[Upstream] soffice.bin crashed with SIGABRT

[Laurent Bonnaud]

1) lsb_release -rd
Description: Ubuntu 12.10
Release: 12.10

2) apt-cache policy libreoffice-writer
libreoffice-writer:
  Installed: 1:3.6.2~rc2-0ubuntu3
  Candidate: 1:3.6.2~rc2-0ubuntu3
  Version table:
 *** 1:3.6.2~rc2-0ubuntu3 0
        500 http://archive.ubuntu.com/ubuntu/ quantal/main i386 Packages
        100 /var/lib/dpkg/status

3) What is expected to happen in Writer via a terminal:
cd ~/Desktop && wget -c https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1064560/+attachment/3390885/+files/11_03pu-reduced.odt -O example.odt && lowriter --nologo example.odt

is when one saves it as doc 97/XP/2003 it does not crash.

4) What happens instead is it does.

openjdk-7-jre is already installed on my system and, according to this dialog box, LibreOffice is using it. I tried to tell LibreOffice not to use a JRE, but it still crashes.

WORKAROUND: Save as RTF first, which will fail. Then immediately save to .doc 97/XP/2003.

ProblemType: Crash
DistroRelease: Ubuntu 12.10
Package: libreoffice-core 1:3.6.2~rc2-0ubuntu3
ProcVersionSignature: Ubuntu 3.5.0-17.16-lowlatency 3.5.5
Uname: Linux 3.5.0-17-lowlatency i686
ApportVersion: 2.6.1-0ubuntu2
Architecture: i386
Date: Tue Oct 9 19:20:48 2012
EcryptfsInUse: Yes
ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
ProcCmdline: /usr/lib/libreoffice/program/soffice.bin 11_03pu-reduced.odt --splash-pipe=6
Signal: 6
SourcePackage: libreoffice
StacktraceTop: ?? ()
Title: soffice.bin crashed with SIGABRT
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin audio cdrom dialout dip floppy fuse kvm libvirtd lpadmin plugdev pulse pulse-access scanner staff video

[Laurent Bonnaud (laurent-bonnaud)]

Problem description:

The attached ODT file cannot be saved as a RTF file.

Steps to reproduce:
1. Load the attached file in LibreOffice
2. Save it as RTF

Current behavior:

LibreOffice displays an error box with this message:
  Error saving the document
  Write Error.
  The file could not be written.

Expected behavior:

LibreOffice manages to save the file.

Platform (if different from the browser):

Browser: Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/18.0 Firefox/18.0

This is with Version 3.6.2.2 (Build ID: da8c1e6)

PS: I could not select the correct version in the bug reporting Web interface.

[Laurent Bonnaud (laurent-bonnaud)]

Created attachment 68118
File to reproduce the bug

[Billhook (billhook)]

Confirmed on Windows Vista 32 bit on LO 3.6.2.2.

Furthermore, saving the same .odt file as a ".doc (97/XP/2003)" or as a ".doc (Word 95)" crashes LibreOffice completely.

I *could* save the attached .odt as .docx, .html and export as pdf.

[Billhook (billhook)]

@Laurent Did this work in previous versions of OpenOffice?

[Billhook (billhook)]

I wonder if this has anything to do with Bug 51262 - "big rtf file from little odt file"

 * This document is quite big to start with (777 pages; 2,923,499 bytes)
 * It contains a lot of images, and that bug is apparently caused by images in the document.

Just speculation...

[Laurent Bonnaud (laurent-bonnaud)]

I don't know if previous LO crashed or failed.

