Bug 38780 - FILESAVE of .DOC document as .DOCX in MS 2007 or Office Open format crashes Libreoffice
Summary: FILESAVE of .DOC document as .DOCX in MS 2007 or Office Open format crashes ...
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: Other All
: medium major
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-29 09:52 UTC by Ian Stuart
Modified: 2013-11-23 08:04 UTC (History)
6 users (show)

See Also:
Crash report or crash signature:


Attachments
Sample .doc file when saved as .docx crashes Libreoffice (305.50 KB, application/msword)
2011-07-03 09:23 UTC, Ian Stuart
Details
Bug 38780 - WinDbg session with FAILED_SOURCE_CODE (39.19 KB, text/plain)
2012-06-06 02:31 UTC, bfoman (inactive)
Details
bt on master (11.08 KB, text/plain)
2012-10-12 23:28 UTC, Julien Nabet
Details
console + bt with symbols on master sources (10.07 KB, text/plain)
2013-05-27 20:39 UTC, Julien Nabet
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ian Stuart 2011-06-29 09:52:01 UTC
When trying to file save as .docx Libreoffice 3.3.1 and 3.4.1RC3 crash leading to Libreoffice recovery.  Subsequent attempts to save as .docx result in same crash.
Comment 1 tester8 2011-07-03 05:48:51 UTC
Please upload sample document.
Comment 2 Ian Stuart 2011-07-03 09:23:55 UTC
Created attachment 48709 [details]
Sample .doc  file when saved as .docx crashes Libreoffice
Comment 3 fezhang@suse.com 2011-07-14 01:38:18 UTC
I cannot reproduce the bug with LibreOffice 3.3.1 on OpenSuse. Could you generate the backtrace of the problem please? Please read the "How to Get Backtrace" section here: http://wiki.documentfoundation.org/BugReport
Comment 4 Björn Michaelsen 2011-12-23 12:28:20 UTC
[This is an automated message.]
This bug was filed before the changes to Bugzilla on 2011-10-16. Thus it
started right out as NEW without ever being explicitly confirmed. The bug is
changed to state NEEDINFO for this reason. To move this bug from NEEDINFO back
to NEW please check if the bug still persists with the 3.5.0 beta1 or beta2 prereleases.
Details on how to test the 3.5.0 beta1 can be found at:
http://wiki.documentfoundation.org/QA/BugHunting_Session_3.5.0.-1

more detail on this bulk operation: http://nabble.documentfoundation.org/RFC-Operation-Spamzilla-tp3607474p3607474.html
Comment 5 khagaroth 2012-04-22 09:56:21 UTC
A trace from W7 with 3.5.3rc1 debug build.

*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\ooxlo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\writerfilterlo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\sfxlo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\fwklo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\tllo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\vcllo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\sofficeapp.dll - 
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\LOdev 3.5\program\soffice.bin
TRIAGER: Could not open triage file : C:\Program Files\Windows Kits\8.0\Debuggers\x86\triage\guids.ini, error 2
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\URE\bin\sal3.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\sysdtrans.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\lnglo.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files\LOdev 3.5\program\configmgr.uno.dll - 
TRIAGER: Could not open triage file : C:\Program Files\Windows Kits\8.0\Debuggers\x86\triage\modclass.ini, error 2

FAULTING_IP: 
swlo!SwAnchoredObject::GetCurrRelPos+a
59c98a8a 8b4810          mov     ecx,dword ptr [eax+10h]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 59c98a8a (swlo!SwAnchoredObject::GetCurrRelPos+0x0000000a)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00000010
Attempt to read from address 00000010

FAULTING_THREAD:  00000dd8

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_READ

PROCESS_NAME:  soffice.bin

OVERLAPPED_MODULE: Address regions for 'spllo' and 'faultrep.dll' overlap

ERROR_CODE: (NTSTATUS) 0xc0000005 - Instrukce na adrese 0x%08lx odkazovala na adresu pam

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukce na adrese 0x%08lx odkazovala na adresu pam

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  00000010

READ_ADDRESS:  00000010 

FOLLOWUP_IP: 
swlo!SwAnchoredObject::GetCurrRelPos+a
59c98a8a 8b4810          mov     ecx,dword ptr [eax+10h]

