Bug 166809 - partly [Crash] when removing a shape from a gallery
Summary: partly [Crash] when removing a shape from a gallery
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Extensions (show other bugs)
Version:
(earliest affected)
24.8.0.0 alpha0+
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: bibisected, bisected, regression
: 166891 (view as bug list)
Depends on:
Blocks: Gallery Crash
  Show dependency treegraph
 
Reported: 2025-05-31 16:28 UTC by Dennis Roczek
Modified: 2025-06-10 04:12 UTC (History)
7 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dennis Roczek 2025-05-31 16:28:50 UTC
Description:
LibteOffices "crashes" and bring up imediatly the document recovery dialog (so no hang, no crash in sense the application closed unexpectly message by the os).



Steps to Reproduce:
Open Draw, Sidebar Gallery, scroll down to VRT network devices, scroll down to the latest two duplicated shapes of the load balancer and remove one of the last two ones.

Actual Results:
Some partly crash. Gdb will follow.

Expected Results:
Shape get removed


Reproducible: Always


User Profile Reset: Yes

Additional Info:
Tested on Linux Ubuntu 25.05 using the PPA version and on two latest intel macs.
Comment 1 Dennis Roczek 2025-05-31 16:34:39 UTC
The extension (update still in development) with the (actually trippled load balancer) is available at 
https://bitbucket.org/dennisroczek/odf-extension-vrt-network-equipment/downloads/VRTnetworkequipment_1.2.2-lo-tdf166809.oxt



Just to remove confusion: category "VRT Networking & Communications" either shape dd2007 or dd2008, but a short test showed that even the "old shapes" crashes the extension.
Comment 2 Dennis Roczek 2025-05-31 16:40:16 UTC
the GDB Trace Log isn't really helpful. As you can see, gdb was used the first time as the Ubuntu machine was just upgraded.

