LibreOffice crashes trying to save a document as Microsoft Word

[Ben Klein]

When I tried to save a form created in Microsoft Word as a Word Document using LibreOffice Writer, it crashes. Nothing is produced in the /var/crash directory, and nothing is output to the terminal.

Operating system (via 'lsb_release -rd'):
Description: Ubuntu 11.04
Release: 11.04

package version (via 'apt-cache policy libreoffice'):
libreoffice:
  Installed: 1:3.3.2-1ubuntu5
  Candidate: 1:3.3.2-1ubuntu5
  Version table:
 *** 1:3.3.2-1ubuntu5 0
        500 http://us.archive.ubuntu.com/ubuntu/ natty-updates/universe i386 Packages
        100 /var/lib/dpkg/status
     1:3.3.2-1ubuntu4 0
        500 http://us.archive.ubuntu.com/ubuntu/ natty/universe i386 Packages

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: libreoffice-core 1:3.3.2-1ubuntu5
ProcVersionSignature: Ubuntu 2.6.38-10.46-generic 2.6.38.7
Uname: Linux 2.6.38-10-generic i686
NonfreeKernelModules: nvidia wl
Architecture: i386
Date: Wed Jul 27 21:18:57 2011
ProcEnviron:
 LANGUAGE=en_US:en
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: libreoffice
UpgradeStatus: Upgraded to natty on 2011-06-03 (54 days ago)

[Walter Garcia-Fontes (walter-garcia)]

Can you attach the document that causes this crash?

[Dan Rosenberg (dan-j-rosenberg)]

This bug affects me too. I'm unable to attach the document or Apport log for this crash since my document contains private data, but a stack trace can be found below. The bug is due to invoking rtl_str_getLength() on a NULL value.

Version is:
LibreOffice 3.3.2
OOO330m19 (Build:202)
tag libreoffice-3.3.2.2, Ubuntu package 1:3.3.2-1ubuntu5

Program received signal SIGSEGV, Segmentation fault.
0x00007ffc1dea3ec2 in rtl_str_getLength ()
   from /usr/lib/libreoffice/program/../basis-link/ure-link/lib/libuno_sal.so.3
(gdb) bt
#0 0x00007ffc1dea3ec2 in rtl_str_getLength ()
   from /usr/lib/libreoffice/program/../basis-link/ure-link/lib/libuno_sal.so.3
#1 0x00007ffbf72c69e9 in oox::drawingml::DrawingML::WriteImage(Graphic const&) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libooxlx.so
#2 0x00007ffbf4e8bc9c in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#3 0x00007ffbf4e8d130 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#4 0x00007ffbf4e9a2ce in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#5 0x00007ffbf4ea0372 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#6 0x00007ffbf4e60844 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#7 0x00007ffbf4e614f7 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#8 0x00007ffbf4e748c6 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#9 0x00007ffbf4e9513f in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#10 0x00007ffbf4e95235 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#11 0x00007ffbf4e79457 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#12 0x00007ffbf4e90bc0 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#13 0x00007ffbf70a9b64 in oox::core::FilterBase::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) () from /usr/lib/libreoffice/program/../basis-link/program/libooxlx.so
#14 0x00007ffbf7b3c7c0 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libwriterfilterlx.so
#15 0x00007ffc1bb5b3c8 in SfxObjectShell::ExportTo(SfxMedium&) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#16 0x00007ffc1bb6253f in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#17 0x00007ffc1bb67508 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#18 0x00007ffc1bb67abb in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#19 0x00007ffc1bbb6479 in SfxBaseModel::storeSelf(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#20 0x00007ffc1bbd017c in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#21 0x00007ffc1bb70e56 in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#22 0x00007ffc1bc5912c in ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#23 0x0000...

[indium (indium)]

I have:

original document is generated in Word.
I open the .doc file
After editing I save as .doc --> libreoffice crashes
I save as .odt
I open the .odt file and try to save it as .doc (any version) or .docx --> libreoffice crashes.

I cannot put the document on the web.
When creating a new document and saving it as .doc, libreoffice does not crash.

It (therefore) could be related to the fact that it is a MS Word generated document.

$> file document.doc give:

CDF V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1252, Title: BLABLABLA , Author: XXXX, YYYY, ZZZZ, Template: Normal, Last Saved By: zzzzz, Revision Number: 9, Name of Creating Application: Microsoft Office Word, Total Editing Time: 01:08:00, Last Printed: Tue Aug 16 09:27:00 2011, Create Time/Date: Tue Aug 16 14:25:00 2011, Last Saved Time/Date: Tue Aug 16 15:25:00 2011, Number of Pages: 1, Number of Words: 6506, Number of Characters: 35460, Security: 0
>$

[penalvch (penalvch)]

Ben Klein, please provide a depersonalized version of the file that reproduces this bug or it may be closed due to lack of crash report.

[indium (indium)]

Referring to #4:

Java was switched off: I switch it on and get some debugging info:

I do: open the .odt file that is (original was a MS Word document).
Save as "microsoft .docx" --> it crashes with the following info:

# PageCount=<unconvertable> [long]
# TableCount=<unconvertable> [long]
# ImageCount=<unconvertable> [long]
# ObjectCount=<unconvertable> [long]
# ParagraphCount=<unconvertable> [long]
# WordCount=<unconvertable> [long]
# CharacterCount=<unconvertable> [long]
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007f1b74b3faf7, pid=12061, tid=139756804360000
#
# JRE version: 6.0_22-b22
# Java VM: OpenJDK 64-Bit Server VM (20.0-b11 mixed mode linux-amd64 compressed oops)
# Derivative: IcedTea6 1.10.2
# Distribution: Ubuntu 11.04, package 6b22-1.10.2-0ubuntu1~11.04.1
# Problematic frame:
# C [libmswordlx.so+0x91af7] SaveOrDelMSVBAStorage_ww8+0x120d7
#
# An error report file with more information is saved as:
# /mydir/hs_err_pid12061.log
#
# If you would like to submit a bug report, please include
# instructions how to reproduce the bug and visit:
# https://bugs.launchpad.net/ubuntu/+source/openjdk-6/
#

[error occurred during error reporting , id 0xb]

(I will do the openjdk-6 bug-report later).

[penalvch (penalvch)]

Ben Klein, thank you for taking the time to report this bug and helping to make Ubuntu better. However, your crash report is missing. Please follow these instructions to have apport report a new bug about your crash that can be dealt with by the automatic retracer. One may enable apport via the Terminal:
sudo service apport start force_start=1

If you are running the Ubuntu Stable Release you might need to enable apport in /etc/default/apport and restart.

Now open your file manager, navigate to your /var/crash directory and open the crash report you wish to submit.
If this fails you will have to open a terminal and file your report with 'ubuntu-bug /var/crash/_my_crash_report.crash' where _my_crash_report.crash is the crash you would like to report. If you get an error that you aren't allowed to access this report you will have to file it with 'sudo ubuntu-bug /var/crash/_my_crash_report.crash'.

I'm closing this bug report since the process outlined above will automatically open a new bug report which can then dealt with more efficiently. Thanks in advance for your cooperation and understanding.