Bug 34050 - Particular ODT saved in web layout causes hang when switched to normal view
Summary: Particular ODT saved in web layout causes hang when switched to normal view
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
Inherited From OOo
Hardware: All All
: medium major
Assignee: Not Assigned
URL:
Whiteboard: confirmed:4.2.1.1:OSX
Keywords: haveBacktrace
Depends on:
Blocks: Writer-Web-Layout
  Show dependency treegraph
 
Reported: 2011-02-08 12:27 UTC by pmvd
Modified: 2018-10-07 18:28 UTC (History)
9 users (show)

See Also:
Crash report or crash signature:


Attachments
reproduces the bug (116.97 KB, application/vnd.oasis.opendocument.text)
2011-02-08 12:32 UTC, pmvd
Details
bt at random (8.77 KB, text/plain)
2012-05-12 14:11 UTC, Julien Nabet
Details
Bug 34050 - WinDbg session with FAILED_SOURCE_CODE (14.95 KB, text/plain)
2013-05-14 10:45 UTC, bfoman (inactive)
Details
console + bt finish with symbols on master sources (24.88 KB, text/plain)
2013-05-15 19:40 UTC, Julien Nabet
Details
console_bt with master sources (30.11 KB, text/plain)
2014-09-06 07:12 UTC, Julien Nabet
Details
Debug with Procdump+WinDBG in LO 5.2+ (16.80 KB, text/plain)
2016-04-05 10:51 UTC, Timur
Details
bt at random (24.87 KB, text/plain)
2016-04-10 08:28 UTC, Julien Nabet
Details
gdb bt (32.88 KB, text/plain)
2018-10-07 18:28 UTC, Julien Nabet
Details

Note You need to log in before you can comment on or make changes to this bug.
Description pmvd 2011-02-08 12:27:12 UTC
Reproduction steps:
1. Open the document attached
2. Switch to print layout
3. Page counter increases infinitely and writer hangs.
Comment 1 pmvd 2011-02-08 12:32:50 UTC
Created attachment 43127 [details]
reproduces the bug
Comment 2 Rainer Bielefeld Retired 2011-02-08 21:37:49 UTC
[Reproducible] with "LibreOffice 3.3.0 RC4 - WIN7  Home Premium (64bit) German UI  [OOO330m19 (build 6 / tag 3.3.0.4)]"

I see the hang before I switch back from Web View to Normal View. I clicked into the document, moved the cursor, and suddenly shown No of pages started to increase dramatically (several thousands). I would have expected that No. of pages will decrease to 1, as I generally see it with my text documents.

I can't reproduce that problem with my own documents, even when I copy / paste all contents from sample document to an own new writer document the hang disappears. But still I see that No of pages remains 2, not 1 (what ever that might mean).

Same with OOo 3.4-dev, but OOo will count to more than 8000 pages, LibO hangs at app. 2900 pages.

I don't know what the reason for the crash might be.

@pmvd:
Do you really only see the hang when you switch back from Web to Print layout or can you confirm my results?
Comment 3 pmvd 2011-02-12 12:36:53 UTC
> or can you confirm my results?
Yes, I can confirm your results.
Comment 4 Björn Michaelsen 2011-12-23 11:43:38 UTC Comment hidden (obsolete)
Comment 5 Björn Michaelsen 2011-12-23 17:01:05 UTC Comment hidden (obsolete)
Comment 6 pmvd 2011-12-27 12:00:00 UTC Comment hidden (obsolete)
Comment 7 pmvd 2011-12-27 12:02:05 UTC
LOdev 3.5.0beta2 
Build ID: c3bcb31-760cc4d-f39cf3d-1b2857e-60db978
Comment 8 Julien Nabet 2012-05-12 14:11:53 UTC
Created attachment 61529 [details]
bt at random

I reproduced this problem on master updated today (pc Debian x86-64).

I attached gdb to the process and generated a bt at random during the crazy increase of page number (normally there are 2 or 3 pages, I was at about 1000 in print layout

in console logs, I noticed these messages :
warn:legacy.osl:21994:1:/home/julien/compile-libreoffice/libo/sw/source/core/layout/calcmove.cxx:2020: Only a warning for task 108824:/n<SwCntntFrm::_WouldFit(..) - follow not valid!

/home/julien/compile-libreoffice/libo/sw/source/core/text/frmform.cxx:489: Ey
(the line is not cut)
Comment 9 bfoman (inactive) 2013-05-14 10:45:45 UTC
Created attachment 79295 [details]
Bug 34050 - WinDbg session with FAILED_SOURCE_CODE

Confirmed with:
LO 4.0.2.2
Build ID: own W7 debug build
Windows 7 Professional SP1 64 bit

Crash at random page number: 2159, 5044, 2009.

