Bug 164572 - Crash viewing slide 9
Summary: Crash viewing slide 9
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Impress (show other bugs)
Version:
(earliest affected)
24.8.4.2 release
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: Media Crash
  Show dependency tree / graph
 
Reported: 2025-01-04 08:57 UTC by Jaime T
Modified: 2025-01-04 19:24 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jaime T 2025-01-04 08:57:39 UTC 
KDE Plasma Version: 6.2.4
KDE Frameworks Version: 6.9.0
Qt Version: 6.8.1
Graphics Platform: Wayland

Every time impress tries to show slide 9 of the downloaded file from
https://med.stanford.edu/content/dam/sm/tobaccopreventiontoolkit/documents/nicotineaddiction/unit2/Unit-2-Addiction-101-Powerpoint.pptx 
it crashes. Running under valgrind, the error is:

==288947== Invalid read of size 8
==288947==    at 0x3FB9CE04: QMediaPlayer::pause() (in /usr/lib64/libQt6Multimedia.so.6.8.1)
==288947==    by 0x3CCD4733: non-virtual thunk to avmedia::qt::QtPlayer::disposing() (QtPlayer.hxx:69)
==288947==    by 0xBF21E13: .LTHUNK3.lto_priv.3 (implbase.cxx:104)
==288947==    by 0x3CCD6613: UnknownInlinedFun (compbase.hxx:90)
==288947==    by 0x3CCD6613: avmedia::qt::QtManager::createPlayer(rtl::OUString const&) (QtManager.cxx:32)
==288947==    by 0x5E1FE28: avmedia::priv::MediaWindowImpl::createPlayer(rtl::OUString const&, rtl::OUString const&, com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (mediawindow_impl.cxx:210)
==288947==    by 0x85BEF40: avmedia::priv::MediaWindowImpl::createPlayer(rtl::OUString const&, rtl::OUString const&, rtl::OUString const*) [clone .isra.0] (mediawindow_impl.cxx:191)
==288947==    by 0x5E40D89: avmedia::priv::MediaWindowImpl::setURL(rtl::OUString const&, rtl::OUString const&, rtl::OUString const&) (mediawindow_impl.cxx:254)
==288947==    by 0x5E41B0C: avmedia::priv::MediaWindowImpl::executeMediaItem(avmedia::MediaItem const&) (mediawindow_impl.cxx:315)
==288947==    by 0x75575C5: sdr::contact::ViewObjectContactOfSdrMediaObj::executeMediaItem(avmedia::MediaItem const&) (viewobjectcontactofsdrmediaobj.cxx:161)
==288947==    by 0x74FFCF5: UnknownInlinedFun (viewobjectcontactofsdrmediaobj.cxx:44)
==288947==    by 0x74FFCF5: sdr::contact::ViewContactOfSdrMediaObj::CreateObjectSpecificViewObjectContact(sdr::contact::ObjectContact&) (viewcontactofsdrmediaobj.cxx:40)
==288947==    by 0x753404D: sdr::contact::ViewContact::getPrimitive2DSequenceHierarchyOfIndex(unsigned int, sdr::contact::DisplayInfo&, sdr::contact::ObjectContact&, drawinglayer::primitive2d::Primitive2DDecompositionVisitor&) (viewcontact.cxx:323)
==288947==    by 0x7535286: sdr::contact::ViewObjectContact::getPrimitive2DSequenceSubHierarchy(sdr::contact::DisplayInfo&, drawinglayer::primitive2d::Primitive2DDecompositionVisitor&) const (viewobjectcontact.cxx:584)
==288947==  Address 0x8 is not stack'd, malloc'd or (recently) free'd
Comment 1 Jaime T 2025-01-04 09:04:35 UTC 
Under gdb, it shows:

