Bug 133614 - SLIDESHOW: Crash when starting a slideshow with certain transition animations
Summary: SLIDESHOW: Crash when starting a slideshow with certain transition animations
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Impress (show other bugs)
Version:
(earliest affected)
6.3.6.2 release
Hardware: x86-64 (AMD64) Windows (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: wantBacktrace
Depends on:
Blocks:
 
Reported: 2020-06-02 17:38 UTC by georg.kohl
Modified: 2020-06-03 20:58 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description georg.kohl 2020-06-02 17:38:06 UTC 
Description:
Corresponding Crash Report ID: aef4e0a0-a028-4c36-982e-57c2f4e3ef9c 

Starting a slideshow either with the F5 shortcut or via the Slide Show menu causes LibreOffice to crash, when certain transition animations are present on one slide. I tried several different animations, here a summary of animations that cause a crash:
Fade, Ripple, Helix, Tiles, Fall, Vortex, Honeycomb, Fine Dissolve

A few other ones did work though:
Box, Cut, Dissolve

I tested this with the versions 6.3.6 and 6.4.4 on Windows 10. I also check various combinations of anti-aliasing, OpenGL and hardware acceleration settings, but nothing really changed. Using the safe mode to avoid user profile issues did not help either.

Note: I'm using two monitors with resolutions 2560x1440 and 1920x1080, and my internet search suggest that multiple monitors may sometimes cause problems

Steps to Reproduce:
1. Create a new slides show (just 1-3 empty slides are already enough)
2. Add a transition animation to one slide (e.g. Fade or see others from summary)
3. Start slide show with F5 or from slide show menu
4. Crash

Actual Results:
LibreOffice instantly crashes without showing any slide

Expected Results:
A visible slide show with the corresponding transition animation


Reproducible: Always


User Profile Reset: Yes


OpenGL enabled: Yes

Additional Info:
-
Comment 1 Julien Nabet 2020-06-02 18:01:46 UTC 
Would it be possible you retrieve a backtrace? (see https://wiki.documentfoundation.org/QA/BugReport/Debug_Information#Windows:_How_to_get_a_backtrace)
Comment 2 georg.kohl 2020-06-02 18:48:18 UTC 
No problem, here you go:


*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** WARNING: Unable to verify checksum for C:\WINDOWS\SYSTEM32\amdihk64.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\SYSTEM32\amdihk64.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\System32\DriverStore\FileRepository\c0346830.inf_amd64_f723e13ffb3b2652\B345901\atiumd64.dll - 
GetUrlPageData2 (WinHttp) failed: 12002.

DUMP_CLASS: 2

DUMP_QUALIFIER: 0

FAULTING_IP: 
atio6axx!DrvPresentBuffers+fe1d8d
00007fff`f243297d 8b848b10050000  mov     eax,dword ptr [rbx+rcx*4+510h]

EXCEPTION_RECORD:  (.exr -1)
ExceptionAddress: 00007ffff243297d (atio6axx!DrvPresentBuffers+0x0000000000fe1d8d)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000001b4e1bf4fa0
Attempt to read from address 000001b4e1bf4fa0

FAULTING_THREAD:  00000edc

DEFAULT_BUCKET_ID:  INVALID_POINTER_READ

PROCESS_NAME:  soffice.bin

ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%p verwies auf Arbeitsspeicher bei 0x%p. Der Vorgang %s konnte im Arbeitsspeicher nicht durchgef hrt werden.

EXCEPTION_CODE_STR:  c0000005

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000001b4e1bf4fa0

FOLLOWUP_IP: 
atio6axx!DrvPresentBuffers+fe1d8d
00007fff`f243297d 8b848b10050000  mov     eax,dword ptr [rbx+rcx*4+510h]

READ_ADDRESS:  000001b4e1bf4fa0 

BUGCHECK_STR:  INVALID_POINTER_READ

WATSON_BKT_PROCSTAMP:  5ebc6075

WATSON_BKT_PROCVER:  6.4.4.2

PROCESS_VER_PRODUCT:  LibreOffice

WATSON_BKT_MODULE:  atio6axx.dll

WATSON_BKT_MODSTAMP:  5d56d15a

WATSON_BKT_MODOFFSET:  177297d

WATSON_BKT_MODVER:  26.20.12028.2

MODULE_VER_PRODUCT:  AMD OpenGL driver

BUILD_VERSION_STRING:  10.0.18362.778 (WinBuild.160101.0800)

