Bug 125924 - Exporting xls/rhbz499466-2.xls to PDF triggers undefined conversion from NaN to int
Summary: Exporting xls/rhbz499466-2.xls to PDF triggers undefined conversion from NaN ...
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Chart (show other bugs)
Version:
(earliest affected)
6.4.0.0.alpha1+
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: PDF-Export
  Show dependency treegraph
 
Reported: 2019-06-14 15:58 UTC by Stephan Bergmann
Modified: 2023-01-24 14:20 UTC (History)
4 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stephan Bergmann 2019-06-14 15:58:40 UTC
(With <https://gerrit.libreoffice.org/#/c/74055/> "Avoid -fsanitize=float-divide-by-zero" out of the way:)  At least on recent master, `--convert-to pdf xls/rhbz499466-2.xls` with xls/rhbz499466-2.xls as obtained by bin/get-bugzilla-attachments-by-mimetype (i.e., the attachment at <https://bugzilla.redhat.com/show_bug.cgi?id=499466#c1>):

> chart2/source/view/charttypes/VSeriesPlotter.cxx:1342:33: runtime error: nan is outside the range of representable values of type 'int'
>  #0 in chart::VSeriesPlotter::createRegressionCurvesShapes(chart::VDataSeries const&, com::sun::star::uno::Reference<com::sun::star::drawing::XShapes> const&, com::sun::star::uno::Reference<com::sun::star::drawing::XShapes> const&, bool) at chart2/source/view/charttypes/VSeriesPlotter.cxx:1342:33
>  #1 in chart::AreaChart::impl_createSeriesShapes() at chart2/source/view/charttypes/AreaChart.cxx:539:17 (instdir/program/../program/libchartcorelo.so +0x2428578)
>  #2 in chart::AreaChart::createShapes() at chart2/source/view/charttypes/AreaChart.cxx:965:5
>  #3 in chart::ChartView::impl_createDiagramAndContent(chart::CreateShapeParam2D const&, com::sun::star::awt::Size const&) at chart2/source/view/main/ChartView.cxx:1608:25
>  #4 in chart::ChartView::createShapes2D(com::sun::star::awt::Size const&) at chart2/source/view/main/ChartView.cxx:3037:41
>  #5 in chart::ChartView::createShapes() at chart2/source/view/main/ChartView.cxx:2506:5
[...]

The problem is that in

>         if( !bAverageLine )
>         {
>             rVDataSeries.getMinMaxXValue(fMinX, fMaxX);
>             fMaxX += aExtrapolateForward;
>             fMinX -= aExtrapolateBackward;
> 
>             fPointScale = (fMaxX - fMinX) / (fChartMaxX - fChartMinX);
>             fPointScale = std::min(fPointScale, 1000.0);
>         }

(VSeriesPlotter::createRegressionCurvesShapes, chart2/source/view/charttypes/VSeriesPlotter.cxx) the call to VDataSeries::getMinMaxXValue sets fMinX and fMaxX to NaN, so fPointScale is set to NaN, and the later

>         sal_Int32 nPointCount = 100 * fPointScale;

causes undefined behavior.  That code got updated, if not introduced with <https://gerrit.libreoffice.org/plugins/gitiles/core/+/9408a1d008487cbeafd2dc4705eda2fae9547aab%5E!> "Draw MeanValue in chart bounds, smarter define no. of curve points."
Comment 1 Xisco Faulí 2019-08-12 10:34:57 UTC
Moving to NEW
Comment 2 QA Administrators 2021-08-19 03:44:32 UTC
Dear Stephan Bergmann,

To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year.

There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present.

If you have time, please do the following:

Test to see if the bug is still present with the latest version of LibreOffice from https://www.libreoffice.org/download/

If the bug is present, please leave a comment that includes the information from Help - About LibreOffice.
 
If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a comment that includes the information from Help - About LibreOffice.

Please DO NOT

Update the version field
Reply via email (please reply directly on the bug tracker)
Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not 
appropriate in this case)


If you want to do more to help you can test to see if your issue is a REGRESSION. To do so:
1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) from https://downloadarchive.documentfoundation.org/libreoffice/old/

2. Test your bug
3. Leave a comment with your results.
4a. If the bug was present with 3.3 - set version to 'inherited from OOo';
4b. If the bug was not present in 3.3 - add 'regression' to keyword


Feel free to come ask questions or to say hello in our QA chat: https://kiwiirc.com/nextclient/irc.freenode.net/#libreoffice-qa

Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-UntouchedBug