Bug 150591 - Calc Segmentation Fault Segfault Crash Coredump Upon Close After Changes
Summary: Calc Segmentation Fault Segfault Crash Coredump Upon Close After Changes
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Calc (show other bugs)
Version:
(earliest affected)
7.4.0.3 release
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-08-25 02:13 UTC by nroycea+documentfoundation
Modified: 2023-01-26 01:40 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description nroycea+documentfoundation 2022-08-25 02:13:54 UTC 
ArchLinux
*****
                Module /usr/lib/libreoffice/program/soffice.bin with build-id 3815e65db61b9f2d0e5dfa3d6b6013835afa7>
                Stack trace of thread 801283:
                #0  0x00007f9534ec1884 n/a (n/a + 0x0)
                ELF object binary architecture: AMD x86-64
*****
Open Calc and start a new spreadsheet
Add '1' to A1
Save
Close
(This is fine)

Open calc and load saved file
Copy Paste A1 to A2
Save
Close
(Segfault)

Repeat last group of steps to repeat at-will.
Comment 1 m_a_riosv 2022-08-25 16:47:35 UTC 
Please test with a clean profile, Menu/Help/Restart in Safe Mode
Comment 2 nroycea+documentfoundation 2022-08-25 18:20:00 UTC 
That is something I had already done before I posted. Even renaming my current profile dir and starting clean that way. Safe mode exhibited the same behavior.
I even just did it again just now in safe-mode before sending this. Same result.
Comment 3 QA Administrators 2022-08-26 03:36:58 UTC Comment hidden (obsolete)
Comment 4 nroycea+documentfoundation 2022-09-27 19:35:03 UTC 
What is required for this issue to become "CONFIRMED"?
Updated to 7.4.1-3 5 days ago and the issue persists:
*****
                Module /usr/lib/libreoffice/program/soffice.bin with build-id 83674d1926803881ad244daf79bed854b279d>
                Stack trace of thread 635370:
                #0  0x00007f84ea70b884 n/a (n/a + 0x0)
                ELF object binary architecture: AMD x86-64
*****

Also adding on another issue where closing the window when it's "maximized" makes the window non-visible when opening it.
I'm forced to right-mouse-context the program in the KDE app tray and choose "Move" to snap it to a side in order for the window to have any dimension to it.
Comment 5 Doug Doubt 2023-01-03 16:22:18 UTC 
This still crashes on:
> soffice --version
LibreOffice 7.4.3.2 40(Build:2)
Running on opensuse:tumbleweed:20230101 with KDE for a window manager.

The simple way to recreate this is to start calc:
> soffice --calc

Then enter "ctl c" followed by "ctl q"
The "KCrash Handler" gives the following stack from the Segmentation fault:
[KCrash Handler]
#4  0x00007f33a21b84f0 in rtl_uString_release () at /usr/lib64/libreoffice/program/libuno_sal.so.3
#5  0x00007f339ef2050b in  () at /usr/lib64/libreoffice/program/libmergedlo.so
#6  0x00007f339f065295 in  () at /usr/lib64/libreoffice/program/libmergedlo.so
#7  0x00007f339dc45095 in __run_exit_handlers () at /lib64/libc.so.6
#8  0x00007f339dc45220 in  () at /lib64/libc.so.6
#9  0x00007f339dc2c5b7 in __libc_start_call_main () at /lib64/libc.so.6
#10 0x00007f339dc2c679 in __libc_start_main_impl () at /lib64/libc.so.6
#11 0x000055f99547c805 in  ()

Looks to me like some code is missing a reset of a memory pointer following a memory free.
Comment 6 Doug Doubt 2023-01-25 01:30:04 UTC 
Cannot reproduce on version: LibreOffice 7.4.4.2 40(Build:2)
Comment 7 nroycea+documentfoundation 2023-01-26 01:40:15 UTC 
Confirmed, works for me. Closing.