#0  0x00007fffb818fe04 in QMediaPlayer::pause() () at /lib64/libQt6Multimedia.so.6
#1  0x00007fffb9505734 in non-virtual thunk to avmedia::qt::QtPlayer::disposing() () at /usr/src/debug/libreoffice-24.8.3.2/avmedia/source/qt6/QtPlayer.hxx:69
#2  0x00007ffff089fe14 in cppu::WeakComponentImplHelperBase::dispose (this=0x5555593b91e8) at /usr/src/debug/libreoffice-24.8.3.2/cppuhelper/source/implbase.cxx:104
#3  0x00007fffb9507614 in cppu::PartialWeakComponentImplHelper<com::sun::star::media::XPlayer, com::sun::star::media::XPlayerNotifier, com::sun::star::lang::XServiceInfo>::dispose ()
    at /usr/src/debug/libreoffice-24.8.3.2/include/cppuhelper/compbase.hxx:90
#4  avmedia::qt::QtManager::createPlayer (this=0x0, rURL=Python Exception <class 'gdb.MemoryError'>: Cannot access memory at address 0x1
<error reading variable: Cannot access memory at address 0x1>) at /usr/src/debug/libreoffice-24.8.3.2/avmedia/source/qt6/QtManager.cxx:32
#5  0x00007ffff4355e29 in avmedia::priv::MediaWindowImpl::createPlayer (rURL="https://www.youtube.com/embed/-w8n9UOiBxE?feature=oembed", rManagerServName="\026", xContext=Python Exception <class 'gdb.error'>: There is no member named _pInterface.
)
    at /usr/src/debug/libreoffice-24.8.3.2/avmedia/source/viewer/mediawindow_impl.cxx:210
#6  0x00007ffff6af4f41 in avmedia::priv::MediaWindowImpl::createPlayer(rtl::OUString const&, rtl::OUString const&, rtl::OUString const*) [clone .isra.0] ()
    at /usr/src/debug/libreoffice-24.8.3.2/avmedia/source/viewer/mediawindow_impl.cxx:191
#7  0x00007ffff4376d8a in avmedia::priv::MediaWindowImpl::setURL (this=0x55555ff11d70, rURL=Python Exception <class 'gdb.MemoryError'>: Cannot access memory at address 0x0
<error reading variable: Cannot access memory at address 0x0>, rTempURL=uninitialized rtl::OUString, rReferer="")
    at /usr/src/debug/libreoffice-24.8.3.2/avmedia/source/viewer/mediawindow_impl.cxx:254
#8  0x00007ffff4377b0d in avmedia::priv::MediaWindowImpl::executeMediaItem (this=0x55555ff11d70, rItem=...) at /usr/src/debug/libreoffice-24.8.3.2/avmedia/source/viewer/mediawindow_impl.cxx:315
#9  0x00007ffff5a8d5c6 in sdr::contact::ViewObjectContactOfSdrMediaObj::executeMediaItem (this=0x55555eb7d4c0, rItem=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewobjectcontactofsdrmediaobj.cxx:161
#10 0x00007ffff5a35cf6 in sdr::contact::ViewObjectContactOfSdrMediaObj::ViewObjectContactOfSdrMediaObj () at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewobjectcontactofsdrmediaobj.cxx:44
#11 sdr::contact::ViewContactOfSdrMediaObj::CreateObjectSpecificViewObjectContact (this=0x55555d4d84c0, rObjectContact=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewcontactofsdrmediaobj.cxx:40
#12 0x00007ffff5a6a04e in sdr::contact::ViewContact::getPrimitive2DSequenceHierarchyOfIndex (this=0x0, a=0, rDisplayInfo=..., rObjectContact=..., rVisitor=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewcontact.cxx:323
#13 0x00007ffff5a6b287 in sdr::contact::ViewObjectContact::getPrimitive2DSequenceSubHierarchy (this=0x55555e5eaac0, rDisplayInfo=..., rVisitor=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewobjectcontact.cxx:584
#14 0x00007ffff5a6b287 in sdr::contact::ViewObjectContact::getPrimitive2DSequenceSubHierarchy (this=0x55555ee826a0, rDisplayInfo=..., rVisitor=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewobjectcontact.cxx:584
#15 0x00007ffff5a35616 in sdr::contact::ViewObjectContactOfSdrPage::getPrimitive2DSequenceHierarchy () at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewobjectcontactofsdrpage.cxx:569
