Ubuntu
libreoffice package

writer crashes with SIGFPE when opening doc file

Bug #860650 reported by Hendrik Lönngren on 2011-09-27

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	LibreOffice	Invalid	Critical	freedesktop-bugs #41275
	libreoffice (Ubuntu)	Invalid	Undecided	Unassigned

Bug Description

When opening the file (which I cannot provide) on a natty live system, libreoffice writer crashes while importing. I was able to obtain this backtrace:

GNU gdb (Ubuntu/Linaro 7.2-1ubuntu11) 7.2
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/lib/libreoffice/program/soffice.bin...(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/lib/libreoffice/program/soffice.bin -view Desktop/error.doc
[Thread debugging using libthread_db enabled]
[New Thread 0xb6e0cb70 (LWP 4562)]
[New Thread 0xb56feb70 (LWP 4563)]
[New Thread 0xb4efdb70 (LWP 4564)]
[New Thread 0xb4658b70 (LWP 4565)]
[New Thread 0xb3e42b70 (LWP 4566)]
[Thread 0xb56feb70 (LWP 4563) exited]
[New Thread 0xb56feb70 (LWP 4567)]
[New Thread 0xb338fb70 (LWP 4568)]
[New Thread 0xb2a8fb70 (LWP 4569)]
[Thread 0xb56feb70 (LWP 4567) exited]
[New Thread 0xb56feb70 (LWP 4575)]
[New Thread 0xb20ffb70 (LWP 4576)]
[Thread 0xb20ffb70 (LWP 4576) exited]

Program received signal SIGFPE, Arithmetic exception.
0x061c9dc6 in SetDocumentGrid ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
(gdb) bt
#0 0x061c9dc6 in SetDocumentGrid ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#1 0x0617f8ea in SetSegmentToPageDesc ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#2 0x0618ab4d in SetSwFmtPageDesc ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#3 0x0618b0d4 in InsertSegments ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#4 0x0618cef7 in CoreLoad ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#5 0x0618e8ee in LoadThroughDecryption ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#6 0x0618f41e in LoadDoc ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#7 0x0618f55e in Read ()
   from /usr/lib/libreoffice/basis3.3/program/libmswordli.so
#8 0x047d700c in Read ()
   from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
#9 0x048bf7ef in ConvertFrom ()
   from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
#10 0x00acead4 in SfxObjectShell::DoLoad(SfxMedium*) ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/libreoffice/program/../basis-link/program/libsfxli.so
#11 0x00b229b8 in SfxBaseModel::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsfxli.so
#12 0x00b95327 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsfxli.so
#13 0x03c287c7 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libfwkli.so
#14 0x03c2a068 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libfwkli.so
#15 0x03c1f9cc in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libfwkli.so
#16 0x03c200d1 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libfwkli.so
#17 0x0079b231 in comphelper::SynchronousDispatch::dispatch(com::sun::star::uno::Reference<com::sun::star::uno::XInterface> const&, rtl::OUString const&, rtl::OUString const&, long, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libcomphelp4gcc3.so
#18 0x0032a262 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
---Type <return> to continue, or q <return> to quit---
#19 0x00338b46 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#20 0x0030ec7a in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#21 0x003109f0 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#22 0x00310b04 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#23 0x01a896e0 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvclli.so
#24 0x02d0b4f2 in SalDisplay::DispatchInternalEvent() ()
   from /usr/lib/libreoffice/basis3.3/program/libvclplug_genli.so
#25 0x025feaf1 in ?? ()
   from /usr/lib/libreoffice/basis3.3/program/libvclplug_gtkli.so
#26 0x02bd6311 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#27 0x02bdaaa8 in g_main_context_dispatch ()
   from /lib/i386-linux-gnu/libglib-2.0.so.0
#28 0x02bdb270 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#29 0x02bdb524 in g_main_context_iteration ()
   from /lib/i386-linux-gnu/libglib-2.0.so.0
#30 0x025fc010 in ?? ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/libreoffice/basis3.3/program/libvclplug_gtkli.so
#31 0x02d12157 in X11SalInstance::Yield(bool, bool) ()
   from /usr/lib/libreoffice/basis3.3/program/libvclplug_genli.so
#32 0x018728b0 in Application::Yield(bool) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvclli.so
#33 0x0187297c in Application::Execute() ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvclli.so
#34 0x003122ad in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#35 0x018799b2 in ?? ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvclli.so
#36 0x01879a55 in SVMain() ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvclli.so
#37 0x0033bd6f in soffice_main ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#38 0x08048bc1 in main ()

