Created attachment 179117 [details] Backtrace gdbtrace.log of crash In LibreOffice Writer 7.3.1, I noticed that the Navigator was not docked, but in a floating window. When I try to dock the Navigator window pressing Ctrl+Shift+F10, LibreOffice immediately crashes. This is 100% reproducible. Steps to reproduce: 1. Open Writer and open the Navigator F5 [2. Undock Navigator window, if it is not yet a floating window] 3. Mouse click into the Navigator window 4. Press Ctrl+Shift+F10 to dock the Navigator window -> Immediate crash System: Ubuntu 21.10 with Gnome Shell LibreOffice Version: 7.3.1.3 / LibreOffice Community Build ID: 30(Build:3) CPU threads: 16; OS: Linux 5.13; UI render: default; VCL: gtk3 Locale: de-DE (de_DE.UTF-8); UI: de-DE Ubuntu package version: 1:7.3.1~rc3-0ubuntu0.21.10.1~lo2 Calc: threaded [This is the version from the LibreOffice Fresh PPA] I tested in a new LibreOffice profile.
Created attachment 179118 [details] Output of "gdb --pid=$(pidof soffice.bin)" .txt
Crash reproducible in the new version 7.3.2.2 The crashes also appear if I deactivate hardware acceleration in options -> view. Version: 7.3.2.2 / LibreOffice Community Build ID: 30(Build:2) CPU threads: 16; OS: Linux 5.13; UI render: default; VCL: gtk3 Locale: de-DE (de_DE.UTF-8); UI: de-DE Ubuntu package version: 1:7.3.2~rc2-0ubuntu0.21.10.1~lo1 Calc: threaded
As it might be relevant for this bug: processor: AMD® Ryzen 7 pro 4750u with radeon graphics × 16 graphics: AMD® Renoir 06:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Renoir (rev d1) (prog-if 00 [VGA controller]) Subsystem: Lenovo Renoir Kernel driver in use: amdgpu
Reproduced in Version: 7.4.0.0.alpha0+ / LibreOffice Community Build ID: b812150696c574aea0a173d11f178e8d458b1a3e CPU threads: 8; OS: Linux 5.10; UI render: default; VCL: gtk3 Locale: es-ES (es_ES.UTF-8); UI: en-US Calc: threaded
Regression introduced by: author Jim Raykowski <raykowj@gmail.com> 2021-10-19 02:10:41 -0800 committer Jim Raykowski <raykowj@gmail.com> 2021-10-22 04:19:10 +0200 commit 58a3e2a6fad68d8d5e6091e063c0b26e3608f998 (patch) tree 4a911eaea8dea82b947da8143f4a7bab6d70de3c parent cb56ec6aa8f03fbc70c808bd4f519ce9d3c21f7d (diff) tdf#144999 SwNavigator: Add way to collapse all categories Bisected with: bibisect-linux64-7.3 Adding Cc: to Jim Raykowski
Only reproducible with GTK3. @Caolán, I thought you might be interested in this issue
Seems odd that that patch would cause crash on Ctrl+Shift+F10. I can't repro using: Version: 7.4.0.0.alpha0+ / LibreOffice Community Build ID: 7a16002ede5fd31ae8f3358136ad49de40465ac1 CPU threads: 4; OS: Linux 5.13; UI render: default; VCL: gtk3 Locale: en-US (en_US.UTF-8); UI: en-US Calc: threaded
(In reply to Jim Raykowski from comment #7) > Seems odd that that patch would cause crash on Ctrl+Shift+F10. > > I can't repro using: > > Version: 7.4.0.0.alpha0+ / LibreOffice Community > Build ID: 7a16002ede5fd31ae8f3358136ad49de40465ac1 > CPU threads: 4; OS: Linux 5.13; UI render: default; VCL: gtk3 > Locale: en-US (en_US.UTF-8); UI: en-US > Calc: threaded In my case, it crashes with the following steps: 1. Clean the user profile 2. Launch Writer 3. Open the Navigator 4. Resize the navigator window 5. Ctrl+Shift+F10 -> Crash
(In reply to Xisco Faulí from comment #8) > In my case, it crashes with the following steps: > 1. Clean the user profile > 2. Launch Writer > 3. Open the Navigator > 4. Resize the navigator window > 5. Ctrl+Shift+F10 > > -> Crash I still don't repro crash. This message shows in the terminal each time the focus is in the navigator content tree and Ctrl+Shift+F10 is done: (soffice:3009942): Gtk-CRITICAL **: 12:26:16.305: gtk_tree_row_reference_new_proxy: assertion 'path->depth > 0' failed Possibly the version of gtk3 has something to do with not being able to repro crash? gtk-launch --version 3.24.20
(In reply to Jim Raykowski from comment #9) > (In reply to Xisco Faulí from comment #8) > > Possibly the version of gtk3 has something to do with not being able to > repro crash? > > gtk-launch --version > 3.24.20 I get the crashes with following gtk3 version (on Ubuntu 21.10): ~$ gtk-launch --version 3.24.30 By the way, I only have to follow the following 3 steps (that Xisco mentioned) to crash LibreOffice 2. Launch Writer 3. Open the Navigator 5. Ctrl+Shift+F10 -> immediate crash, 100% reproducible
I don't get a crash, but I do see the warning of comment #9 in trunk. For the warning I have https://gerrit.libreoffice.org/c/core/+/132996 to resolve that
Caolán McNamara committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/a8f89d5a6240b5e374e19c0c4df377f8b1f80e2f tdf#148197 gtk_tree_row_reference_new_proxy warning on docking navigator It will be available in 7.4.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
(In reply to Caolán McNamara from comment #11) > I don't get a crash, but I do see the warning of comment #9 in trunk. For > the warning I have https://gerrit.libreoffice.org/c/core/+/132996 to resolve > that @Caolán: Were the attached gdb logs helpful to identify the cause of the crashes? Or do you require any other backtrace / log ...?
