117326 – Invoking Insert > Cross-reference causes fatal crash

Bug 117326 - Invoking Insert > Cross-reference causes fatal crash

Summary: Invoking Insert > Cross-reference causes fatal crash

Status:	RESOLVED INSUFFICIENTDATA

Alias:	None

Product:	LibreOffice
Classification:	Unclassified
Component:	Writer (show other bugs)
Version: (earliest affected)	6.3.4.2 release
Hardware:	x86-64 (AMD64) Linux (All)

Importance:	medium normal
Assignee:	Not Assigned

URL:
Whiteboard:
Keywords:	possibleRegression

Depends on:
Blocks:	Fields-Cross-Reference
	Show dependency tree / graph

Reported:	2018-04-29 04:29 UTC by Pierre
Modified:	2020-02-05 12:36 UTC (History)
CC List:	2 users (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Pierre 2018-04-29 04:29:49 UTC

Description:
When I select Insert > Cross-reference in Writer, I get a dialog asking me to log onto a local mysql server. Clicking Cancel or OK causes Libreoffice 6.0.3.2 (x64) to crash. 


Steps to Reproduce:
1.Click Insert > Cross-reference
2.MysQL Dialog erupts - Click Cancel or give credentials and OK
3.Libreoffice Writer crashes. 

Actual Results:  
Windows says Libreoffice has crahsed. Libreoffice closes.

Expected Results:
CRASH!! (Christ this is tedious, Why don't I use MS Office and avoid this crap?)


Reproducible: Always


User Profile Reset: Yes



Additional Info:
N/A you got it!


User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0

Comment 1 Dieter 2018-04-29 05:10:33 UTC

I don't get that dialog. Do you get a crash report? I'm not sure, but perhaps it it helpful, if you attach a screenshot of the dialog?

Comment 2 Jacques Guilleron 2018-04-29 09:09:05 UTC

Hi Pierre,

I don't reproduce either. Can you try to Restart in safe mode(Help menu)?
This action matches with start with a provisory fresh profile without extention.

Comment 3 Dieter 2018-04-29 10:29:09 UTC

Hi Pierre,

I assume that your comments in the meta bug 107905 belong to this bug here. So please add them here.

Comment 4 QA Administrators 2018-11-05 16:08:05 UTC Comment hidden (obsolete)

Dear Bug Submitter,

This bug has been in NEEDINFO status with no change for at least
6 months. Please provide the requested information as soon as
possible and mark the bug as UNCONFIRMED. Due to regular bug
tracker maintenance, if the bug is still in NEEDINFO status with
no change in 30 days the QA team will close the bug as INSUFFICIENTDATA
due to lack of needed information.

For more information about our NEEDINFO policy please read the
wiki located here:
https://wiki.documentfoundation.org/QA/Bugzilla/Fields/Status/NEEDINFO

If you have already provided the requested information, please
mark the bug as UNCONFIRMED so that the QA team knows that the
bug is ready to be confirmed.
 
Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-NeedInfo-Ping-20181105

Comment 5 QA Administrators 2018-12-03 13:20:14 UTC Comment hidden (obsolete)

Dear Bug Submitter,

Please read this message in its entirety before proceeding.

Your bug report is being closed as INSUFFICIENTDATA due to inactivity and
a lack of information which is needed in order to accurately
reproduce and confirm the problem. We encourage you to retest
your bug against the latest release. If the issue is still
present in the latest stable release, we need the following
information (please ignore any that you've already provided):

a) Provide details of your system including your operating
   system and the latest version of LibreOffice that you have
   confirmed the bug to be present

b) Provide easy to reproduce steps – the simpler the better

c) Provide any test case(s) which will help us confirm the problem

d) Provide screenshots of the problem if you think it might help

e) Read all comments and provide any requested information

Once all of this is done, please set the bug back to UNCONFIRMED
and we will attempt to reproduce the issue. Please do not:

a) respond via email 

b) update the version field in the bug or any of the other details
   on the top section of our bug tracker

Warm Regards,
QA Team

MassPing-NeedInfo-20181203

Comment 6 Rod Sheaff 2020-02-05 11:18:04 UTC

Inserting cross-reference crashes LO writer. This bug can sometimes be fixed by purging and reinstalling LO: but only temporarily. 