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: libreoffice-writer 1:3.3.2-1ubuntu4
ProcVersionSignature: Ubuntu 2.6.38-8.42-generic 2.6.38.2
Uname: Linux 2.6.38-8-generic i686
Architecture: i386
Date: Tue Sep 27 14:58:40 2011
LiveMediaBuild: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
ProcEnviron:
LANGUAGE=de_DE:en
LANG=de_DE.UTF-8
SHELL=/bin/bash
SourcePackage: libreoffice
UpgradeStatus: No upgrade log present (probably fresh install)

Tags:

Revision history for this message

Hendrik Lönngren (hendrik0) wrote on 2011-09-27:

Dependencies.txt Edit (3.6 KiB, text/plain; charset="utf-8")

Revision history for this message

penalvch (penalvch) wrote on 2011-09-27:

Hendrik Lönngren, thank you for reporting this and helping make Ubuntu better. Could you please attach the document that when opened causes this problem?

Changed in libreoffice (Ubuntu):
status:	New → Incomplete

Revision history for this message

Hendrik Lönngren (hendrik0) wrote on 2011-09-27:

As mentioned above, no, sorry.

Revision history for this message

penalvch (penalvch) wrote on 2011-09-27:

Hendrik Lönngren, your crash report is missing. Please follow these instructions to have apport report a new bug about your crash that can be dealt with by the automatic retracer.

If you are running the Ubuntu Stable Release you might need to enable apport in /etc/default/apport and restart.

Now open your file manager, navigate to your /var/crash directory and open the crash report you wish to submit.
If this fails you will have to open a terminal and file your report with 'ubuntu-bug /var/crash/_my_crash_report.crash' where _my_crash_report.crash is the crash you would like to report. If you get an error that you aren't allowed to access this report you will have to file it with 'sudo ubuntu-bug /var/crash/_my_crash_report.crash'.

I'm closing this bug report since the process outlined above will automatically open a new bug report which can then dealt with more efficiently. Thanks in advance for your cooperation and understanding.

Changed in libreoffice (Ubuntu):
status:	Incomplete → Invalid

Revision history for this message

In freedesktop.org Bugzilla #41275, Wikibugs (wikibugs) wrote on 2011-09-27:

On an Ubuntu 11.04 live system, trying to open a certain doc file makes LibreOffice crash while importing. Unfortunately, I cannot provide steps to reproduce since I cannot publish the file. By the way, opening the file with Wordpad on Windows XP also fails.

The problem seems to lie in the function SetDocumentGrid of libmswordli.so, as reported by gdb:

At first glance, I see only one line in the function in ww8par6.cxx that might cause an arithmetic exception, namely line 311:

aGrid.SetLines(writer_cast<sal_uInt16>(nTextareaHeight/nLinePitch));

Might nLinePitch being 0 be the problem?

Downstream bug report is here: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/860650

Bug Watch Updater (bug-watch-updater) on 2011-09-27

Changed in df-libreoffice:
importance:	Unknown → Critical
status:	Unknown → Confirmed

Revision history for this message

In freedesktop.org Bugzilla #41275, Björn Michaelsen (bjoern-michaelsen) wrote on 2011-12-23:

[This is an automated message.]
This bug was filed before the changes to Bugzilla on 2011-10-16. Thus it
started right out as NEW without ever being explicitly confirmed. The bug is
changed to state NEEDINFO for this reason. To move this bug from NEEDINFO back
to NEW please check if the bug still persists with the 3.5.0 beta1 or beta2 prereleases.
Details on how to test the 3.5.0 beta1 can be found at:
http://wiki.documentfoundation.org/QA/BugHunting_Session_3.5.0.-1

more detail on this bulk operation: http://nabble.documentfoundation.org/RFC-Operation-Spamzilla-tp3607474p3607474.html