#16 sdr::contact::ViewObjectContactOfSdrPage::getPrimitive2DSequenceHierarchy (this=0x55555ee826a0, rDisplayInfo=..., rVisitor=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/viewobjectcontactofsdrpage.cxx:550
#17 0x00007ffff5a82d78 in sdr::contact::ObjectContactOfPageView::DoProcessDisplay (this=0x55555c6b9310, rDisplayInfo=...)
    at /usr/src/debug/libreoffice-24.8.3.2/svx/source/sdr/contact/objectcontactofpageview.cxx:239
#18 0x00007ffff5a88ff6 in SdrPageWindow::RedrawAll (this=0x55555d54be10, pRedirector=0x55555ed20d70) at /usr/src/debug/libreoffice-24.8.3.2/svx/source/svdraw/sdrpagewindow.cxx:355
#19 0x00007ffff5bb3c72 in SdrPageView::CompleteRedraw (this=0x55555d54c9c0, rPaintWindow=..., rReg=..., pRedirector=0x7fffffffad80) at /usr/src/debug/libreoffice-24.8.3.2/svx/source/svdraw/svdpagv.cxx:239
#20 0x00007ffff5bb4acd in SdrPaintView::CompleteRedraw (this=0x55556025f1c0, pOut=0x55555ed20d70, rReg=..., pRedirector=0x7fffffffad80) at /usr/src/debug/libreoffice-24.8.3.2/svx/source/svdraw/svdpntv.cxx:518
#21 0x00007fffc55a4333 in sd::View::CompleteRedraw (this=0x55556025f1c0, pOutDev=0x55555e97f950, rReg=..., pRedirector=0x7fffffffad80) at /usr/src/debug/libreoffice-24.8.3.2/sd/source/ui/view/sdview.cxx:499
#22 0x00007fffc55718ed in sd::DrawViewShell::Paint (this=0x7fffffffadd0, rRect=..., pWin=0x55555c9bd580) at /usr/src/debug/libreoffice-24.8.3.2/sd/source/ui/view/drviews5.cxx:435
#23 0x00007ffff6123d6a in PaintHelper::DoPaint () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:313
#24 vcl::Window::ImplCallPaint (this=0x55555c9bd580, pRegion=0x55555c9bd580, nPaintFlags=4294946528) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:617
#25 0x00007ffff6123fd2 in PaintHelper::~PaintHelper () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:552
#26 0x00007ffff6123b00 in vcl::Window::ImplCallPaint (this=0x55555deba2f0, pRegion=0x0, nPaintFlags=4128114096) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:623
#27 0x00007ffff6123fd2 in PaintHelper::~PaintHelper () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:552
#28 0x00007ffff6123b00 in vcl::Window::ImplCallPaint (this=0x55555e3f5f00, pRegion=0x0, nPaintFlags=4128114096) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:623
#29 0x00007ffff6123fd2 in PaintHelper::~PaintHelper () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:552
#30 0x00007ffff6123b00 in vcl::Window::ImplCallPaint (this=0x55555ebaeb00, pRegion=0x0, nPaintFlags=4128114096) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:623
#31 0x00007ffff6123fd2 in PaintHelper::~PaintHelper () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:552
#32 0x00007ffff6123b00 in vcl::Window::ImplCallPaint (this=0x55555d529480, pRegion=0x0, nPaintFlags=4128114096) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:623
#33 0x00007ffff6123fd2 in PaintHelper::~PaintHelper () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:552
#34 0x00007ffff6123b00 in vcl::Window::ImplCallPaint (this=0x555560036fc0, pRegion=0x0, nPaintFlags=4128796400) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:623
#35 0x00007ffff6123fd2 in PaintHelper::~PaintHelper () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:552
#36 0x00007ffff6123b00 in vcl::Window::ImplCallPaint (this=0x55555c2f28f0, pRegion=0x0, nPaintFlags=4128114096) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:623
#37 0x00007ffff6124368 in vcl::Window::ImplHandlePaintHdl () at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:667
#38 vcl::Window::LinkStubImplHandlePaintHdl (instance=0x55555c2f28f0, data=0x0) at /usr/src/debug/libreoffice-24.8.3.2/vcl/source/window/paint.cxx:648
Comment 2 Julien Nabet 2025-01-04 09:22:48 UTC 
On pc Debian x86-64 with master sources updated today, it hangs.