Steps
1. Open LO
2. Open existing or create new *.odt document. 
3. Insert -> Cross reference
4. Crash! 
5. Document Recovery notification appears: 'The following files will be recovered:' 

Deleting databases (recommended on another website) makes no difference. 

With backtrace, LO crashes almost immediately (even before trying to insert cross-reference). Backtrace - at this point I am out of my depth - was: 

~~~~~~~~~~~~~~~~~~~
warning: Currently logging to gdbtrace.log.  Turn the logging off and on to make the new setting effective.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Detaching after fork from child process 8429]
warning: Corrupted shared library list: 0x55bcaf4d7360 != 0x55bcaf4c4570
[New Thread 0x7f926195f700 (LWP 8430)]
[New Thread 0x7f925bfff700 (LWP 8431)]
[New Thread 0x7f925b435700 (LWP 8432)]
[New Thread 0x7f925ac34700 (LWP 8433)]
[New Thread 0x7f924a007700 (LWP 8434)]
[Thread 0x7f924a007700 (LWP 8434) exited]
[New Thread 0x7f924a007700 (LWP 8435)]
[Thread 0x7f924a007700 (LWP 8435) exited]
[Thread 0x7f925b435700 (LWP 8432) exited]
[New Thread 0x7f925b435700 (LWP 8437)]
[Detaching after vfork from child process 8438]
[New Thread 0x7f924a007700 (LWP 8440)]
[New Thread 0x7f924270f700 (LWP 8441)]
[Thread 0x7f924270f700 (LWP 8441) exited]
[New Thread 0x7f924270f700 (LWP 8442)]
[Thread 0x7f924270f700 (LWP 8442) exited]
[New Thread 0x7f924270f700 (LWP 8443)]
[Thread 0x7f924270f700 (LWP 8443) exited]
[New Thread 0x7f924270f700 (LWP 8444)]
[Thread 0x7f924270f700 (LWP 8444) exited]
[New Thread 0x7f924270f700 (LWP 8445)]
[Thread 0x7f924270f700 (LWP 8445) exited]
[New Thread 0x7f924270f700 (LWP 8446)]
[Thread 0x7f924270f700 (LWP 8446) exited]
[New Thread 0x7f924270f700 (LWP 8447)]
[New Thread 0x7f9241f0e700 (LWP 8448)]
[Thread 0x7f924270f700 (LWP 8447) exited]
[Thread 0x7f9241f0e700 (LWP 8448) exited]
[Thread 0x7f924a007700 (LWP 8440) exited]
Installing openjdk unwinder
Traceback (most recent call last):
  File "/usr/share/gdb/auto-load/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so-gdb.py", line 52, in <module>
    class Types(object):
  File "/usr/share/gdb/auto-load/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so-gdb.py", line 66, in Types
    nmethodp_t = gdb.lookup_type('nmethod').pointer()
gdb.error: No type named nmethod.
[Thread 0x7f925b435700 (LWP 8437) exited]

Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
0x00007f92250002b4 in ?? ()
#0  0x00007f92250002b4 in  ()
#1  0x0000000000000246 in  ()
#2  0x00007f9225000160 in  ()
#3  0x00007f9241402494 in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
#4  0x00007fffac482220 in  ()
#5  0x00007f924116095d in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so

Thread 5 (Thread 0x7f925ac34700 (LWP 8433)):
#0  0x00007f926b15b32f in __libc_accept (fd=10, addr=..., len=0x0) at ../sysdeps/unix/sysv/linux/accept.c:26
#1  0x00007f926b2a258f in osl_acceptPipe () at /usr/lib/libreoffice/program/libuno_sal.so.3
#2  0x00007f926d0c6e72 in  () at /usr/lib/libreoffice/program/libmergedlo.so
#3  0x00007f9268de4dab in salhelper::Thread::run() () at /usr/lib/libreoffice/program/libuno_salhelpergcc3.so.3
#4  0x00007f9268de4f2e in  () at /usr/lib/libreoffice/program/libuno_salhelpergcc3.so.3
#5  0x00007f926b2a8109 in  () at /usr/lib/libreoffice/program/libuno_sal.so.3
#6  0x00007f9268759669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#7  0x00007f926b15a323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7f925bfff700 (LWP 8431)):
#0  0x00007f926b14dc2f in __GI___poll (fds=0x7f92540025e0, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007f926a7b9a3e in  () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007f926a7b9b73 in g_main_context_iteration () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007f92644bd6a5 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007f926446463b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007f926429da75 in QThread::exec() () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007f9262507efa in  () at /usr/lib/x86_64-linux-gnu/libQt5DBus.so.5
