soffice.bin crashed with SIGSEGV in OutputDevice::GetSysTextLayoutData()

[Deekshith Allamaneni]

I got the same problem in Ubuntu 12.04 beta1 as well as Windows 7 using Libre Office. It usually occurs when opening pptx files.

Unreproducible in Xubuntu 32-bit via the Terminal:

cd ~/Desktop && wget -c https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/951609/+attachment/2848753/+files/DNA%20Computing%20ppt%200.3.pptx -O example.pptx && loimpress --nologo example.pptx

lsb_release -rd
Description: Ubuntu precise (development branch)
Release: 12.04

apt-cache policy libreoffice-impress
libreoffice-impress:
  Installed: 1:3.5.0-2ubuntu1
  Candidate: 1:3.5.0-2ubuntu1
  Version table:
 *** 1:3.5.0-2ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ precise/main i386 Packages
        100 /var/lib/dpkg/status

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: libreoffice-core 1:3.5.0-2ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-18.28-generic-pae 3.2.9
Uname: Linux 3.2.0-18-generic-pae i686
ApportVersion: 1.94.1-0ubuntu2
Architecture: i386
Date: Sat Mar 10 21:39:49 2012
ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta i386 (20120301)
ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --impress /home/username/Dropbox/Education/B-Tech/Technical\ Seminar/ppt/DNA\ Computing\ ppt\ 0.3.pptx --splash-pipe=6
ProcEnviron:
 LANGUAGE=en_IN:en
 LANG=en_IN
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x1f0a9b7 <_ZNK12OutputDevice20GetSysTextLayoutDataERK5PointRK6StringttPKl+407>: mov (%edi),%eax
 PC (0x01f0a9b7) ok
 source "(%edi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: libreoffice
StacktraceTop:
 OutputDevice::GetSysTextLayoutData(Point const&, String const&, unsigned short, unsigned short, long const*) const () from /usr/lib/libreoffice/program/libvcllo.so
 ?? () from /usr/lib/libreoffice/program/../program/cairocanvas.uno.so
 ?? () from /usr/lib/libreoffice/program/../program/cairocanvas.uno.so
 ?? () from /usr/lib/libreoffice/program/../program/cairocanvas.uno.so
 ?? () from /usr/lib/libreoffice/program/../program/libcppcanvaslo.so
Title: soffice.bin crashed with SIGSEGV in OutputDevice::GetSysTextLayoutData()
UpgradeStatus: Upgraded to precise on 2012-03-10 (0 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Deekshith Allamaneni (dkh-hyd)]

Created attachment 58201
A pptx file which is crashing.

LibreOffice is crashing when opening pptx files. It is crashing before loading the file itself. It happened with two documents.

These pptx documents are opening well with MS Office and also Kisgsoft Office.

These pptx files contain smart art (created using ms office), which i suspect is the cause of the problem as LibreOffice does not have smart art feature yet.

[Deekshith Allamaneni (dkh-hyd)]

Created attachment 58201
A pptx file which is crashing.

LibreOffice is crashing when opening pptx files. It is crashing before loading the file itself. It happened with two documents.

These pptx documents are opening well with MS Office and also Kisgsoft Office.

These pptx files contain smart art (created using ms office), which i suspect is the cause of the problem as LibreOffice does not have smart art feature yet.

[S-joyemusequna (s-joyemusequna)]

Tried with LibO 3.3.4, 3.4.5, and 3.5.1 Beta2 on Windows XP / Vista 64.

No crash.

LibO 3.3.4 and 3.4.5 - smart art missing.

Libo 3.5.1 Beta 2 - not bad (compared to Word 2007), but slides 5, 6, and 9 display the following text:

Click to edit master styles
-Second level
   - Third level
      - [and so on]

So I confirm there are problems - but no crash for me.

[julien2412 (serval2412-6)]

With 3.5 branch (so not exactly 3.5.0) on pc Debian x86-64, I didn't reproduce crash. However, I had exactly what s-joyemusequna had.

We need more info here :
- which environment ?
- could you uninstall LO completely (remove or backup your LO profile if needed) and reinstall ? If on Windows, after uninstalling, clean your registry with a free tool like ccleaner.

