (1:5.1.3-0ubuntu1) xenial; urgency=medium

  * new upstream bugfix release
  * fix crash with nullptr SdrObjList (LP: #1569500)
  * fix crash with ScCsvGrid living beyond VCL shutdown (LP: #1566050)
  * fix crash with non-empty BlendFrameCache in late VCL shutdown (LP: #1560328)

 -- Bjoern Michaelsen <email address hidden> Thu, 12 May 2016 11:35:38 +0200

[Brian Murray (brian-murray)]

The verification of the Stable Release Update for libreoffice has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Launchpad Janitor (janitor)]

This bug was fixed in the package libreoffice - 1:5.1.3-0ubuntu4

---------------
libreoffice (1:5.1.3-0ubuntu4) yakkety; urgency=medium

  * use internal copy of mdds and orcus on yakkety for 5.1 series now

 -- Bjoern Michaelsen <email address hidden> Tue, 24 May 2016 14:25:58 +0200