#7  0x00007f926429ecc2 in  () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#8  0x00007f9268759669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#9  0x00007f926b15a323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 2 (Thread 0x7f926195f700 (LWP 8430)):
#0  0x00007f926b14dc2f in __GI___poll (fds=0x7f926195e768, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007f92664eb917 in  () at /usr/lib/x86_64-linux-gnu/libxcb.so.1
#2  0x00007f92664ed53a in xcb_wait_for_event () at /usr/lib/x86_64-linux-gnu/libxcb.so.1
#3  0x00007f9261eb8288 in  () at /usr/lib/x86_64-linux-gnu/libQt5XcbQpa.so.5
#4  0x00007f926429ecc2 in  () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007f9268759669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#6  0x00007f926b15a323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7f926a03f580 (LWP 8416)):
#0  0x00007f92250002b4 in  ()
#1  0x0000000000000246 in  ()
#2  0x00007f9225000160 in  ()
#3  0x00007f9241402494 in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
#4  0x00007fffac482220 in  ()
#5  0x00007f924116095d in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
A debugging session is active.

	Inferior 1 [process 8416] will be killed.

Quit anyway? (y or n) [answered Y; input not from terminal]
warning: Currently logging to gdbtrace.log.  Turn the logging off and on to make the new setting effective.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Detaching after fork from child process 8495]
warning: Corrupted shared library list: 0x563319c18360 != 0x563319c05570
[New Thread 0x7fe01d787700 (LWP 8496)]
[New Thread 0x7fe017e3f700 (LWP 8497)]
[New Thread 0x7fe017265700 (LWP 8498)]
[New Thread 0x7fe016a64700 (LWP 8499)]
[New Thread 0x7fe005e2f700 (LWP 8500)]
[Thread 0x7fe005e2f700 (LWP 8500) exited]
[New Thread 0x7fe005e2f700 (LWP 8501)]
[Thread 0x7fe005e2f700 (LWP 8501) exited]
[Thread 0x7fe017265700 (LWP 8498) exited]
[New Thread 0x7fe017265700 (LWP 8503)]
[Detaching after vfork from child process 8504]
[New Thread 0x7fe005e2f700 (LWP 8506)]
[New Thread 0x7fdffe747700 (LWP 8507)]
[Thread 0x7fdffe747700 (LWP 8507) exited]
[New Thread 0x7fdffe747700 (LWP 8508)]
[Thread 0x7fdffe747700 (LWP 8508) exited]
[New Thread 0x7fdffe747700 (LWP 8509)]
[Thread 0x7fdffe747700 (LWP 8509) exited]
[New Thread 0x7fdffe747700 (LWP 8512)]
[Thread 0x7fdffe747700 (LWP 8512) exited]
[New Thread 0x7fdffe747700 (LWP 8513)]
[Thread 0x7fdffe747700 (LWP 8513) exited]
[New Thread 0x7fdffe747700 (LWP 8514)]
[Thread 0x7fdffe747700 (LWP 8514) exited]
[New Thread 0x7fdffe747700 (LWP 8515)]
[New Thread 0x7fdffdf46700 (LWP 8516)]
[Thread 0x7fdffe747700 (LWP 8515) exited]
[Thread 0x7fdffdf46700 (LWP 8516) exited]
[Thread 0x7fe005e2f700 (LWP 8506) exited]
Installing openjdk unwinder
Traceback (most recent call last):
  File "/usr/share/gdb/auto-load/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so-gdb.py", line 52, in <module>
    class Types(object):
  File "/usr/share/gdb/auto-load/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so-gdb.py", line 66, in Types
    nmethodp_t = gdb.lookup_type('nmethod').pointer()
gdb.error: No type named nmethod.

Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
0x00007fdfe10002b4 in ?? ()
#0  0x00007fdfe10002b4 in  ()
#1  0x0000000000000246 in  ()
#2  0x00007fdfe1000160 in  ()
#3  0x00007fdffd43a494 in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
#4  0x00007ffd52600100 in  ()
#5  0x00007fdffd19895d in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so

Thread 8 (Thread 0x7fe017265700 (LWP 8503)):
