Bug 124492 - FILESAVE XLSX: crash when save after click 'insert sheet after this' or 'insert sheet before this'
Summary: FILESAVE XLSX: crash when save after click 'insert sheet after this' or 'inse...
Status: RESOLVED INSUFFICIENTDATA
Alias: None
Product: LibreOffice Online
Classification: Unclassified
Component: Calc (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
: 124435 (view as bug list)
Depends on:
Blocks:
 
Reported: 2019-04-02 09:05 UTC by wanglei
Modified: 2020-04-09 03:36 UTC (History)
4 users (show)

See Also:
Crash report or crash signature:


Attachments
XLSX file for test crash (8.63 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet)
2019-04-10 03:30 UTC, wanglei
Details

Note You need to log in before you can comment on or make changes to this bug.
Description wanglei 2019-04-02 09:05:24 UTC
It's happened in nextcloud with the latest docker image 'libreoffice/online:master'

the step of reproduction:

1. create a new xlsx file in windows 7, and then upload it to nextcloud
2. click it for opening
3. click 'insert sheet after this' or 'insert sheet before it'
4. click 'save', and then after waiting some seconds, it will automatically reload, and the new sheet will be disappeared
5. the server crash and we can find more detail in docker logs


notice: make it in Chinese, Japanese or Castellano language, not in English. In English, it may ok.



the stack traceback:

