OpenOffice.org writer crashes systematically on a given Word file

[U. B.]

Run on the file attached, OpenOffice.org (1:2.4.1-11ubuntu2.1) crashes every single time, after a few seconds.
To trigger the bug use the Page Down all the way down to the end of the document.

Stack:
Fatal exception: Signal 11
Stack:
/usr/lib/openoffice/program/libuno_sal.so.3[0x7fef32f5810a]
/usr/lib/openoffice/program/libuno_sal.so.3[0x7fef32f5824e]
/usr/lib/openoffice/program/libuno_sal.so.3[0x7fef32f5831d]
/lib/libpthread.so.0[0x7fef316ce0f0]
/usr/lib/openoffice/program/libucpdav1.so[0x7fef1e4036c8]
/usr/lib/openoffice/program/libucpdav1.so[0x7fef1e3e83eb]
/usr/lib/openoffice/program/libucpdav1.so[0x7fef1e3ef1fb]
/usr/lib/openoffice/program/libucbhelper4gcc3.so[0x7fef33a36c4b]
/usr/lib/openoffice/program/libucbhelper4gcc3.so(_ZN9ucbhelper7Content19openWriteableStreamEv+0x23d)[0x7fef33a3b7ad]
/usr/lib/openoffice/program/libcomphelp4gcc3.so[0x7fef33d355c3]
/usr/lib/openoffice/program/libcomphelp4gcc3.so(_ZN10comphelper15MediaDescriptor14addInputStreamEv+0x23e)[0x7fef33d37d9e]
/usr/lib/openoffice/program/libsw680lx.so[0x7fef20cf496a]
/usr/lib/openoffice/program/libsw680lx.so[0x7fef20cf7e9a]
/usr/lib/openoffice/program/libuno_sal.so.3[0x7fef32f507b0]
/lib/libpthread.so.0[0x7fef316c63ea]
/lib/libc.so.6(clone+0x6d)[0x7fef30c95c6d]

gdb hardly gives more info:
Program received signal SIGSEGV, Segmentation fault.
---Type <return> to continue, or q <return> to quit---
[Switching to Thread 0x45f94950 (LWP 714)]
0x00007f401e6a3410 in rtl_uString_acquire () from /usr/lib/openoffice/program/libuno_sal.so.3
(gdb) bt
#0 0x00007f401e6a3410 in rtl_uString_acquire () from /usr/lib/openoffice/program/libuno_sal.so.3
#1 0x00007f4008aea346 in ?? () from /usr/lib/openoffice/program/libucpdav1.so
#2 0x00007f4008ae6762 in ?? () from /usr/lib/openoffice/program/libucpdav1.so
#3 0x00007f4008acb3eb in ?? () from /usr/lib/openoffice/program/libucpdav1.so
#4 0x00007f4008ad21fb in ?? () from /usr/lib/openoffice/program/libucpdav1.so
#5 0x00007f401f171c4b in ?? () from /usr/lib/openoffice/program/libucbhelper4gcc3.so
#6 0x00007f401f1767ad in ucbhelper::Content::openWriteableStream () from /usr/lib/openoffice/program/libucbhelper4gcc3.so
#7 0x00007f401f4705c3 in ?? () from /usr/lib/openoffice/program/libcomphelp4gcc3.so
#8 0x00007f401f472d9e in comphelper::MediaDescriptor::addInputStream () from /usr/lib/openoffice/program/libcomphelp4gcc3.so
#9 0x00007f40096a996a in ?? () from /usr/lib/openoffice/program/libsw680lx.so
#10 0x00007f40096ace9a in ?? () from /usr/lib/openoffice/program/libsw680lx.so
#11 0x00007f401e68b7b0 in ?? () from /usr/lib/openoffice/program/libuno_sal.so.3
#12 0x00007f401ce013ea in start_thread () from /lib/libpthread.so.0
#13 0x00007f401c3d0c6d in clone () from /lib/libc.so.6
#14 0x0000000000000000 in ?? ()

[David D Lowe (flimm)]

I can confirm this bug for the same OpenOffice.org version and on Intrepid.

[Connor Imes (ckimes)]

Thank you for reporting this bug, I am able to reproduce it as well. Since I believe there is enough information here, I will mark the bug as triaged so a developer can begin work.

connor@compy686:~$ apt-cache policy openoffice.org-core
openoffice.org-core:
  Installed: 1:2.4.1-1ubuntu2.1
  Candidate: 1:2.4.1-1ubuntu2.1
  Version table:
 *** 1:2.4.1-1ubuntu2.1 0
        500 http://ubuntu.media.mit.edu hardy-updates/main Packages
        500 http://security.ubuntu.com hardy-security/main Packages
        100 /var/lib/dpkg/status
     1:2.4.0-3ubuntu6 0
        500 http://ubuntu.media.mit.edu hardy/main Packages

connor@compy686:~$ uname -a
Linux compy686 2.6.24-20-generic #1 SMP Mon Jul 28 13:49:52 UTC 2008 i686 GNU/Linux

connor@compy686:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 8.04.1
Release: 8.04
Codename: hardy

[Chris Cheney (ccheney)]

This appears to be corrected in openoffice.org 3.0.0-6ubuntu1 which will be built in jaunty before alpha3.