Attached full WinDbg session with mini dump file loaded generated by procdump soffice.bin -h.
Comment 10 Julien Nabet 2013-05-15 19:40:36 UTC
Created attachment 79363 [details]
console + bt finish with symbols on master sources

On pc Debian x86-64 with master sources updated today, I attached new console logs + gdb session
Comment 11 Julien Nabet 2013-05-15 19:42:33 UTC
Comment on attachment 61529 [details]
bt at random

Obsolete after having put new bt.
Comment 12 bfoman (inactive) 2013-08-14 22:01:04 UTC
Confirmed with:
Version: 4.2.0.0.alpha0+
Build ID: 087a610fcd5c0c354a9ed6bfccd3451b667d62a3
TinderBox: Win-x86@6-debug, Branch:master, Time: 2013-08-04_21:41:24
Windows 8.1 Enterprise Preview 64 bit

Still crashes.
Comment 13 retired 2014-03-02 10:24:28 UTC
Confirmed:4.2.1.1:OSX
Comment 14 Julien Nabet 2014-09-06 07:12:44 UTC
Created attachment 105830 [details]
console_bt with master sources

On pc Debian x86-64 with master sources, I can still reproduce this.
I attached an updated console/bt logs.
Comment 15 Timur 2016-04-05 10:51:24 UTC
Created attachment 124083 [details]
Debug with Procdump+WinDBG in LO 5.2+

For the sake of search: tllo.dll Rectangle::Rectangle

FOLLOWUP_IP: 
tllo!Rectangle::Rectangle+0 [c:\cygwin\home\tinderbox\master\include\tools\gen.hxx @ 391]
680eb4e0 55              push    ebp
Comment 16 Julien Nabet 2016-04-10 08:28:57 UTC
Created attachment 124227 [details]
bt at random

new backtrace at random.
Seems still linked to layout part.
Comment 17 Julien Nabet 2016-04-10 08:31:04 UTC
Michael/Oliver: thought you might be interested in this old (but still present) one as Writer experts.
I attached a new Linux bt but Timur had also attached a brand new Winbt.
Comment 18 QA Administrators 2017-10-23 14:03:00 UTC Comment hidden (obsolete)
Comment 19 pmvd 2017-10-23 22:23:35 UTC
[Reproducible] with LibreOffice Version: 5.1.6.2
Build ID: 1:5.1.6~rc2-0ubuntu1~xenial2
CPU Threads: 8; OS Version: Linux 4.10; UI Render: default; 
Locale: ru-RU (en_US.UTF-8); Calc: group
Comment 20 Christian Pietzsch 2018-10-07 15:07:34 UTC
Bug still reproducible in:
Version: 6.1.0.3
Build ID: 6.1.0-2
CPU threads: 12; OS: Linux 4.18; UI render: default; VCL: gtk2; 
Locale: de-DE (en_US.UTF-8); Calc: group threaded

Document also shows weird behavior when scrolling through it. Pictures not getting shown and scrolling very very choppy around certain pictures
Comment 21 Julien Nabet 2018-10-07 18:28:07 UTC
Created attachment 145452 [details]
gdb bt

On pc Debian x86-64 with master sources updated today, I could reproduce this.
It seems we've got a loop with this pattern:
#118 0x00007fffdad8ecdc in SwTextFrame::FormatAdjust(SwTextFormatter&, WidowsAndOrphans&, int, bool) (this=0x5555606080c0, rLine=..., rFrameBreak=..., nStrLen=65, bDummy=false) at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:1171
#119 0x00007fffdad907b2 in SwTextFrame::Format_(SwTextFormatter&, SwTextFormatInfo&, bool) (this=0x5555606080c0, rLine=..., rInf=..., bAdjust=false)
    at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:1617
#120 0x00007fffdad90d8f in SwTextFrame::Format_(OutputDevice*, SwParaPortion*) (this=0x5555606080c0, pRenderContext=0x55555ab74380, pPara=0x55555e116ce0)
    at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:1727
#121 0x00007fffdad91985 in SwTextFrame::Format(OutputDevice*, SwBorderAttrs const*) (this=0x5555606080c0, pRenderContext=0x55555ab74380)
    at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:1916
#122 0x00007fffdabebfed in SwContentFrame::MakeAll(OutputDevice*) (this=0x5555606080c0) at /home/julien/lo/libreoffice/sw/source/core/layout/calcmove.cxx:1458
#123 0x00007fffdabe69c5 in SwFrame::PrepareMake(OutputDevice*) (this=0x5555606080c0, pRenderContext=0x55555ab74380)
    at /home/julien/lo/libreoffice/sw/source/core/layout/calcmove.cxx:279
#124 0x00007fffdace6bcc in SwFrame::Calc(OutputDevice*) const (this=0x5555606080c0, pRenderContext=0x55555ab74380)
    at /home/julien/lo/libreoffice/sw/source/core/layout/trvlfrm.cxx:1798
#125 0x00007fffdad8b839 in SwTextFrame::CalcFollow(int) (this=0x55555ea6bdf0, nTextOfst=0) at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:287
#126 0x00007fffdad8cd5d in SwTextFrame::AdjustFollow_(SwTextFormatter&, int, int, unsigned char) (this=0x55555ea6bdf0, rLine=..., nOffset=0, nEnd=65, nMode=1 '\001')
    at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:623
#127 0x00007fffdad8ecdc in SwTextFrame::FormatAdjust(SwTextFormatter&, WidowsAndOrphans&, int, bool) (this=0x55555ea6bdf0, rLine=..., rFrameBreak=..., nStrLen=65, bDummy=false) at /home/julien/lo/libreoffice/sw/source/core/text/frmform.cxx:1171