kit-02433-02459 2019-04-02 06:41:36.841933 [ lokit_046 ] SIG   Fatal signal received: SIGSEGV
Backtrace 2433:                                                                                   
/usr/bin/loolforkit(_ZN7SigUtil13dumpBacktraceEv+0x64) [0x55fb4a6bd114]                                                                         
/usr/bin/loolforkit(+0xb61a2) [0x55fb4a6be1a2]                
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fd3ac04e890]                              
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem16GetGraphicObjectERKN3rtl8OUStringE+0x23) [0x7fd3a75f5013]
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem10GetGraphicERKN3rtl8OUStringE+0x9) [0x7fd3a75f53f9]
/opt/libreoffice/program/libscfiltlo.so(+0x1638b8) [0x7fd39234e8b8]                                                  
/opt/libreoffice/program/libscfiltlo.so(+0xcdddb) [0x7fd3922b8ddb]                                               
/opt/libreoffice/program/libscfiltlo.so(+0xce860) [0x7fd3922b9860]
/opt/libreoffice/program/libscfiltlo.so(+0x1849f6) [0x7fd39236f9f6]    
/opt/libreoffice/program/libooxlo.so(_ZN3oox4core10FilterBase6filterERKN3com3sun4star3uno8SequenceINS4_5beans13PropertyValueEEE+0x195) [0x7fd391c906f5]                                                          
/opt/libreoffice/program/libscfiltlo.so(+0x27ee0f) [0x7fd392469e0f]
/opt/libreoffice/program/libmergedlo.so(_ZN14SfxObjectShell8ExportToER9SfxMedium+0x634) [0x7fd3a7d8c4b4]
/opt/libreoffice/program/libmergedlo.so(+0x1bf690e) [0x7fd3a7d9590e]
/opt/libreoffice/program/libmergedlo.so(+0x1bf8036) [0x7fd3a7d97036]                                                 
/opt/libreoffice/program/libmergedlo.so(+0x1bf8533) [0x7fd3a7d97533]
/opt/libreoffice/program/libmergedlo.so(_ZN12SfxBaseModel9storeSelfERKN3com3sun4star3uno8SequenceINS2_5beans13PropertyValueEEE+0x98b) [0x7fd3a7dca89b]
/opt/libreoffice/program/libmergedlo.so(+0x1bca36b) [0x7fd3a7d6936b]
/opt/libreoffice/program/libmergedlo.so(+0x1be4aaa) [0x7fd3a7d83aaa]
/opt/libreoffice/program/libmergedlo.so(_ZN8SfxShell11ExecuteSlotER10SfxRequestPK12SfxInterface+0x4b) [0x7fd3a7c2bd0b]
/opt/libreoffice/program/../program/libsclo.so(_ZN14ScTabViewShell11ExecuteSaveER10SfxRequest+0x8f) [0x7fd3938a45bf]
/opt/libreoffice/program/libmergedlo.so(+0x1a69bfe) [0x7fd3a7c08bfe]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher8Execute_ER8SfxShellRK7SfxSlotR10SfxRequest11SfxCallMode+0xe6) [0x7fd3a7c09196]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher7ExecuteEt11SfxCallModePK10SfxItemSetS3_t+0x173) [0x7fd3a7c0f303]
/opt/libreoffice/program/libmergedlo.so(+0x1abea29) [0x7fd3a7c5da29]
/opt/libreoffice/program/libmergedlo.so(_ZN10comphelper15dispatchCommandERKN3rtl8OUStringERKN3com3sun4star3uno8SequenceINS6_5beans13PropertyValue
EEERKNS7_9ReferenceINS6_5frame23XDispatchResultListenerEEE+0x48f) [0x7fd3a723c0af]
/opt/libreoffice/program/libmergedlo.so(+0x1d54bae) [0x7fd3a7ef3bae]
/usr/bin/loolforkit(_ZN12ChildSession10unoCommandEPKciRKSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS8_EE+0x16a) [0x55fb4a63
559a]
/usr/bin/loolforkit(_ZN12ChildSession12_handleInputEPKci+0x2acc) [0x55fb4a64fcfc]
/usr/bin/loolforkit(_ZN7Session13handleMessageEb8WSOpCodeRSt6vectorIcSaIcEE+0x6a) [0x55fb4a6a9bda]
/usr/bin/loolforkit(_ZN8Document14forwardToChildERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKSt6vectorIcS4_E+0xa01) [0x55fb4a67f4b1]
/usr/bin/loolforkit(_ZN8Document3runEv+0xe47) [0x55fb4a688547]
/usr/lib/libPocoFoundation.so.50(_ZN4Poco10ThreadImpl13runnableEntryEPv+0x99) [0x7fd3acb5bde9]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x76db) [0x7fd3ac0436db]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x3f) [0x7fd3abd6c88f]
kit-02433-02459 2019-04-02 06:41:36.849021 [ lokit_046 ] SIG  SIGSYS trapped with code: 1 and context 140546140847616
kit-02433-02459 2019-04-02 06:41:36.849031 [ lokit_046 ] SIG   seccomp trapped signal, un-authorized sys-call: 62
Backtrace 2433:
/usr/bin/loolforkit(_ZN7SigUtil13dumpBacktraceEv+0x64) [0x55fb4a6bd114]
/usr/bin/loolforkit(+0xa61e8) [0x55fb4a6ae1e8]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fd3ac04e890]
/lib/x86_64-linux-gnu/libc.so.6(kill+0x7) [0x7fd3abc8a187]
/usr/bin/loolforkit(+0xb61b0) [0x55fb4a6be1b0]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fd3ac04e890]
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem16GetGraphicObjectERKN3rtl8OUStringE+0x23) [0x7fd3a75f5013]
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem10GetGraphicERKN3rtl8OUStringE+0x9) [0x7fd3a75f53f9]
/opt/libreoffice/program/libscfiltlo.so(+0x1638b8) [0x7fd39234e8b8]
/opt/libreoffice/program/libscfiltlo.so(+0xcdddb) [0x7fd3922b8ddb]
/opt/libreoffice/program/libscfiltlo.so(+0xce860) [0x7fd3922b9860]
/opt/libreoffice/program/libscfiltlo.so(+0x1849f6) [0x7fd39236f9f6]
/opt/libreoffice/program/libooxlo.so(_ZN3oox4core10FilterBase6filterERKN3com3sun4star3uno8SequenceINS4_5beans13PropertyValueEEE+0x195) [0x7fd391c906f5]
/opt/libreoffice/program/libscfiltlo.so(+0x27ee0f) [0x7fd392469e0f]
/opt/libreoffice/program/libmergedlo.so(_ZN14SfxObjectShell8ExportToER9SfxMedium+0x634) [0x7fd3a7d8c4b4]
/opt/libreoffice/program/libmergedlo.so(+0x1bf690e) [0x7fd3a7d9590e]
/opt/libreoffice/program/libmergedlo.so(+0x1bf8036) [0x7fd3a7d97036]
/opt/libreoffice/program/libmergedlo.so(+0x1bf8533) [0x7fd3a7d97533]
/opt/libreoffice/program/libmergedlo.so(_ZN12SfxBaseModel9storeSelfERKN3com3sun4star3uno8SequenceINS2_5beans13PropertyValueEEE+0x98b) [0x7fd3a7dca89b]