warning: Currently logging to gdbtrace.log.  Turn the logging off and on to make the new setting effective.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Downloading 117.11 K separate debug info for /lib/x86_64-linux-gnu/libz.so.1...
Function(s) ^std::(move|forward|as_const|(__)?addressof) will be skipped when stepping.
Function(s) ^std::(shared|unique)_ptr<.*>::(get|operator) will be skipped when stepping.
Function(s) ^std::(basic_string|vector|array|deque|(forward_)?list|(unordered_|flat_)?(multi)?(map|set)|span)<.*>::(c?r?(begin|end)|front|back|data|size|empty) will be skipped when stepping.
Function(s) ^std::(basic_string|vector|array|deque|span)<.*>::operator.] will be skipped when stepping.
Downloading 1.57 M separate debug info for /lib/x86_64-linux-gnu/libepoxy.so.0...
Downloading 4.65 M separate debug info for /lib/x86_64-linux-gnu/libclucene-core.so.1...
Downloading 781.02 K separate debug info for /lib/x86_64-linux-gnu/libclucene-contribs-lib.so.1...
Downloading 1.33 M separate debug info for /lib/x86_64-linux-gnu/libhunspell-1.7.so.0...
Downloading 27.12 K separate debug info for /lib/x86_64-linux-gnu/libhyphen.so.0...
Downloading 28.36 K separate debug info for /lib/x86_64-linux-gnu/libmythes-1.2.so.0...
Downloading 57.80 K separate debug info for /lib/x86_64-linux-gnu/libargon2.so.1...
Downloading 471.65 K separate debug info for /lib/x86_64-linux-gnu/libgraphite2.so.3...
Downloading 691.27 K separate debug info for /lib/x86_64-linux-gnu/liblcms2.so.2...
Downloading 68.11 K separate debug info for /lib/x86_64-linux-gnu/libeot.so.0...
Downloading 621.86 K separate debug info for /lib/x86_64-linux-gnu/libtiff.so.6...
Downloading 1.43 M separate debug info for /lib/x86_64-linux-gnu/libX11.so.6...
Downloading 114.24 K separate debug info for /lib/x86_64-linux-gnu/libXext.so.6...
Downloading 1.34 M separate debug info for /lib/x86_64-linux-gnu/libfreetype.so.6...
Downloading 602.16 K separate debug info for /lib/x86_64-linux-gnu/libmount.so.1...
Downloading 141.74 K separate debug info for /lib/x86_64-linux-gnu/librtmp.so.1...
Downloading 580.74 K separate debug info for /lib/x86_64-linux-gnu/libssh2.so.1...
Downloading 30.57 K separate debug info for /lib/x86_64-linux-gnu/libpsl.so.5...
Downloading 757.34 K separate debug info for /lib/x86_64-linux-gnu/libgssapi_krb5.so.2...
Downloading 141.34 K separate debug info for /lib/x86_64-linux-gnu/libXrender.so.1...
Downloading 224.08 K separate debug info for /lib/x86_64-linux-gnu/libxcb.so.1...
Downloading 65.77 K separate debug info for /lib/x86_64-linux-gnu/libxcb-render.so.0...
Downloading 15.66 K separate debug info for /lib/x86_64-linux-gnu/libxcb-shm.so.0...
Downloading 2.20 M separate debug info for /lib/x86_64-linux-gnu/libpixman-1.so.0...
Downloading 1.79 M separate debug info for /lib/x86_64-linux-gnu/libgcrypt.so.20...
Downloading 174.02 K separate debug info for /lib/x86_64-linux-gnu/libclucene-shared.so.1...
Downloading 619.05 K separate debug info for /lib/x86_64-linux-gnu/librasqal.so.3...
Downloading 6.57 M separate debug info for /lib/x86_64-linux-gnu/libdb-5.3.so...
Downloading 48.81 K separate debug info for /lib/x86_64-linux-gnu/libyajl.so.2...
Downloading 52.38 K separate debug info for /lib/x86_64-linux-gnu/libjbig.so.0...
Downloading 73.76 K separate debug info for /lib/x86_64-linux-gnu/libbz2.so.1.0...
Downloading 216.35 K separate debug info for /lib/x86_64-linux-gnu/liblangtag.so.1...
Downloading 18.93 K separate debug info for /lib/x86_64-linux-gnu/libX11-xcb.so.1...
Downloading 548.34 K separate debug info for /lib/x86_64-linux-gnu/libblkid.so.1...
Downloading 1.54 M separate debug info for /lib/x86_64-linux-gnu/libkrb5.so.3...
Downloading 285.91 K separate debug info for /lib/x86_64-linux-gnu/libk5crypto.so.3...
Downloading 89.02 K separate debug info for /lib/x86_64-linux-gnu/libkrb5support.so.0...
Downloading 19.00 K separate debug info for /lib/x86_64-linux-gnu/libXau.so.6...
Downloading 52.42 K separate debug info for /lib/x86_64-linux-gnu/libuuid.so.1...
Downloading 21.03 K separate debug info for /lib/x86_64-linux-gnu/libkeyutils.so.1...
Downloading 134.12 K separate debug info for /lib/x86_64-linux-gnu/libXi.so.6...
Downloading 39.97 K separate debug info for /lib/x86_64-linux-gnu/libXfixes.so.3...
Downloading 24.27 K separate debug info for /lib/x86_64-linux-gnu/libXdamage.so.1...
Downloading 24.67 K separate debug info for /lib/x86_64-linux-gnu/libXcomposite.so.1...
Downloading 74.91 K separate debug info for /lib/x86_64-linux-gnu/libXrandr.so.2...