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

APP:  soffice.bin

PRIMARY_PROBLEM_CLASS:  NULL_CLASS_PTR_READ

BUGCHECK_STR:  APPLICATION_FAULT_NULL_CLASS_PTR_READ

LAST_CONTROL_TRANSFER:  from 5bc9529e to 59c98a8a

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
00e4b884 5bc9529e 00e4b8cc 379a3d19 01d73418 swlo!SwAnchoredObject::GetCurrRelPos+0xa
00e4b938 5bc968f3 04cc35b8 00e4b988 379a3df1 mswordlo!ImportRTF+0x2641e
00e4b9d0 5bd21588 0b923870 00e4ba04 0b536648 mswordlo!ImportRTF+0x27a73
00e4ba24 5bd19235 0b923870 00e4bf98 0bc74890 mswordlo!ExportRTF+0x5b4f8
00e4ba44 5bd1d815 00000000 379a4465 00e4c164 mswordlo!ExportRTF+0x531a5
00e4c044 5bd2192a 08bbd8a0 04b71608 00e4c508 mswordlo!ExportRTF+0x57785
00e4c05c 5bd4074c 08bbd8a0 379a44f5 00e4c164 mswordlo!ExportRTF+0x5b89a
00e4c0d4 5bd3e1dd 0586f474 00e4c508 599d35bf mswordlo!ExportRTF+0x7a6bc
00e4c0f8 5bd3100a 00000009 0000000d 00000002 mswordlo!ExportRTF+0x7814d
00e4c158 5bcad2fe 04c976cc 00000000 379a46e5 mswordlo!ExportRTF+0x6af7a
00e4c2c4 5bcab203 04c976cc 00000000 5be53ad4 mswordlo!ImportRTF+0x3e47e
00e4c2dc 5bd307e2 0000003a 04c976cc 04c9771c mswordlo!ImportRTF+0x3c383
00e4c3d0 5bcadc07 0bb3e760 00000000 379a4039 mswordlo!ExportRTF+0x6a752
00e4c418 5bcabb03 379a4079 5c6fe02f 0b59445c mswordlo!ImportRTF+0x3ed87
00e4c458 5bd42963 379a40e9 00000482 00e4c484 mswordlo!ImportRTF+0x3cc83
00e4c4c8 5bcb088c 00000001 379a4355 00e4c4e4 mswordlo!ExportRTF+0x7c8d3
00e4c774 5ab0087c 379a4395 00e4c7c4 00e4c7a0 mswordlo!ImportRTF+0x41a0c
00e4c7d0 59331c56 04eb281c 00e4cc68 1149e5a8 ooxlo!oox::core::FilterBase::filter+0x28c
00e4cb4c 5f873271 04eb276c 00e4cc68 d0409923 writerfilterlo!WriterFilter::filter+0x296
00e4ccc8 5f86f89c 0b91f2b0 d0408767 00e4f2a4 sfxlo!SfxObjectShell::ExportTo+0xa01
00e4d28c 5f874c54 0b91f2b0 00000000 d04086af sfxlo!SfxObjectShell::SaveTo_Impl+0x1fac
00e4d344 5f8744e4 00e4d3f4 00e4d6c4 0bc27210 sfxlo!SfxObjectShell::PreDoSaveAs_Impl+0x364
00e4d5e0 5f863b88 00e4d634 00e4d6c4 0bc271e0 sfxlo!SfxObjectShell::CommonSaveAs_Impl+0x8b4
00e4d6d8 5f8b291a 00e4d8f0 0bc271e0 d0408f7f sfxlo!SfxObjectShell::APISaveAs_Impl+0x368
00e4da94 5f8ac8df 00e4dd58 00e4e964 00000000 sfxlo!SfxBaseModel::impl_store+0xfea
00e4daf0 5f84b57d 05744934 00e4dd58 00e4e964 sfxlo!SfxBaseModel::storeAsURL+0x10f
00e4e368 5f864f7d 00e4e65c 00e4e660 00e4e964 sfxlo!SfxFrameDescriptor::GetItemPos+0xa82d
00e4ea6c 5f862e9f 00e4ed08 00e4ea8c 5f671052 sfxlo!SfxObjectShell::ExecFile_Impl+0x138d