#0  0x00007fe0245886e0 in futex_abstimed_wait_cancelable (private=<optimised out>, abstime=0x7fe017264830, clockid=<optimised out>, expected=0, futex_word=0x56331e4f6b98) at ../sysdeps/unix/sysv/linux/futex-internal.h:208
#1  0x00007fe0245886e0 in __pthread_cond_wait_common (abstime=0x7fe017264830, clockid=<optimised out>, mutex=0x56331e4f6ba0, cond=0x56331e4f6b70) at pthread_cond_wait.c:520
#2  0x00007fe0245886e0 in __pthread_cond_timedwait (cond=0x56331e4f6b70, mutex=0x56331e4f6ba0, abstime=0x7fe017264830) at pthread_cond_wait.c:656
#3  0x00007fe0270c3868 in osl_waitCondition () at /usr/lib/libreoffice/program/libuno_sal.so.3
#4  0x00007fe02848d833 in  () at /usr/lib/libreoffice/program/libmergedlo.so
#5  0x00007fe024c0cdab in salhelper::Thread::run() () at /usr/lib/libreoffice/program/libuno_salhelpergcc3.so.3
#6  0x00007fe024c0cf2e in  () at /usr/lib/libreoffice/program/libuno_salhelpergcc3.so.3
#7  0x00007fe0270d0109 in  () at /usr/lib/libreoffice/program/libuno_sal.so.3
#8  0x00007fe024581669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#9  0x00007fe026f82323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 5 (Thread 0x7fe016a64700 (LWP 8499)):
#0  0x00007fe026f8332f in __libc_accept (fd=10, addr=..., len=0x0) at ../sysdeps/unix/sysv/linux/accept.c:26
#1  0x00007fe0270ca58f in osl_acceptPipe () at /usr/lib/libreoffice/program/libuno_sal.so.3
#2  0x00007fe028eeee72 in  () at /usr/lib/libreoffice/program/libmergedlo.so
#3  0x00007fe024c0cdab in salhelper::Thread::run() () at /usr/lib/libreoffice/program/libuno_salhelpergcc3.so.3
#4  0x00007fe024c0cf2e in  () at /usr/lib/libreoffice/program/libuno_salhelpergcc3.so.3
#5  0x00007fe0270d0109 in  () at /usr/lib/libreoffice/program/libuno_sal.so.3
#6  0x00007fe024581669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#7  0x00007fe026f82323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7fe017e3f700 (LWP 8497)):
#0  0x00007fe026f75c2f in __GI___poll (fds=0x7fe0100025e0, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fe0265e1a3e in  () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fe0265e1b73 in g_main_context_iteration () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007fe0202e56a5 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#4  0x00007fe02028c63b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007fe0200c5a75 in QThread::exec() () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#6  0x00007fe01e32fefa in  () at /usr/lib/x86_64-linux-gnu/libQt5DBus.so.5
#7  0x00007fe0200c6cc2 in  () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#8  0x00007fe024581669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#9  0x00007fe026f82323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 2 (Thread 0x7fe01d787700 (LWP 8496)):
#0  0x00007fe026f75c2f in __GI___poll (fds=0x7fe01d786768, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fe022313917 in  () at /usr/lib/x86_64-linux-gnu/libxcb.so.1
#2  0x00007fe02231553a in xcb_wait_for_event () at /usr/lib/x86_64-linux-gnu/libxcb.so.1
#3  0x00007fe01dce0288 in  () at /usr/lib/x86_64-linux-gnu/libQt5XcbQpa.so.5
#4  0x00007fe0200c6cc2 in  () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#5  0x00007fe024581669 in start_thread (arg=<optimised out>) at pthread_create.c:479
#6  0x00007fe026f82323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7fe025eaf580 (LWP 8491)):
#0  0x00007fdfe10002b4 in  ()
#1  0x0000000000000246 in  ()
#2  0x00007fdfe1000160 in  ()
#3  0x00007fdffd43a494 in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
#4  0x00007ffd52600100 in  ()
#5  0x00007fdffd19895d in  () at /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
A debugging session is active.

	Inferior 1 [process 8491] will be killed.

Quit anyway? (y or n) [answered Y; input not from terminal]

Comment 7 Rod Sheaff 2020-02-05 12:36:54 UTC

Forgot to say: 
Kubuntu 19.10, LO 6.3.4.2, jvm-13-openjdk-amd64, amd64 desktop.