The original backtraces are: #0 0x00007fcdeb112e2a in gtk_tree_model_get_iter () from /lib/x86_64-linux-gnu/libgtk-3.so.0 #1 0x00007fcdeb113091 in gtk_tree_model_get_iter_first () from /lib/x86_64-linux-gnu/libgtk-3.so.0 #2 0x00007fcdeb6dfd33 in ?? () from /usr/lib/libreoffice/program/libvclplug_gtk3lo.so #3 0x00007fcdb58f503e in ?? () from /usr/lib/libreoffice/program/libswlo.so and lack symbols to see what line numbers in writer trigger the problem you have (which *might* be the same problem I saw). Your distro and libreoffice are the ubuntu ones so installing "libreoffice-dbg" might give a better backtrace.
Created attachment 179605 [details] New gdbtrace.log with debug symbols I obtained the dbgsym packages for the LibreOffice Fresh PPA. Here is the gdbtrace.log (soffice --backtrace) with debug symbols.
Created attachment 179606 [details] New output (with debug symbols) of "gdb --pid=$(pidof soffice.bin)" .txt Here the new gdb output with debug symbols. @caolanm: Please let me know if the two debug outputs were helpful or whether you require anything else.
perfect, that gives me what I need to know. #0 0x00007f37e8625e2a in gtk_tree_model_get_iter () from /lib/x86_64-linux-gnu/libgtk-3.so.0 #1 0x00007f37e8626091 in gtk_tree_model_get_iter_first () from /lib/x86_64-linux-gnu/libgtk-3.so.0 #2 0x00007f37e8bf3eb3 in virtual thunk to (anonymous namespace)::GtkInstanceTreeView::get_iter_first(weld::TreeIter&) const () at ./vcl/unx/gtk3/gtkinst.cxx:12846 #3 0x00007f37c56c7eee in SwContentTree::CommandHdl (this=0x55b6c3e5a5e0, rCEvt=...) at /usr/include/c++/11/bits/unique_ptr.h:173 #4 0x00007f37e8c14cc7 in (anonymous namespace)::GtkInstanceWidget::signalPopupMenu (pWidget=0x7ffe668b3590, widget=0x55b6c3e67a50) at ./vcl/unx/gtk3/gtkinst.cxx:2639 ... #19 0x00007f37e8682a5b in gtk_window_propagate_key_event () from /lib/x86_64-linux-gnu/libgtk-3.so.0 so this suggests that the context menu is triggered by the keystroke and the problem is with the context menu when nothing is selected in the treeview, but focus is in there. And I can reproduce by launching the navigator, click a row in the treeview, click the row again to unselect it (but focus is still in there) and press (on my keyboard) the dedicated "menu" button.
Caolán McNamara committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/95ee4f074f387b498a9083524a13dff636446fe7 Resolves: tdf#148197 crash on launching context menu with no row selected It will be available in 7.4.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
done in trunk, backports to 7-3 and 7-3-3 in gerrit
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-3": https://git.libreoffice.org/core/commit/a24a97f7d3ae88d81df3341bfc4296ab4a7237fb Resolves: tdf#148197 crash on launching context menu with no row selected It will be available in 7.3.4. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-3-3": https://git.libreoffice.org/core/commit/0fc0d1a9fb14a23357219e797e1b35092f7d8ee6 Resolves: tdf#148197 crash on launching context menu with no row selected It will be available in 7.3.3. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-3": https://git.libreoffice.org/core/commit/ffa172fc6b98d7d7dd3928693035a34cd331fe12 tdf#148197 gtk_tree_row_reference_new_proxy warning on docking navigator It will be available in 7.3.4. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-3-3": https://git.libreoffice.org/core/commit/2f41ffb8e4a76aedd96240a32d09d8217815cde5 tdf#148197 gtk_tree_row_reference_new_proxy warning on docking navigator It will be available in 7.3.3. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/5fa5a6b4353d47ab286e16e72bd4c440a95b2bdb Related: tdf#148197 gtk_tree_view_scroll_to_cell needs either path or column It will be available in 7.4.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-3": https://git.libreoffice.org/core/commit/425c1e3f31b49049ad8a6985d4c11e325b7e4750 Related: tdf#148197 gtk_tree_view_scroll_to_cell needs either path or column It will be available in 7.3.4. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.