[Laurent Bonnaud (laurent-bonnaud)]

Here is what happens in the terminal where I start libreoffice:

$ libreoffice 11_03pu-reduced.odt
Fontconfig warning: "/usr/lib/libreoffice/share/fonts/truetype/fc_local.conf", line 13: Having multiple <family> in <alias> isn't supported and may not works as expected
WARNING: gnome-keyring:: couldn't connect to: /run/user/bonnaud/keyring-Ew4cYL/pkcs11: No such file or directory
LibreOffice(16569): couldn't create slave: "Unable to create io-slave:
klauncher said: Unknown protocol ''.
"
LibreOffice(16569): couldn't create slave: "Unable to create io-slave:
klauncher said: Unknown protocol ''.
"
LibreOffice(16569): couldn't create slave: "Unable to create io-slave:
klauncher said: Unknown protocol ''.
"
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0xb6bfbe22, pid=16569, tid=3020900480
#
# JRE version: 6.0_24-b24
# Java VM: OpenJDK Client VM (20.0-b12 mixed mode, sharing linux-x86 )
# Derivative: IcedTea6 1.11.4
# Distribution: Ubuntu quantal (development branch), package 6b24-1.11.4-3ubuntu1
# Problematic frame:
# C [libsvtlo.so+0x19ae22] GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned long, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>*, WMF_EXTERNALHEADER*)+0x272
#
# An error report file with more information is saved as:
# /home/bonnaud/hs_err_pid16569.log
#
# If you would like to submit a bug report, please include
# instructions how to reproduce the bug and visit:
# https://bugs.launchpad.net/ubuntu/+source/openjdk-6/
#

[Laurent Bonnaud (laurent-bonnaud)]

There is something strange about this bug:
 - apport put SIGABRT in this bug title
 - libreoffice is talking about SIGSEGV

[Laurent Bonnaud (laurent-bonnaud)]

Here is the complete libreoffice log file.

[Apport retracing service (apport)]

StacktraceTop: ?? ()

[Apport retracing service (apport)]

Thank you for your report!

However, processing it in order to get sufficient information for the
developers failed (it does not generate a useful symbolic stack trace). This
might be caused by some outdated packages which were installed on your system
at the time of the report:

outdated debug symbol package for libreoffice-core: package version 1:3.6.2~rc2-0ubuntu3 dbgsym version 1:3.6.1~rc2-1ubuntu5
outdated debug symbol package for libhyphen0: package version 2.8.3-2 dbgsym version 2.8.3-1
outdated debug symbol package for shared-mime-info: package version 1.0-1ubuntu2 dbgsym version 1.0-1ubuntu1
outdated debug symbol package for libstdc++6: package version 4.7.2-2ubuntu1 dbgsym version 4.6.3-1ubuntu5
outdated debug symbol package for kdelibs5-plugins: package version 4:4.9.2-0ubuntu3 dbgsym version 4:4.8.5-0ubuntu0.1
outdated debug symbol package for libreoffice-gnome: package version 1:3.6.2~rc2-0ubuntu3 dbgsym version 1:3.6.1~rc2-1ubuntu5
outdated debug symbol package for libreoffice-math: package version 1:3.6.2~rc2-0ubuntu3 dbgsym version 1:3.6.1~rc2-1ubuntu5
outdated debug symbol package for appmenu-qt: package version 0.2.6-1ubuntu1 dbgsym version 0.2.6-0ubuntu1
outdated debug symbol package for libreoffice-writer: package version 1:3.6.2~rc2-0ubuntu3 dbgsym version 1:3.6.1~rc2-1ubuntu5
outdated debug symbol package for libreoffice-kde: package version 1:3.6.2~rc2-0ubuntu3 dbgsym version 1:3.5.2-2ubuntu1

Please upgrade your system to the latest package versions. If you still
encounter the crash, please file a new report.

Thank you for your understanding, and sorry for the inconvenience!

[Laurent Bonnaud (laurent-bonnaud)]

Saving this file to MS Word "DOC" format also crashes on Linux.

I tried with the LibreOffice binary provided in Ubuntu 12.10 and the resulting debugging info can be found there:

  https://bugs.launchpad.net/df-libreoffice/+bug/1064560

[Laurent Bonnaud (laurent-bonnaud)]

I am reopening this bug because the apport error message makes no sense. The mentioned dbgsym packages are not installed on my system and the crash can be reproduced easily.

[Laurent Bonnaud (laurent-bonnaud)]

With the binary I downloaded from libreoffice.org there is no crash information displayed. The LO window just disappears.

[penalvch (penalvch)]

Attachment https://bugs.freedesktop.org/attachment.cgi?id=68118 from upstream bug https://bugs.freedesktop.org/show_bug.cgi?id=55665 .