[S-joyemusequna (s-joyemusequna)]

Tried with LibO 3.3.4, 3.4.5, and 3.5.1 Beta2 on Windows XP / Vista 64.

No crash.

LibO 3.3.4 and 3.4.5 - smart art missing.

Libo 3.5.1 Beta 2 - not bad (compared to Word 2007), but slides 5, 6, and 9 display the following text:

Click to edit master styles
-Second level
   - Third level
      - [and so on]

So I confirm there are problems - but no crash for me.

[julien2412 (serval2412-6)]

With 3.5 branch (so not exactly 3.5.0) on pc Debian x86-64, I didn't reproduce crash. However, I had exactly what s-joyemusequna had.

We need more info here :
- which environment ?
- could you uninstall LO completely (remove or backup your LO profile if needed) and reinstall ? If on Windows, after uninstalling, clean your registry with a free tool like ccleaner.

[Apport retracing service (apport)]

StacktraceTop:
 OutputDevice::GetSysTextLayoutData (this=0xd334648, rStartPt=..., rStr=..., nIndex=0, nLen=3, pDXAry=0xd3aa340) at /build/buildd/libreoffice-3.5.0/vcl/source/gdi/outdev3.cxx:7434
 cairocanvas::TextLayout::draw (this=0xd3b1df8, pSurface=..., rOutDev=..., rOutpos=..., viewState=..., renderState=...) at /build/buildd/libreoffice-3.5.0/canvas/source/cairo/cairo_textlayout.cxx:405
 cairocanvas::CanvasHelper::drawTextLayout (this=0xd4d0448, pOwner=0xd4d0430, xLayoutedText=..., viewState=..., renderState=...) at /build/buildd/libreoffice-3.5.0/canvas/source/cairo/cairo_canvashelper_text.cxx:385
 canvas::CanvasBase<cairocanvas::CanvasBitmapSpriteSurface_Base, cairocanvas::CanvasHelper, osl::Guard<osl::Mutex>, cppu::OWeakObject>::drawTextLayout (this=0xd4d0448, layoutetText=..., viewState=..., renderState=...) at /build/buildd/libreoffice-3.5.0/solver/unxlngi6.pro/inc/canvas/base/canvasbase.hxx:423
 cppcanvas::internal::(anonymous namespace)::TextArrayAction::render (this=0xd3b156c, rTransformation=...) at /build/buildd/libreoffice-3.5.0/cppcanvas/source/mtfrenderer/textaction.cxx:1121

[penalvch (penalvch)]

Deekshith Allamaneni, thank you for reporting this bug and helping make Ubuntu better. Could you please attach the file DNA Computing ppt 0.3.pptx to this report?

[Deekshith Allamaneni (dkh-hyd)]

The file which caused this crash is added to this attachment. Although, I got the same problem with few more files too.

[penalvch (penalvch)]

Deekshith Allamaneni, this is unreproducible via the Terminal:

cd ~/Desktop && wget -c https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/951609/+attachment/2848753/+files/DNA%20Computing%20ppt%200.3.pptx -O example.pptx && loimpress --nologo example.pptx

lsb_release -rd
Description: Ubuntu precise (development branch)
Release: 12.04

apt-cache policy libreoffice-impress
libreoffice-impress:
  Installed: 1:3.5.0-2ubuntu1
  Candidate: 1:3.5.0-2ubuntu1
  Version table:
 *** 1:3.5.0-2ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ precise/main i386 Packages
        100 /var/lib/dpkg/status

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Korrawit Pruegsanusak (detective-conan-1412)]

[NOT REPRODUCIBLE] i.e. no crash on Windows XP:
* 3.5.3 RC1
* daily build Win-x86@6-fast, pull time 2012-05-08 21.43.52, Build ID: 7f3f6e4

(In reply to comment #1)
> Libo 3.5.1 Beta 2 - not bad (compared to Word 2007), but slides 5, 6, and 9
> display the following text:

The incorrect text is fixed in bug 35372. So, WORKSFORME.

[Marcus Tomlinson (marcustomlinson)]

This release of Ubuntu is no longer receiving maintenance updates. If this is still an issue on a maintained version of Ubuntu please let us know.

[Marcus Tomlinson (marcustomlinson)]

This bug has sat incomplete for 6 months. Marking invalid.