/opt/libreoffice/program/libmergedlo.so(+0x1bca36b) [0x7fd3a7d6936b]
/opt/libreoffice/program/libmergedlo.so(+0x1be4aaa) [0x7fd3a7d83aaa]
/opt/libreoffice/program/libmergedlo.so(_ZN8SfxShell11ExecuteSlotER10SfxRequestPK12SfxInterface+0x4b) [0x7fd3a7c2bd0b]
/opt/libreoffice/program/../program/libsclo.so(_ZN14ScTabViewShell11ExecuteSaveER10SfxRequest+0x8f) [0x7fd3938a45bf]
/opt/libreoffice/program/libmergedlo.so(+0x1a69bfe) [0x7fd3a7c08bfe]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher8Execute_ER8SfxShellRK7SfxSlotR10SfxRequest11SfxCallMode+0xe6) [0x7fd3a7c09196]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher7ExecuteEt11SfxCallModePK10SfxItemSetS3_t+0x173) [0x7fd3a7c0f303]
/opt/libreoffice/program/libmergedlo.so(+0x1abea29) [0x7fd3a7c5da29]
/opt/libreoffice/program/libmergedlo.so(_ZN10comphelper15dispatchCommandERKN3rtl8OUStringERKN3com3sun4star3uno8SequenceINS6_5beans13PropertyValueEEERKNS7_9ReferenceINS6_5frame23XDispatchResultListenerEEE+0x48f)[0x7fd3a723c0af]
/opt/libreoffice/program/libmergedlo.so(+0x1d54bae) [0x7fd3a7ef3bae]
/usr/bin/loolforkit(_ZN12ChildSession10unoCommandEPKciRKSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS8_EE+0x16a) [0x55fb4a63559a]
/usr/bin/loolforkit(_ZN12ChildSession12_handleInputEPKci+0x2acc) [0x55fb4a64fcfc]
/usr/bin/loolforkit(_ZN7Session13handleMessageEb8WSOpCodeRSt6vectorIcSaIcEE+0x6a) [0x55fb4a6a9bda]
/usr/bin/loolforkit(_ZN8Document14forwardToChildERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKSt6vectorIcS4_E+0xa01) [0x55fb4a67f4b1]
/usr/bin/loolforkit(_ZN8Document3runEv+0xe47) [0x55fb4a688547]
/usr/lib/libPocoFoundation.so.50(_ZN4Poco10ThreadImpl13runnableEntryEPv+0x99) [0x7fd3acb5bde9]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x76db) [0x7fd3ac0436db]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x3f) [0x7fd3abd6c88f]
wsd-00015-02457 2019-04-02 06:41:36.884245 [ docbroker_046 ] ERR  DocumentBroker stopping although modified  Broker: 新建 Microsoft Excel 工作表.
xlsx pid: 2433 has live sessions
  loaded in: 961ms
  sent: 136506
  recv: 10328
  modified?: 1
  jail id: NmC1J221OhtoQUcR
  filename: 新建 Microsoft Excel 工作表.xlsx
  public uri: http://10.16.66.182:12000/apps/richdocuments/wopi/files/317_octkxhbrr0lj?access_token=SAcLC1WvRQzSLEu6M0mtNpL7lZm5YvrA&access_token
_ttl=0&permission=edit
  jailed uri: file:///user/docs/NmC1J221OhtoQUcR/%E6%96%B0%E5%BB%BA%20Microsoft%20Excel%20%E5%B7%A5%E4%BD%9C%E8%A1%A8.xlsx
  doc key: /apps/richdocuments/wopi/files/317_octkxhbrr0lj
  doc id: 046
  num sessions: 1
  last saved: Tue Apr  2 06:41:29 2019
  cursor 0, 0( 0,0)
  tile cache: num: 37 size: 35969 bytes
     - '9_256x256.0,0.3840x3840.png' - 979 bytes
     - '9_256x256.0,11520.3840x3840.png' - 980 bytes
     - '9_256x256.0,3840.3840x3840.png' - 981 bytes
     - '9_256x256.0,7680.3840x3840.png' - 979 bytes
     - '9_256x256.11520,0.3840x3840.png' - 996 bytes
     - '9_256x256.11520,11520.3840x3840.png' - 998 bytes
     - '9_256x256.11520,3840.3840x3840.png' - 997 bytes
     - '9_256x256.11520,7680.3840x3840.png' - 996 bytes
     - '9_256x256.15360,0.3840x3840.png' - 1001 bytes
     - '9_256x256.15360,11520.3840x3840.png' - 1003 bytes
     - '9_256x256.15360,3840.3840x3840.png' - 1002 bytes
     - '9_256x256.15360,7680.3840x3840.png' - 1000 bytes
     - '9_256x256.19200,0.3840x3840.png' - 1003 bytes
     - '9_256x256.19200,11520.3840x3840.png' - 1005 bytes
     - '9_256x256.19200,3840.3840x3840.png' - 1004 bytes
     - '9_256x256.19200,7680.3840x3840.png' - 1002 bytes
     - '9_256x256.23040,0.3840x3840.png' - 1003 bytes
     - '9_256x256.23040,11520.3840x3840.png' - 1004 bytes
     - '9_256x256.23040,3840.3840x3840.png' - 1003 bytes
     - '9_256x256.23040,7680.3840x3840.png' - 1002 bytes
     - '9_256x256.26880,0.3840x3840.png' - 1003 bytes
     - '9_256x256.26880,11520.3840x3840.png' - 1005 bytes
     - '9_256x256.26880,3840.3840x3840.png' - 1004 bytes
     - '9_256x256.26880,7680.3840x3840.png' - 1002 bytes
     - '9_256x256.30720,0.3840x3840.png' - 1006 bytes
     - '9_256x256.30720,11520.3840x3840.png' - 1007 bytes
     - '9_256x256.30720,3840.3840x3840.png' - 1007 bytes
     - '9_256x256.30720,7680.3840x3840.png' - 1005 bytes
     - '9_256x256.3840,0.3840x3840.png' - 1002 bytes
     - '9_256x256.3840,11520.3840x3840.png' - 1005 bytes
     - '9_256x256.3840,3840.3840x3840.png' - 1003 bytes
     - '9_256x256.3840,7680.3840x3840.png' - 1003 bytes
     - '9_256x256.7680,0.3840x3840.png' - 994 bytes
     - '9_256x256.7680,11520.3840x3840.png' - 996 bytes
     - '9_256x256.7680,3840.3840x3840.png' - 995 bytes
     - '9_256x256.7680,7680.3840x3840.png' - 993 bytes
     - 'unsaved.txt' - 1 bytes
 Poll [1] - wakeup r: 21 w: 22
        fd      events  rsize   wsize
        15      1       0       0        r: 10328        w: 136506      alive     0ms
                id: 035b
                name: ToClient-035b
                disconnected: 0
                isActive: 1
                isCloseFrame: 0
                isReadOnly: 0
                docURL: http%3A%2F%2F10.16.66.182%3A12000%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F317_octkxhbrr0lj
                jailedFilePath:
                docPwd:
                haveDocPwd: 0
                isDocPwdProtected: 0
                DocOptions:
                userId: cstic
                userName: cstic
                lang: zh-CN
                isReadOnly: 0
                isDocumentOwner: 1
                isAttached: 1
                keyEvents: 1
                sent/keystroke: 136506bytes