MODLIST_WITH_TSCHKSUM_HASH:  84ebebbbc50664320d33358fe2fc36b9421f1606

MODLIST_SHA1_HASH:  2e0a09b80ac6384e842f70bd2ce300084d952262

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

PRODUCT_TYPE:  1

SUITE_MASK:  272

ANALYSIS_SESSION_HOST:  --- Host hidden for privacy

ANALYSIS_SESSION_TIME:  06-02-2020 20:29:35.0572

ANALYSIS_VERSION: 10.0.14321.1024 amd64fre

THREAD_ATTRIBUTES: 
OS_LOCALE:  DEU

PROBLEM_CLASSES: 



INVALID_POINTER_READ
    Tid    [0xedc]
    Frame  [0x00]: atio6axx!DrvPresentBuffers


LAST_CONTROL_TRANSFER:  from 00007ffff22bd8a0 to 00007ffff243297d

STACK_TEXT:  
00000092`b878df10 00007fff`f22bd8a0 : 00000000`00000000 00000168`fffff880 000005a0`00000000 00000092`b878df90 : atio6axx!DrvPresentBuffers+0xfe1d8d
00000092`b878df40 00007fff`f22bc931 : 94000000`000005a0 00000001`20000800 00000092`b878e01c 00000001`00000000 : atio6axx!DrvPresentBuffers+0xe6ccb0
00000092`b878df80 00007fff`f22bc8d8 : 00007ff8`0d47499f 00000000`00000001 00000000`00000000 00000000`00000000 : atio6axx!DrvPresentBuffers+0xe6bd41
00000092`b878e080 00007fff`f22d1620 : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : atio6axx!DrvPresentBuffers+0xe6bce8
00000092`b878e150 00007fff`f14dcd56 : 00000000`00050001 00000092`b878e249 000001b1`d5080dc0 00000000`00000000 : atio6axx!DrvPresentBuffers+0xe80a30
00000092`b878e180 00007ff8`0bdb637a : 00000000`00050001 00000000`00000001 00000092`b878e249 00000000`00000002 : atio6axx!DrvPresentBuffers+0x8c166
00000092`b878e1e0 00007fff`de7f7829 : 00000000`00000000 000001b1`cda2b430 00000000`00000001 00000092`b878e180 : vclplug_winlo!WinOpenGLContext::ImplInit+0x36a
00000092`b878e2b0 00007ff8`0b6bdcac : 000001b1`00000001 000001b1`c56a9588 00000092`b878e379 00000000`00000000 : mergedlo!OpenGLContext::init+0x1e9
00000092`b878e310 00007ff8`0b6babd4 : 000001b1`c2add500 000001b1`c56a9588 000001b1`c5813350 000001b1`d4284560 : OGLTranslo!`anonymous namespace'::OGLTransitionerImpl::initWindowFromSlideShowView+0x2ac
00000092`b878e3e0 00007ff8`0a5a7c3a : 000001b1`c2add128 000001b1`d46fd168 000001b1`c57d1cf0 00000000`00000001 : OGLTranslo!`anonymous namespace'::OGLTransitionFactoryImpl::createTransition+0x194
00000092`b878e5d0 00007ff8`0a5a5b9b : 000001b1`c56a5880 000001b1`c2c400d0 000001b1`c5753400 000001b1`c5753400 : slideshowlo!slideshow::internal::`anonymous namespace'::PluginSlideChange::addTransition+0x12a
00000092`b878e720 00007ff8`0a5a8695 : 000001b1`c5d1fe30 00000000`00000001 00000000`00000025 00000092`b878e8d0 : slideshowlo!slideshow::internal::`anonymous namespace'::PluginSlideChange::PluginSlideChange+0x16b
00000092`b878e7d0 00007ff8`0a55a196 : 000001b1`c55132c0 00000092`b878ecc0 00007ff8`1066cde8 000001b1`bd170000 : slideshowlo!slideshow::internal::TransitionFactory::createSlideTransition+0x1c5
00000092`b878ead0 00007ff8`0a55ada9 : 000001b1`c580e900 000001b1`c580e960 000001b1`c55132c0 000001b1`c5513610 : slideshowlo!`anonymous namespace'::SlideShowImpl::createSlideTransition+0x316
00000092`b878eda0 00007ff8`0f1ab15b : 00000000`00000000 00000092`b878ef90 00000092`b878f0a0 00000000`00000000 : slideshowlo!`anonymous namespace'::SlideShowImpl::displaySlide+0x3f9
00000092`b878ef40 00007ff8`0f1ab2a7 : 000001b1`c577a260 000001b1`c577a260 000001b1`c577a260 00000000`00000000 : sdlo!sd::AnimationSlideController::displayCurrentSlide+0x41b
