Bug 39861

Summary: Writer crashes on Quit, after having opened a MS Word document
Product: LibreOffice Reporter: Marco Molteni <marco.molteni>
Component: WriterAssignee: Not Assigned <libreoffice-bugs>
Status: CLOSED DUPLICATE    
Severity: critical CC: courrier.oou.fr.mjk, gleppert, marco.molteni
Priority: medium    
Version: 3.4.2 release   
Hardware: All   
OS: macOS (All)   
Whiteboard:
Crash report or crash signature: Regression By:
Attachments: Modified document 'gutmann_modified.doc' without crash

Description Marco Molteni 2011-08-05 09:12:38 UTC 
Reproducible 100%. Tested on MacOSX 10.6.8.
How to reproduce:
- start LibreOffice
- open http://www.usenix.org/event/sec03/tech/full_papers/gutmann/gutmann.doc
- (document will be rendered correctly)
- File | Quit

LibreOffice will crash.

I tested and I can open the same document with MS Word without problems.

Stack trace:

Process:         soffice [1842]
Path:            /Applications/LibreOffice.app/Contents/MacOS/soffice
Identifier:      org.libreoffice.script
Version:         3.4.2 (???)
Code Type:       X86 (Native)
Parent Process:  launchd [400]

Date/Time:       2011-08-05 18:07:11.868 +0200
OS Version:      Mac OS X 10.6.8 (10K549)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x000000000000008c
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libswmxi.dylib                	0x280fc0a1 SwFtnBossFrm::RemoveFtn(SwCntntFrm const*, SwTxtFtn const*, unsigned char) + 145
1   libswmxi.dylib                	0x2820d43b SwTxtFtn::DelFrms(SwFrm const*) + 475
2   libswmxi.dylib                	0x28139d37 SwCntntFrm::~SwCntntFrm() + 407
3   libswmxi.dylib                	0x281ea282 SwTxtFrm::~SwTxtFrm() + 66
4   libswmxi.dylib                	0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560
5   libswmxi.dylib                	0x28116ffe SwBodyFrm::~SwBodyFrm() + 46
6   libswmxi.dylib                	0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560
7   libswmxi.dylib                	0x280d4a62 SwColumnFrm::~SwColumnFrm() + 114
8   libswmxi.dylib                	0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560
9   libswmxi.dylib                	0x281318d9 SwSectionFrm::~SwSectionFrm() + 217
10  libswmxi.dylib                	0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560
11  libswmxi.dylib                	0x28116ffe SwBodyFrm::~SwBodyFrm() + 46
12  libswmxi.dylib                	0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560
13  libswmxi.dylib                	0x28116165 SwPageFrm::~SwPageFrm() + 437
14  libswmxi.dylib                	0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560
15  libswmxi.dylib                	0x2810ebe1 SwRootFrm::~SwRootFrm() + 305
16  libswmxi.dylib                	0x283d2c78 ViewShell::~ViewShell() + 904
17  libswmxi.dylib                	0x286eb06c SwWrtShell::~SwWrtShell() + 220
18  libswmxi.dylib                	0x2862e0d3 SwView::~SwView() + 435
19  libsfxmxi.dylib               	0x00684b14 SfxViewFrame::ReleaseObjectShell_Impl() + 132
20  libsfxmxi.dylib               	0x00684f14 SfxViewFrame::~SfxViewFrame() + 68
21  libsfxmxi.dylib               	0x00683d8b SfxViewFrame::Close() + 139
22  libsfxmxi.dylib               	0x0066060b SfxFrame::DoClose_Impl() + 59
23  libsfxmxi.dylib               	0x0067abc8 SfxBaseController::dispose() + 1656
24  libfwkmxi.dylib               	0x1a84b0ea framework::Frame::setComponent(com::sun::star::uno::Reference<com::sun::star::awt::XWindow> const&, com::sun::star::uno::Reference<com::sun::star::frame::XController> const&) + 1898
25  libfwkmxi.dylib               	0x1a84a64b framework::Frame::close(unsigned char) + 571
26  libfwkmxi.dylib               	0x1a83b0f0 framework::Desktop::impl_closeFrames(unsigned char) + 832
27  libfwkmxi.dylib               	0x1a83b58e framework::Desktop::terminate() + 302
28  libsofficeapp.dylib           	0x0006229b 0x58000 + 41627
29  libvclmxi.dylib               	0x01955ba8 vcl::LazyDeletor<Window>::~LazyDeletor() + 19048
30  libvclmxi.dylib               	0x01a26333 SalGetDesktopEnvironment() + 18563
31  com.apple.AppKit              	0x963c0356 -[NSApplication _docController:shouldTerminate:] + 84
32  com.apple.AppKit              	0x963bfe7c -[NSDocumentController(NSInternal) _continueTerminationHavingClosedAllDocuments:context:] + 160
33  com.apple.AppKit              	0x963bfc5a -[NSDocumentController(NSInternal) _shouldTerminateWithDelegate:shouldTerminateSelector:] + 1376
34  com.apple.AppKit              	0x963bf533 -[NSApplication _shouldTerminate] + 373