                queue size 0
| wsd/DocumentBroker.cpp:351
Comment 1 Aron Budea 2019-04-10 00:15:29 UTC
*** Bug 124435 has been marked as a duplicate of this bug. ***
Comment 2 Aron Budea 2019-04-10 00:19:01 UTC
I can't reproduce this with a file I created, could either of you please upload a sample spreadsheet where only the sheet insertion step has to be done to get the crash?
Comment 3 wanglei 2019-04-10 03:30:52 UTC
Created attachment 150639 [details]
XLSX file for test crash

file environment: Microsoft Excel 2010 in Windows 7 Chinese. Just create, do nothing about it.

Notice:

It will crash in libreoffice/online:master image. Buf after I test collabora/code:latest image, it's ok. 

May the file will help you.
Comment 4 Aron Budea 2019-04-17 01:19:28 UTC
Thanks for the sample! I'm afraid I couldn't reproduce even with that file, though I wasn't testing with the docker, but with a local master build, not sure if that could matter.
Comment 5 Aron Budea 2019-09-10 06:33:13 UTC
Does the crash still happen with a recent version?
Comment 6 QA Administrators 2020-03-09 02:54:24 UTC Comment hidden (obsolete)
Comment 7 QA Administrators 2020-04-09 03:36:14 UTC
Dear wanglei,

Please read this message in its entirety before proceeding.

Your bug report is being closed as INSUFFICIENTDATA due to inactivity and
a lack of information which is needed in order to accurately
reproduce and confirm the problem. We encourage you to retest
your bug against the latest release. If the issue is still
present in the latest stable release, we need the following
information (please ignore any that you've already provided):

a) Provide details of your system including your operating
   system and the latest version of LibreOffice that you have
   confirmed the bug to be present

b) Provide easy to reproduce steps – the simpler the better

c) Provide any test case(s) which will help us confirm the problem

d) Provide screenshots of the problem if you think it might help

e) Read all comments and provide any requested information

Once all of this is done, please set the bug back to UNCONFIRMED
and we will attempt to reproduce the issue. Please do not:

a) respond via email 

b) update the version field in the bug or any of the other details
   on the top section of our bug tracker

Warm Regards,
QA Team

MassPing-NeedInfo-FollowUp