00000092`b878f060 00007ff8`0f1ad558 : 000001b1`c2ae4730 000001b1`c07eff50 00000000`00000002 000001b1`c5557a30 : sdlo!sd::SlideshowImpl::displayCurrentSlide+0xb7
00000092`b878f0a0 00007ff8`0f1b1893 : 000001b1`c07eff50 000001b1`c07eff50 00000092`b878f280 00000092`b878f2b0 : sdlo!sd::SlideshowImpl::gotoNextSlide+0xf8
00000092`b878f150 00007ff8`0a54fba5 : 000001b1`c07eff50 00000092`b878f200 000001b1`c5806ea8 000001b1`cdca17f0 : sdlo!sd::SlideShowListenerProxy::slideEnded+0xa3
00000092`b878f1a0 00007ff8`0a55e965 : 000001b1`c5810c60 00000092`b878f2b0 000001b1`c5806e98 000001b1`c5806e98 : slideshowlo!comphelper::OInterfaceContainerHelper2::forEach<com::sun::star::presentation::XSlideShowListener,<lambda_d036f6412cf82ba41272080fe109abd8> >+0xf5
00000092`b878f220 00007ff8`0a4b87cf : 00000092`b878f2b8 00000000`00008000 00000092`b878f1e0 000001b1`c5513328 : slideshowlo!`anonymous namespace'::SlideShowImpl::notifySlideEnded+0x1f5
00000092`b878f2b0 00007ff8`0a4e6845 : 000001b1`c5750200 000001b1`c55133e0 000001b1`00000000 00007ff8`3e5705a0 : slideshowlo!slideshow::internal::Delay::fire+0x2f
00000092`b878f2e0 00007ff8`0a4e6504 : 000001b1`cdc22180 00007fff`dc6fa800 000001b1`c55133e0 00000000`546c6148 : slideshowlo!slideshow::internal::EventQueue::process_+0x325
00000092`b878f3d0 00007ff8`0a5624ba : 000001b1`c55133e0 00000000`00000000 00000092`00000028 00007ff8`0bdce31c : slideshowlo!slideshow::internal::EventQueue::process+0x34
00000092`b878f410 00007ff8`0f1b3896 : 000001b1`c5513328 000001b1`c5513320 00000000`00000001 00000000`00000001 : slideshowlo!`anonymous namespace'::SlideShowImpl::update+0xca
00000092`b878f480 00007fff`de6f8911 : 000001b1`c577a260 00000000`00000000 000001b1`c5513320 000001b1`c577a260 : sdlo!sd::SlideshowImpl::updateSlideShow+0x76
00000092`b878f4f0 00007ff8`0bdce17e : 000001b1`00000004 00000000`00000008 00000092`00000006 00007fff`e09dd990 : mergedlo!Scheduler::ProcessTaskScheduling+0x311
00000092`b878f5b0 00007ff8`0bdc9ed4 : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : vclplug_winlo!WinSalTimer::ImplHandleElapsedTimer+0x2e
00000092`b878f5e0 00007ff8`0bdc9a2c : 00007fff`e09dd901 00000000`00000001 00000000`00000001 000001b1`c07cd000 : vclplug_winlo!ImplSalYield+0x184
00000092`b878f670 00007fff`de70d44d : 00000000`00000001 00007fff`e09dd990 00000000`00000001 00000000`0000ffff : vclplug_winlo!WinSalInstance::DoYield+0x9c
00000092`b878f6b0 00007fff`dd57ea76 : 000001b1`00000000 000001b1`c2648620 000001b1`c23c2ad0 00000092`b878f9e0 : mergedlo!Application::Execute+0x16d
00000092`b878f710 00007fff`de71c4b1 : 000001b1`c1ea2cb0 00000000`00000000 00000000`00000000 000001b1`bd179a40 : mergedlo!desktop::Desktop::Main+0x1146
00000092`b878f970 00007fff`dd59fee6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : mergedlo!ImplSVMain+0x71
00000092`b878f9b0 00007ff6`681d105b : 000001b1`c07cf0a0 00007ff8`3bd3b5a0 00007ff8`3bd3b5a0 00007ff6`681d104c : mergedlo!soffice_main+0x106
00000092`b878fa70 00007ff6`681d1308 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : soffice!main+0x1b
00000092`b878faa0 00007ff8`3cff7bd4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : soffice!__scrt_common_main_seh+0x10c
00000092`b878fae0 00007ff8`3e5ace51 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x14
00000092`b878fb10 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21