[penalvch (penalvch)]

Laurent Bonnaud, thank you for reporting this bug and helping make Ubuntu better. If you install openjdk-7-jre, and then make LO use it via Tools -> Options... -> LibreOffice -> Java, does this provide a WORKAROUND?

As well, when you filed this bug report, were you attempting to save as .rtf or .doc?

In Xubuntu, I could save as .doc locally via openjdk-7 (did not try openjdk-6). However, attempting to save as .rtf consistently caused a window to pop up noting:
Error saving the document example:
Writer Error.
The file could not be written.

cd ~/Desktop && wget -c https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1064560/+attachment/3390885/+files/11_03pu-reduced.odt -O example.odt && lowriter --nologo example.odt

lsb_release -rd
Description: Ubuntu 12.10
Release: 12.10

apt-cache policy libreoffice-writer
libreoffice-writer:
  Installed: 1:3.6.1~rc2-1ubuntu5
  Candidate: 1:3.6.1~rc2-1ubuntu5
  Version table:
     1:3.6.2~rc2-0ubuntu3 0
        400 http://archive.ubuntu.com/ubuntu/ quantal-proposed/main i386 Packages
 *** 1:3.6.1~rc2-1ubuntu5 0
        500 http://archive.ubuntu.com/ubuntu/ quantal/main i386 Packages
        100 /var/lib/dpkg/status

apt-cache policy openjdk-7-jre
openjdk-7-jre:
  Installed: 7u7-2.3.2a-1ubuntu1
  Candidate: 7u7-2.3.2a-1ubuntu1
  Version table:
 *** 7u7-2.3.2a-1ubuntu1 0
        500 http://archive.ubuntu.com/ubuntu/ quantal/main i386 Packages
        100 /var/lib/dpkg/status

[Mikekaganski (mikekaganski)]

LO 3.6.1.2 under Win7Pro_x64:

Save as RTF -> Error saving the document
Save as DOC (97/XP/2003) -> Crash

but

Save as DOC (95) -> OK

[Mikekaganski (mikekaganski)]

Excuse me, the previous comment is partially incorrect.
If I open the file and immediately try to save as DOC (either 95 or 97+), LO crashes.

But if I open the file, then try to save as RTF, get the error message, then try to save as DOC (either 95 or 97+), then the operation succeedes.

[Laurent Bonnaud (laurent-bonnaud)]

On 10/10/2012 01:44 AM, Christopher M. Penalver wrote:
> Laurent Bonnaud, thank you for reporting this bug and helping make
> Ubuntu better. If you install openjdk-7-jre, and then make LO use it via
> Tools -> Options... -> LibreOffice -> Java, does this provide a
> WORKAROUND?

openjdk-7-jre is already installed on my system and, according to this dialog box, LibreOffice is using it. I tried to tell LibreOffice
 not to use a JRE, but it still crashes.

> As well, when you filed this bug report, were you attempting to save as
> .rtf or .doc?

As DOC since there is no crash when saving as RTF.

[penalvch (penalvch)]

Laurent Bonnaud, thank you for providing the requested information. I'm very curious, could you please make sure only openjdk-7-jre is in use in LibreOffice, then execute the following command, and file a new crash report if generated:
sudo apt-get -y remove openjdk-6-jre && cd /var/crash && sudo rm * && sudo apt-get update && sudo apt-get -y upgrade && sudo apt-get -y install libreoffice-dbg uno-libs3-dbg ure-dbg && sudo service apport start force_start=1 && cd ~/Desktop && wget -c https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1064560/+attachment/3390885/+files/11_03pu-reduced.odt -O example.odt && lowriter --nologo example.odt

Thank you for your understanding.

[Laurent Bonnaud (laurent-bonnaud)]

The SIGSEGV detected by openjdk in comment #2 is no longer displayed, but the LibreOffice crash still occurs.