When I go to slide 9, I got this on console:
warn:avmedia.gstreamer:62096:62395:avmedia/source/gstreamer/gstplayer.cxx:458: warning: 'No decoder available for type 'text/html'.' debug: '../gst/playback/gsturidecodebin.c(1003): unknown_type_cb (): /GstPlayBin:playbin0/GstURIDecodeBin:uridecodebin0'
** Message: 10:12:32.330: PackageKit: xid = 0
** Message: 10:12:32.330: PackageKit: desktop_id = (null)
** Message: 10:12:32.330: PackageKit: Codec nice name: text/html decoder
** Message: 10:12:32.330: PackageKit: structure: gstreamer1(decoder-text/html)()(64bit)

and in gdb, I got:
#4  0x00007f5731695e5b in osl_joinWithThread (Thread=0x55d9a1a5c990) at /home/julien/lo/libreoffice/sal/osl/unx/thread.cxx:453
#5  0x00007f56aac7be59 in osl::Thread::join (this=0x7f568c002340) at include/osl/thread.hxx:116
#6  0x00007f56aac6a40d in avmedia::gstreamer::(anonymous namespace)::MissingPluginInstaller::detach
    (this=0x7f56aac89128 <avmedia::gstreamer::(anonymous namespace)::TheMissingPluginInstaller()::theInstaller>, source=0x55d999a8ff50) at /home/julien/lo/libreoffice/avmedia/source/gstreamer/gstplayer.cxx:214
#7  0x00007f56aac69c91 in avmedia::gstreamer::Player::disposing (this=0x55d999a8ff50) at /home/julien/lo/libreoffice/avmedia/source/gstreamer/gstplayer.cxx:334
#8  0x00007f572f33d3b0 in cppu::WeakComponentImplHelperBase::dispose (this=0x55d999a8ff50) at /home/julien/lo/libreoffice/cppuhelper/source/implbase.cxx:104
#9  0x00007f56aac721b5 in cppu::PartialWeakComponentImplHelper<com::sun::star::media::XPlayer, com::sun::star::lang::XServiceInfo>::dispose (this=0x55d999a8ff50) at include/cppuhelper/compbase.hxx:90
#10 0x00007f572a3eff3a in avmedia::priv::MediaWindowImpl::dispose (this=0x55d99ada9c40) at /home/julien/lo/libreoffice/avmedia/source/viewer/mediawindow_impl.cxx:158
#11 0x00007f5727f213d3 in VclReferenceBase::disposeOnce (this=0x55d99ada9e30) at /home/julien/lo/libreoffice/vcl/source/outdev/vclreferencebase.cxx:38
#12 0x00007f572a3e6565 in VclPtr<avmedia::priv::MediaWindowImpl>::disposeAndClear (this=0x55d99f2e0b68) at include/vcl/vclptr.hxx:207
#13 0x00007f572a3e325b in avmedia::MediaWindow::~MediaWindow (this=0x55d99f2e0b60) at /home/julien/lo/libreoffice/avmedia/source/viewer/mediawindow.cxx:61
#14 0x00007f572b198025 in sdr::contact::SdrMediaWindow::~SdrMediaWindow (this=0x55d99f2e0b60) at /home/julien/lo/libreoffice/svx/source/sdr/contact/sdrmediawindow.cxx:41
#15 0x00007f572b198049 in sdr::contact::SdrMediaWindow::~SdrMediaWindow (this=0x55d99f2e0b60) at /home/julien/lo/libreoffice/svx/source/sdr/contact/sdrmediawindow.cxx:40
#16 0x00007f572b199108 in std::default_delete<sdr::contact::SdrMediaWindow>::operator() (this=0x55d9a55254c8, __ptr=0x55d99f2e0b60)
    at /usr/lib/gcc/x86_64-linux-gnu/14/../../../../include/c++/14/bits/unique_ptr.h:93
#17 0x00007f572b198f5f in std::unique_ptr<sdr::contact::SdrMediaWindow, std::default_delete<sdr::contact::SdrMediaWindow> >::~unique_ptr (this=0x55d9a55254c8)
    at /usr/lib/gcc/x86_64-linux-gnu/14/../../../../include/c++/14/bits/unique_ptr.h:399
#18 0x00007f572b198b10 in sdr::contact::ViewObjectContactOfSdrMediaObj::~ViewObjectContactOfSdrMediaObj (this=0x55d9a5525400)
    at /home/julien/lo/libreoffice/svx/source/sdr/contact/viewobjectcontactofsdrmediaobj.cxx:53
#19 0x00007f572b198b39 in sdr::contact::ViewObjectContactOfSdrMediaObj::~ViewObjectContactOfSdrMediaObj (this=0x55d9a5525400)
    at /home/julien/lo/libreoffice/svx/source/sdr/contact/viewobjectcontactofsdrmediaobj.cxx:52
#20 0x00007f572b17e107 in sdr::contact::ObjectContact::~ObjectContact (this=0x55d9a12bac60) at /home/julien/lo/libreoffice/svx/source/sdr/contact/objectcontact.cxx:68
#21 0x00007f572b1a001d in sdr::contact::ObjectContactOfPageView::~ObjectContactOfPageView (this=0x55d9a12bac60) at /home/julien/lo/libreoffice/svx/source/sdr/contact/objectcontactofpageview.cxx:75
#22 0x00007f572b1a0069 in sdr::contact::ObjectContactOfPageView::~ObjectContactOfPageView (this=0x55d9a12bac60) at /home/julien/lo/libreoffice/svx/source/sdr/contact/objectcontactofpageview.cxx:72


There's definitely something wrong here.