Downloading 23.80 K separate debug info for /lib/x86_64-linux-gnu/libXinerama.so.1...
Downloading 50.63 K separate debug info for /lib/x86_64-linux-gnu/libthai.so.0...
Downloading 48.91 K separate debug info for /lib/x86_64-linux-gnu/libdatrie.so.1...
[New Thread 0x78f77a9ff6c0 (LWP 16247)]
[New Thread 0x78f77a1fe6c0 (LWP 16248)]
[New Thread 0x78f7799fd6c0 (LWP 16249)]
[New Thread 0x78f7791fc6c0 (LWP 16250)]
[New Thread 0x78f7789fb6c0 (LWP 16251)]
[New Thread 0x78f763fff6c0 (LWP 16252)]
[New Thread 0x78f7637fe6c0 (LWP 16253)]
[New Thread 0x78f7629ff6c0 (LWP 16254)]
Downloading 42.23 K separate debug info for /lib/x86_64-linux-gnu/libvorbisfile.so.3...
Downloading 163.66 K separate debug info for /lib/x86_64-linux-gnu/libvorbis.so.0...
Downloading 27.06 K separate debug info for /lib/x86_64-linux-gnu/libogg.so.0...
[Detaching after vfork from child process 16258]
[New Thread 0x78f7530a46c0 (LWP 16260)]
[Thread 0x78f77a9ff6c0 (LWP 16247) exited]
[Thread 0x78f77a1fe6c0 (LWP 16248) exited]
[Thread 0x78f7530a46c0 (LWP 16260) exited]
[Thread 0x78f7629ff6c0 (LWP 16254) exited]
[Thread 0x78f7637fe6c0 (LWP 16253) exited]
[Thread 0x78f7789fb6c0 (LWP 16251) exited]
[Thread 0x78f7791fc6c0 (LWP 16250) exited]
[Thread 0x78f7799fd6c0 (LWP 16249) exited]
[Thread 0x78f77bcd6200 (LWP 16238) exited]
[Thread 0x78f763fff6c0 (LWP 16252) exited]
[New process 16238]
[Inferior 1 (process 16238) exited with code 0121]
/usr/lib/libreoffice/program/gdbtrace:9: Error in sourced command file:
No stack.
Starting program: /usr/lib/libreoffice/program/soffice.bin --backtrace
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Function(s) ^std::(move|forward|as_const|(__)?addressof) will be skipped when stepping.
Function(s) ^std::(shared|unique)_ptr<.*>::(get|operator) will be skipped when stepping.
Function(s) ^std::(basic_string|vector|array|deque|(forward_)?list|(unordered_|flat_)?(multi)?(map|set)|span)<.*>::(c?r?(begin|end)|front|back|data|size|empty) will be skipped when stepping.
Function(s) ^std::(basic_string|vector|array|deque|span)<.*>::operator.] will be skipped when stepping.
[New Thread 0x75bcfeb556c0 (LWP 25432)]
[New Thread 0x75bcfe3546c0 (LWP 25433)]
[New Thread 0x75bcfdb536c0 (LWP 25435)]
[New Thread 0x75bcfd3526c0 (LWP 25436)]
[New Thread 0x75bcfcb516c0 (LWP 25437)]
[New Thread 0x75bce7fff6c0 (LWP 25438)]
[New Thread 0x75bce77fe6c0 (LWP 25439)]
[New Thread 0x75bce69ff6c0 (LWP 25440)]
[New Thread 0x75bcd63596c0 (LWP 25443)]
[Thread 0x75bcd63596c0 (LWP 25443) exited]
[New Thread 0x75bcd63596c0 (LWP 25444)]
[Thread 0x75bcd63596c0 (LWP 25444) exited]
[Detaching after vfork from child process 25445]
[New Thread 0x75bcd63596c0 (LWP 25448)]
[New Thread 0x75bcd5b586c0 (LWP 25452)]
[New Thread 0x75bcd53576c0 (LWP 25453)]
[New Thread 0x75bcd4b566c0 (LWP 25454)]
[New Thread 0x75bcc7fff6c0 (LWP 25455)]
[Thread 0x75bcc7fff6c0 (LWP 25455) exited]
[Thread 0x75bcd4b566c0 (LWP 25454) exited]
[Thread 0x75bcd53576c0 (LWP 25453) exited]
[Thread 0x75bcd5b586c0 (LWP 25452) exited]
[New Thread 0x75bcc7fff6c0 (LWP 25456)]
[New Thread 0x75bcd5b586c0 (LWP 25457)]
[New Thread 0x75bcd4b566c0 (LWP 25458)]
[New Thread 0x75bcd53576c0 (LWP 25459)]
[Thread 0x75bcd53576c0 (LWP 25459) exited]
[Thread 0x75bcd4b566c0 (LWP 25458) exited]
[Thread 0x75bcd5b586c0 (LWP 25457) exited]
[Thread 0x75bcc7fff6c0 (LWP 25456) exited]
[New Thread 0x75bcc7fff6c0 (LWP 25460)]
[New Thread 0x75bcd53576c0 (LWP 25461)]
[New Thread 0x75bcd5b586c0 (LWP 25462)]
[New Thread 0x75bcd4b566c0 (LWP 25463)]
[Thread 0x75bcd4b566c0 (LWP 25463) exited]
[Thread 0x75bcd5b586c0 (LWP 25462) exited]
[Thread 0x75bcd53576c0 (LWP 25461) exited]
[Thread 0x75bcc7fff6c0 (LWP 25460) exited]
[New Thread 0x75bcd5b586c0 (LWP 25464)]
[New Thread 0x75bcc7fff6c0 (LWP 25465)]
[New Thread 0x75bcd53576c0 (LWP 25466)]
[New Thread 0x75bcd4b566c0 (LWP 25467)]
[Thread 0x75bcd4b566c0 (LWP 25467) exited]
[Thread 0x75bcd53576c0 (LWP 25466) exited]
[Thread 0x75bcc7fff6c0 (LWP 25465) exited]
[Thread 0x75bcd5b586c0 (LWP 25464) exited]
[New Thread 0x75bcd53576c0 (LWP 25468)]
[Thread 0x75bcd63596c0 (LWP 25448) exited]
[New Thread 0x75bcd63596c0 (LWP 25469)]
[Thread 0x75bcd63596c0 (LWP 25469) exited]
[Thread 0x75bcfcb516c0 (LWP 25437) exited]
[New Thread 0x75bcfcb516c0 (LWP 25470)]
[New Thread 0x75bcd63596c0 (LWP 25471)]
[New Thread 0x75bcd4b566c0 (LWP 25472)]
[New Thread 0x75bcd5b586c0 (LWP 25473)]
[Thread 0x75bcd63596c0 (LWP 25471) exited]
[Thread 0x75bcd4b566c0 (LWP 25472) exited]
[Thread 0x75bcfcb516c0 (LWP 25470) exited]
[Thread 0x75bcd5b586c0 (LWP 25473) exited]

Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
0x000075bd0baff477 in Bitmap::operator=(Bitmap const&) () from /usr/lib/libreoffice/program/libmergedlo.so
Undefined command: "".  Try "help".

If I can provide any useful information without a debug build using either Ubuntu or macos (without building), I should provide them easily.
Comment 3 Jeremy Norvell 2025-05-31 19:59:36 UTC
Hello. Thank you for reporting the bug. After installing the linked extension, I can confirm that the bug is present in version 25.8 listed below.

Version: 25.8.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 866538a4aeb30a598a6ede3d1763d898eb1920b0
CPU threads: 2; OS: Linux 6.8; UI render: default; VCL: gtk3
Locale: en-US (en_US.UTF-8); UI: en-US
Calc: threaded

However, version 24.2 below does not crash and completes the deletion as directed.

Version: 24.2.7.2 (X86_64) / LibreOffice Community
Build ID: 420(Build:2)
CPU threads: 2; OS: Linux 6.8; UI render: default; VCL: gtk3
Locale: en-US (en_US.UTF-8); UI: en-US
Ubuntu package version: 4:24.2.7-0ubuntu0.24.04.4
Calc: threaded
Comment 4 Dennis Roczek 2025-05-31 20:11:10 UTC
Hah, will do this on mac later/tomorrow. 🙃
Comment 5 m_a_riosv 2025-05-31 22:58:47 UTC
Maybe a dup of tdf#164202
Comment 6 Telesto 2025-06-01 08:39:10 UTC
(In reply to m_a_riosv from comment #5)
> Maybe a dup of tdf#164202

On second thought, yes I assume so. Comment 3 doesn't include the fix and PPA versions are likely older builds too
Comment 7 Dennis Roczek 2025-06-02 09:13:16 UTC
The first bad commit is

gerrit.libreoffice.org / core / 0cd07e1fb7afc0a6831eaafabcead7e0c5f7ac3b^! / .
commit 0cd07e1fb7afc0a6831eaafabcead7e0c5f7ac3b	[log]
author	Caolán McNamara <caolan.mcnamara@collabora.com>	Sun May 05 20:53:49 2024 +0100
committer	Caolán McNamara <caolan.mcnamara@collabora.com>	Mon May 06 12:23:39 2024 +0200
tree 8f145203ea1b9cf43d5e41b0c99c12b3e7465575
parent ef2066cdfe86019a3099b3530fb091ca2a4d2446 [diff]

https://git.libreoffice.org/core/+/0cd07e1fb7afc0a6831eaafabcead7e0c5f7ac3b%5E!
Comment 8 Dennis Roczek 2025-06-02 09:20:28 UTC
(In reply to Dennis Roczek from comment #1)
> The extension (update still in development) with the (actually trippled load
> balancer) is available at 
> https://bitbucket.org/dennisroczek/odf-extension-vrt-network-equipment/
> downloads/VRTnetworkequipment_1.2.2-lo-tdf166809.oxt
> 
> 
> 
> Just to remove confusion: category "VRT Networking & Communications" either
> shape dd2007 or dd2008, but a short test showed that even the "old shapes"
> crashes the extension.

Just wanted to add: I had to bibisect this ticket multiple times as at some point there is no crash any longer. My guess: the crash is related to the number of shapes or the overall size of the extension...
Comment 9 Julien Nabet 2025-06-07 10:31:36 UTC
*** Bug 166891 has been marked as a duplicate of this bug. ***
Comment 10 Buovjaga 2025-06-10 04:12:45 UTC
(In reply to Dennis Roczek from comment #7)
> The first bad commit is
> 
> gerrit.libreoffice.org / core / 0cd07e1fb7afc0a6831eaafabcead7e0c5f7ac3b^! /
> .
> commit 0cd07e1fb7afc0a6831eaafabcead7e0c5f7ac3b	[log]
> author	Caolán McNamara <caolan.mcnamara@collabora.com>	Sun May 05 20:53:49
> 2024 +0100
> committer	Caolán McNamara <caolan.mcnamara@collabora.com>	Mon May 06
> 12:23:39 2024 +0200
> tree 8f145203ea1b9cf43d5e41b0c99c12b3e7465575
> parent ef2066cdfe86019a3099b3530fb091ca2a4d2446 [diff]
> 
> https://git.libreoffice.org/core/+/
> 0cd07e1fb7afc0a6831eaafabcead7e0c5f7ac3b%5E!

On the surface, the commit does not look related as it's exclusively about Calc.