[Laurent Bonnaud (laurent-bonnaud)]

On 10/24/2012 08:09 PM, Christopher M. Penalver wrote:
> Laurent Bonnaud, thank you for providing the requested information. I'm very curious, could you please make sure only openjdk-7-jre is in use in LibreOffice, then execute the following command, and file a new crash report if generated:
> sudo apt-get -y remove openjdk-6-jre && cd /var/crash && sudo rm * && sudo apt-get update && sudo apt-get -y upgrade && sudo apt-get -y install libreoffice-dbg uno-libs3-dbg ure-dbg && sudo service apport start force_start=1 && cd ~/Desktop && wget -c https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1064560/+attachment/3390885/+files/11_03pu-reduced.odt -O example.odt && lowriter --nologo example.odt

I purged openjdk-6, installed debug symbols, restarted apport and
reproduced the crash. The
/var/crash/_usr_lib_libreoffice_program_soffice.bin.1000.crash file was
created, apport appeared, it ran gdb but did not upload the bug to
launchpad.

apport-cli does not upload the crash either:

$ apport-cli -c
/var/crash/_usr_lib_libreoffice_program_soffice.bin.1000.crash

*** Send problem report to the developers?

After the problem report has been sent, please fill out the form in the
automatically opened web browser.

What would you like to do? Your options are:
  S: Send report (27.9 MB)
  E: Examine locally
  V: View report
  K: Keep report file for sending later or copying to somewhere else
  I: Cancel and ignore future crashes of this program version
  C: Cancel
SPlease choose (S/E/V/K/I/C):

So I attached the apport report to this mail.

--
Laurent Bonnaud.
http://www.gipsa-lab.grenoble-inp.fr/page_pro.php?vid=96

[penalvch (penalvch)]

Laurent Bonnaud, apparently the reason why you were unable to file a new crash report is because Apport has a bug in it. :( -> https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1071092 . Anyways, I reproduced the crash as when I performed the initial test, I saved as RTF first, then DOC, which succeed.

Marking Triaged as per updated Bug Description.

[Lemoyne-castle (lemoyne-castle)]

In Version 3.6.3.2 (Build ID: 58f22d5) on Ubuntu 10.04 was able to re-create the RTF file save error but it did not crash when saved as .doc (97-2003).

[lengo (pcunger)]

Running 4.0.2.2 and it crashes every time I try to save a file with tables, pictures, different field types, footnotes, and comments, etc., to .rtf. I don't try to save to .rtf often, so I'm just noticing this behaviour now. Saving to .pdf, .doc, .docx all work fine.

[Barta-c (barta-c)]

I think it's "inherited from LibO" I was able to reproduce both RTF and DOC crashes with multiple LibO release up to 3.3.3 (I don't have 3.3.0) and the bug is present in AOO 4.0.0 too.

edited summary. changed version and component fields.
added expert devs to CC list

[Barta-c (barta-c)]

P.S. tested under Win7 64bit

[Mikekaganski (mikekaganski)]

The test document seems to be broken.

1. If I open the file using any version starting from 3.3.0.4 and up to 4.1.1.2 under Win7x64, it opens with first page empty. When I scroll it down (so that I see some graphics on some pages), and then return to the first page, there are "ghost" graphics in the top left corner of the first page. They may be selected and moved, but if I scroll the document down and up again, they disappear and other graphics appear.

2. The 4.1.2.1 opens the document (with empty first page), and then crashes after a couple of seconds (looks like it continues to process the document after initial display, and the crash happens on some stage of this delayed processing). So, the problem is worse in 4.1.2.1.

Despite the document itself is broken, I think the bug should be fixed, because the crash indicates some flaw in the code that doesn't expect something wrong in the input data. Fixing it will make the software more robust.

[Alexpikptz (alexpikptz)]

I reproduce behavior described in comment 9 with LibreOffice 4.2.5 and 4.3.0.3 on Debian x86_64, but the file is saved as rtf with LibreOffice 4.3.0.3 without errors.

[Laurent Bonnaud (laurent-bonnaud)]

I tested again in Ubuntu 14.10 with LO 1:4.3.2-0ubuntu1:

 - saving as RTF works
 - saving as DOC crashes

Therefore I opened a new bug with updated versions and stracktraces and I will merge this one...