35  com.apple.AppKit              	0x963bf0a5 -[NSApplication terminate:] + 519
36  com.apple.AppKit              	0x961c4a26 -[NSApplication sendAction:to:from:] + 112
37  com.apple.AppKit              	0x961c48d9 -[NSMenuItem _corePerformAction] + 435
38  com.apple.AppKit              	0x961c45ca -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] + 174
39  com.apple.AppKit              	0x961c44b6 -[NSMenu performActionForItemAtIndex:] + 65
40  com.apple.AppKit              	0x961c4469 -[NSMenu _internalPerformActionForItemAtIndex:] + 50
41  com.apple.AppKit              	0x961c43cf -[NSMenuItem _internalPerformActionThroughMenuIfPossible] + 97
42  com.apple.AppKit              	0x961c4313 -[NSCarbonMenuImpl _carbonCommandProcessEvent:handlerCallRef:] + 336
43  com.apple.AppKit              	0x961b8a55 NSSLMMenuEventHandler + 404
44  com.apple.HIToolbox           	0x92df4c2f DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1567
45  com.apple.HIToolbox           	0x92df3ef6 SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 411
46  com.apple.HIToolbox           	0x92e167f3 SendEventToEventTarget + 52
47  com.apple.HIToolbox           	0x92e42e87 SendHICommandEvent(unsigned long, HICommand const*, unsigned long, unsigned long, unsigned char, void const*, OpaqueEventTargetRef*, OpaqueEventTargetRef*, OpaqueEventRef**) + 448
48  com.apple.HIToolbox           	0x92e67b90 SendMenuCommandWithContextAndModifiers + 66
49  com.apple.HIToolbox           	0x92e67b47 SendMenuItemSelectedEvent + 121
50  com.apple.HIToolbox           	0x92e67a5d FinishMenuSelection(SelectionData*, MenuResult*, MenuResult*) + 152
51  com.apple.HIToolbox           	0x92e37160 MenuSelectCore(MenuData*, Point, double, unsigned long, OpaqueMenuRef**, unsigned short*) + 454
52  com.apple.HIToolbox           	0x92e368bb _HandleMenuSelection2 + 465
53  com.apple.HIToolbox           	0x92e366d9 _HandleMenuSelection + 53
54  com.apple.AppKit              	0x961b1f96 _NSHandleCarbonMenuEvent + 285
55  com.apple.AppKit              	0x96186b46 _DPSNextEvent + 2304
56  com.apple.AppKit              	0x96185dd6 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 156
57  libvclmxi.dylib               	0x01a21f66 SalGetDesktopEnvironment() + 1206
58  libvclmxi.dylib               	0x01716180 Application::Yield(bool) + 96
59  libvclmxi.dylib               	0x01716281 Application::Execute() + 97
60  libsofficeapp.dylib           	0x0006a785 0x58000 + 75653
61  libvclmxi.dylib               	0x0171e268 DeInitVCL() + 3624
62  libvclmxi.dylib               	0x01a2181b component_getFactory + 209547
63  libvclmxi.dylib               	0x01a26c4b SalGetDesktopEnvironment() + 20891
64  com.apple.AppKit              	0x96148253 -[NSApplication run] + 917
65  com.apple.AppKit              	0x96140289 NSApplicationMain + 574
66  libvclmxi.dylib               	0x01a225a7 SalGetDesktopEnvironment() + 2807
67  libvclmxi.dylib               	0x0171e311 SVMain() + 17
68  libsofficeapp.dylib           	0x00096f65 soffice_main + 245
69  org.libreoffice.script        	0x00001ebe main + 30
70  org.libreoffice.script        	0x00001822 start + 258
71  org.libreoffice.script        	0x00001749 start + 41
Comment 1 noname 2011-08-05 12:33:33 UTC 
Confirmed with [Win2K LibreOffice 3.4.2 OOO340m1 (Build:203)].
If someone on linux can confirm this too, you can set 'Platform' to 'All'.
Comment 2 gleppert 2011-08-05 14:26:31 UTC 
Is this bug related to bug 39510? Or even a duplicate?
Comment 3 manj_k 2011-08-05 15:51:01 UTC 
(In reply to comment #2)
> Is this bug related to bug 39510? Or even a duplicate?

Yes, there are two paragraphs with endnotes--over two pages--which cause the crash
(on pages 1/2 [endnotes 2-11], on pages 6/7 [endnotes 36-38]).

After splitting these paragraphs, Writer doesn't crash anymore 
(see attached file 'gutmann_modified.doc').

[Tested with LibO 3.4.2 release on WinXP 32b]

*** This bug has been marked as a duplicate of bug 39510 ***
Comment 4 manj_k 2011-08-05 15:53:05 UTC 
Created attachment 49978 [details]
Modified document 'gutmann_modified.doc' without crash
Comment 5 Björn Michaelsen 2011-12-23 13:24:58 UTC 
Since all new unconfirmed bugs start in state UNCONFIRMED now and old unconfirmed bugs were moved to NEEDINFO with a explanatory comment, all bugs promoted above those bug states to NEW and later are automatically confirmed making the CONFIRMED whiteboard status redundant. Thus it will be removed.
Comment 6 manj_k 2011-12-25 08:31:21 UTC 
CLOSED