soffice.bin crashed with SIGSEGV in GetHoriOrient()

[Jonathan Alfonso]

Happened when changing table properties

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: libreoffice-core 1:4.2.1-0ubuntu1
ProcVersionSignature: Ubuntu 3.13.0-18.38-generic 3.13.6
Uname: Linux 3.13.0-18-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.13.3-0ubuntu1
Architecture: amd64
CurrentDesktop: Unity
Date: Wed Mar 19 21:12:57 2014
ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
InstallationDate: Installed on 2014-03-15 (4 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Alpha amd64 (20140314)
ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --writer --splash-pipe=5
SegvAnalysis:
 Segfault happened at: 0x7f19c57e9263 <_Z19ItemSetToTableParamRK10SfxItemSetR10SwWrtShell+1731>: mov 0x40(%rax),%rax
 PC (0x7f19c57e9263) ok
 source "0x40(%rax)" (0x00000040) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: libreoffice
StacktraceTop:
 ItemSetToTableParam(SfxItemSet const&, SwWrtShell&) () from /usr/lib/libreoffice/program/../program/libswlo.so
 ?? () from /usr/lib/libreoffice/program/../program/libswlo.so
 ?? () from /usr/lib/libreoffice/program/libmergedlo.so
 ?? () from /usr/lib/libreoffice/program/libmergedlo.so
 ?? () from /usr/lib/libreoffice/program/libmergedlo.so
Title: soffice.bin crashed with SIGSEGV in ItemSetToTableParam()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Apport retracing service (apport)]

StacktraceTop:
 GetHoriOrient (bInP=1 '\001', this=0x40) at /build/buildd/libreoffice-4.2.1/sw/inc/fmtornt.hxx:123
 GetHoriOrient (bInP=1 '\001', this=0x0) at /build/buildd/libreoffice-4.2.1/sw/inc/fmtornt.hxx:128
 ItemSetToTableParam (rSet=..., rSh=...) at /build/buildd/libreoffice-4.2.1/sw/source/ui/shells/tabsh.cxx:358
 SwTableShell::Execute (this=<optimized out>, rReq=...) at /build/buildd/libreoffice-4.2.1/sw/source/ui/shells/tabsh.cxx:590
 SfxShell::CallExec (this=0x371d0d0, pFunc=0x7f19c57eca90 <SfxStubSwTableShellExecute(SfxShell*, SfxRequest&)>, rReq=...) at /build/buildd/libreoffice-4.2.1/include/sfx2/shell.hxx:181

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.