soffice.bin crashed with SIGSEGV in SwDocStyleSheet::PresetNameAndFamily()

[Curtis Hovey]

Start a new document
Menu > File > Templates > Organise
Expand My Templates
Expand one of the templates to show the styles
Expand the styles
Drag a page style to untitled document
crash

Writer does not crash if you know to
expand the untitled document
expand styles
drag a style from a template to the document styles.

I uninstalled lo-menubar.
Copying a style to the document still crashes.

ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: libreoffice-core 1:3.4.3-3ubuntu2
ProcVersionSignature: Ubuntu 3.0.0-12.19-generic-pae 3.0.4
Uname: Linux 3.0.0-12-generic-pae i686
NonfreeKernelModules: nvidia wl
ApportVersion: 1.23-0ubuntu2
Architecture: i386
CrashCounter: 1
Date: Wed Oct 5 14:04:12 2011
ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --writer /home/username/Work/disclosure.odt --splash-pipe=7
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0xae522afc <_ZN15SwDocStyleSheet19PresetNameAndFamilyERK6String+22>: mov (%edx),%eax
 PC (0xae522afc) ok
 source "(%edx)" (0x0066005f) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: libreoffice
StacktraceTop:
 SwDocStyleSheet::PresetNameAndFamily(String const&) () from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
 ?? () from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
 SfxStyleSheetBasePool::operator[](unsigned short) () from /usr/lib/libreoffice/program/../basis-link/program/libsvlli.so
 SwDocShell::Insert(SfxObjectShell&, unsigned short, unsigned short, unsigned short, unsigned short&, unsigned short&, unsigned short&, unsigned short&) () from /usr/lib/libreoffice/program/../basis-link/program/libswli.so
 ?? () from /usr/lib/libreoffice/program/../basis-link/program/libsfxli.so
Title: soffice.bin crashed with SIGSEGV in SwDocStyleSheet::PresetNameAndFamily()
UpgradeStatus: Upgraded to oneiric on 2011-09-23 (12 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Apport retracing service (apport)]

StacktraceTop:
 GetChar (nIndex=0, this=0x66005f) at /build/buildd/libreoffice-3.4.3/libreoffice-build/build/libreoffice-3.4.3.2/solver/340/unxlngi6.pro/inc/tools/string.hxx:554
 SwDocStyleSheet::PresetNameAndFamily (this=0x9b92e90, rName=...) at /build/buildd/libreoffice-3.4.3/libreoffice-build/build/libreoffice-3.4.3.2/sw/source/ui/app/docstyle.cxx:1825
 SwStyleSheetIterator::operator[] (this=0xa4e9400, nIdx=20) at /build/buildd/libreoffice-3.4.3/libreoffice-build/build/libreoffice-3.4.3.2/sw/source/ui/app/docstyle.cxx:2418
 SfxStyleSheetBasePool::operator[] (this=0xa66c3c8, nIdx=20) at /build/buildd/libreoffice-3.4.3/libreoffice-build/build/libreoffice-3.4.3.2/svl/source/items/style.cxx:774
 SwDocShell::Insert (this=0x96b69a8, rSource=..., nSourceIdx1=0, nSourceIdx2=20, nSourceIdx3=65535, rIdx1=@0xbf852846, rIdx2=@0xbf852848, rIdx3=@0xbf85284a, rRemovedIdx=@0xbf85285e) at /build/buildd/libreoffice-3.4.3/libreoffice-build/build/libreoffice-3.4.3.2/sw/source/ui/app/docsh2.cxx:383

[penalvch (penalvch)]

Curtis Hovey, thank you for reporting this bug and helping make Ubuntu better. Please answer these questions:

* Is this reproducible?
* If so, what specific steps should we take to recreate this bug?
* Could you please provide a document that demonstrates this problem?

As well, according to this report, you are not using the most recent version of this package for your Ubuntu release. Please upgrade to the most recent version and let us know if you are still having this issue. Thanks in advance.

[Curtis Hovey (sinzui)]

Yes this still happens:
Start a new document
Menu > File > Templates > Organise
Expand My Templates
Expand one of the templates to show the styles
Expand the styles
Drag a page style to untitled document
crash

Writer does not crash if you know to
expand the untitled document
expand styles
drag a style from a template to the document styles.

[penalvch (penalvch)]

Curtis Hovey, please answer the following questions:
* Do you have lo-menubar installed?
* If so, if you uninstall it, is this crash still reproducible?

[Curtis Hovey (sinzui)]

I uninstalled lo-menubar.
Copying a style to the document still crashes.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Marcus Tomlinson (marcustomlinson)]

This release of Ubuntu is no longer receiving maintenance updates. If this is still an issue on a maintained version of Ubuntu please let us know.

[Launchpad Janitor (janitor)]

[Expired for libreoffice (Ubuntu) because there has been no activity for 60 days.]