THREAD_SHA1_HASH_MOD_FUNC:  d9c3411f7d02f51b7cd7be3565347ac96364ced4

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  cb53f30168f0cf1c082ca409c57a2b7f51d7d928

THREAD_SHA1_HASH_MOD:  4a36fb00b31aa3d5b106e747e2553f15b97b89be

FAULT_INSTR_CODE:  108b848b

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  atio6axx!DrvPresentBuffers+fe1d8d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atio6axx

IMAGE_NAME:  atio6axx.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  5d56d15a

STACK_COMMAND:  ~0s ; kb

BUCKET_ID:  INVALID_POINTER_READ_atio6axx!DrvPresentBuffers+fe1d8d

PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ_atio6axx!DrvPresentBuffers+fe1d8d

FAILURE_EXCEPTION_CODE:  c0000005

FAILURE_IMAGE_NAME:  atio6axx.dll

BUCKET_ID_IMAGE_STR:  atio6axx.dll

FAILURE_MODULE_NAME:  atio6axx

BUCKET_ID_MODULE_STR:  atio6axx

FAILURE_FUNCTION_NAME:  DrvPresentBuffers

BUCKET_ID_FUNCTION_STR:  DrvPresentBuffers

BUCKET_ID_OFFSET:  fe1d8d

BUCKET_ID_MODTIMEDATESTAMP:  5d56d15a

BUCKET_ID_MODCHECKSUM:  296e856

BUCKET_ID_MODVER_STR:  26.20.12028.2

BUCKET_ID_PREFIX_STR:  INVALID_POINTER_READ_

FAILURE_PROBLEM_CLASS:  INVALID_POINTER_READ

FAILURE_SYMBOL_NAME:  atio6axx.dll!DrvPresentBuffers

FAILURE_BUCKET_ID:  INVALID_POINTER_READ_c0000005_atio6axx.dll!DrvPresentBuffers

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/soffice.bin/6.4.4.2/5ebc6075/atio6axx.dll/26.20.12028.2/5d56d15a/c0000005/0177297d.htm?Retriage=1

TARGET_TIME:  2020-06-02T18:37:16.000Z

OSBUILD:  18363

OSSERVICEPACK:  778

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt SingleUserTS

USER_LCID:  0

OSBUILD_TIMESTAMP:  1987-11-29 21:07:31

BUILDDATESTAMP_STR:  160101.0800

BUILDLAB_STR:  WinBuild

BUILDOSVER_STR:  10.0.18362.778

ANALYSIS_SESSION_ELAPSED_TIME: 75a20

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:invalid_pointer_read_c0000005_atio6axx.dll!drvpresentbuffers

FAILURE_ID_HASH:  {2442f30a-734b-1410-9266-a05236cbf3f7}

Followup:     MachineOwner
---------
Comment 3 Julien Nabet 2020-06-02 20:56:20 UTC 
The bt shows OpenGL problem.
For the test, could you give a try at https://wiki.documentfoundation.org/QA/FirstSteps?
If you still reproduce this with graphic drivers updated + brand new LO profile, disable OpenGL.
Also, if you installed any extensions, disable/uninstall them.
If you installed any specific fonts, disable/uninstall them.
And if you still reproduce this, could you attach a backtrace with OpenGL disabled?
Comment 4 georg.kohl 2020-06-03 20:46:48 UTC 
Awesome, updating my graphics diver did do the trick :D

Thank you very much!
Comment 5 Julien Nabet 2020-06-03 20:58:22 UTC 
Great news! :-)
Let's put this one to WFM since there's no specific fix patch related.