soffice.bin crashed with SIGSEGV in __GI___libc_free()

[Daniel06]

I was editing an impress document. This was the first time it chrashed.

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: libreoffice-core 1:3.5.0-2ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-19.30-generic 3.2.11
Uname: Linux 3.2.0-19-generic x86_64
NonfreeKernelModules: fglrx
ApportVersion: 1.94.1-0ubuntu2
Architecture: amd64
Date: Mon Mar 19 00:19:01 2012
ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Beta amd64 (20111003)
ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --impress /home/username/Dokumente/Studium/Bachelorarbeit/Kolloquium_BA/2012-03-26_Koloquium_v0.1.odp --splash-pipe=6
SegvAnalysis:
 Segfault happened at: 0x7fc19b8e52bc <free+28>: mov -0x8(%rdi),%rax
 PC (0x7fc19b8e52bc) ok
 source "-0x8(%rdi)" (0xffffff00fefef6) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: libreoffice
StacktraceTop:
 free () from /lib/x86_64-linux-gnu/libc.so.6
 SfxUndoManager::ImplClearRedo(svl::undo::impl::UndoManagerGuard&, bool) () from /usr/lib/libreoffice/program/libsvllo.so
 SfxUndoManager::ImplLeaveListAction(bool, svl::undo::impl::UndoManagerGuard&) () from /usr/lib/libreoffice/program/libsvllo.so
 SfxUndoManager::LeaveListAction() () from /usr/lib/libreoffice/program/libsvllo.so
 ?? () from /usr/lib/libreoffice/program/../program/libeditenglo.so
Title: soffice.bin crashed with SIGSEGV in free()
UpgradeStatus: Upgraded to precise on 2012-03-17 (1 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Apport retracing service (apport)]

StacktraceTop:
 __GI___libc_free (mem=0xffffff00fefefe) at malloc.c:2968
 deallocate (__p=<optimized out>, this=<optimized out>) at /usr/include/c++/4.6/ext/new_allocator.h:98
 _M_deallocate (__p=<optimized out>, this=<optimized out>, __n=<optimized out>) at /usr/include/c++/4.6/bits/stl_vector.h:156
 ~_Vector_base (this=<optimized out>, __in_chrg=<optimized out>) at /usr/include/c++/4.6/bits/stl_vector.h:142
 ~vector (this=<optimized out>, __in_chrg=<optimized out>) at /usr/include/c++/4.6/bits/stl_vector.h:351

[penalvch (penalvch)]

Daniel06, thank you for reporting this bug and helping make Ubuntu better. Please answer the following questions:
+ Is this reproducible?
+ Could you please attach the file 2012-03-26_Koloquium_v0.1.odp?
+ What specifically did you do right before the crash?

[Daniel06 (dleh)]

Attached document v0.1 is the version before the crash. The data, which was not saved, couldn't be restored. Attached document v0.2 ist the version, it should looked like while the crash happens.

Before it crahs, I inserted a graphic (with copy and paste from a writer-file) -> see 2012-03-26_Koloquium_v0.2.odp, slide 3. Afterwards I added a bulleted list to slide 4 and added some text. Then I switched to another application (firefox). After about 20 seconds I got the crash report.

Till now this was the first crash and it did not occur again. Hope this was a bit helpful.

Regards,
Daniel

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Marcus Tomlinson (marcustomlinson)]

This release of Ubuntu is no longer receiving maintenance updates. If this is still an issue on a maintained version of Ubuntu please let us know.

[Launchpad Janitor (janitor)]

[Expired for libreoffice (Ubuntu) because there has been no activity for 60 days.]