00e4ea78 5f671052 04c90328 00e4ed08 04c90328 sfxlo!SfxObjectShell::StoreLog+0x12ff
00e4ea8c 5f722a67 5f862e90 00e4ed08 d040bec3 sfxlo!SfxShell::CallExec+0x12
00e4eb28 5f724fcb 04c90328 5fa9d658 00e4ed08 sfxlo!SfxDispatcher::Call_Impl+0x327
00e4eb6c 5f71adb5 04c90328 5fa9d658 00e4ed08 sfxlo!SfxDispatcher::_Execute+0x17b
00e4ec24 5f739e02 00e4ed08 5fa9d658 04c90328 sfxlo!SfxBindings::Execute_Impl+0x515
00e4ee30 5f7381f9 0b98d2e8 00e4ef80 00e4ef7c sfxlo!SfxShell::SetViewShell_Impl+0x62c2
00e4ee8c 5dd67918 04e8c43c 00e4ef80 00e4ef7c sfxlo!SfxShell::SetViewShell_Impl+0x46b9
00e4efb8 5dd672df 0b53bdf0 00e4efdc 5ff74764 fwklo!fwk_component_getFactory+0xb07f8
00e4efc4 5ff74764 0a0a7a88 0b53bdf0 ffffffff fwklo!fwk_component_getFactory+0xb01bf
00e4efdc 5e92c9bf 0b53bdf0 d040a70e 0b53bdf0 tllo!Link::Call+0x24
00e4f008 5e93237e 0b53bdf0 00e4f020 5e93234f vcllo!Menu::Select+0x7f
00e4f014 5e93234f 00000000 00e4f038 5ff74764 vcllo!Menu::ImplCallSelect+0x1e
00e4f020 5ff74764 0b53bdf0 00000000 00e4f03c vcllo!Menu::LinkStubImplCallSelect+0xf
00e4f038 5e9c54fc 00000000 0bc26340 04b41a30 tllo!Link::Call+0x24
00e4f058 5e9c36dd 0bc262e0 00000482 00000000 vcllo!Window::ImplAsyncFocusHdl+0x2b1c
00e4f124 5ea0fd3e 04bbeaf0 04bbed90 00000016 vcllo!Window::ImplAsyncFocusHdl+0xcfd
00e4f144 5ea1672c 00000016 0bc262e0 04bbed90 vcllo!WorkWindow::IsMaximized+0x48d8e
00e4f158 5ea147c6 0023037e 0bc262e0 01160000 vcllo!WorkWindow::IsMaximized+0x4f77c
00e4f1d8 5ea193e1 0023037e 00000482 00000000 vcllo!WorkWindow::IsMaximized+0x4d816
00e4f228 7624c4b7 0023037e 00000482 00000000 vcllo!WorkWindow::IsMaximized+0x52431
00e4f254 7624c5b7 5ea19380 0023037e 00000482 USER32!InternalCallWinProc+0x23
00e4f2cc 7624cbe9 00000000 5ea19380 0023037e USER32!UserCallWinProcCheckWow+0x14b
00e4f32c 7624cc40 5ea19380 00000000 00e4f348 USER32!DispatchMessageWorker+0x35e
00e4f33c 5e9cf71d 00e4f36c 00e4f35c 5e9d7fe5 USER32!DispatchMessageW+0xf
00e4f348 5e9d7fe5 00e4f36c 00000000 01d74668 vcllo!WorkWindow::IsMaximized+0x876d
00e4f35c 5e9d7f2d 00e4f36c 00004928 0023037e vcllo!WorkWindow::IsMaximized+0x11035
00e4f38c 5e9d80e8 00000001 00000000 01d74f90 vcllo!WorkWindow::IsMaximized+0x10f7d
00e4f3b4 5e6455ae 00000001 00000000 01e4f3dc vcllo!WorkWindow::IsMaximized+0x11138
00e4f3cc 5e64563f 00000001 00000000 00e4f3ec vcllo!Application::Reschedule+0xae
00e4f3dc 5e6454eb 00000000 5ebadf28 00e4f820 vcllo!Application::Yield+0xf
00e4f3ec 605d8729 d040ad9e 003b437c 001e3389 vcllo!Application::Execute+0x2b
00e4f820 5e6509a9 d040af5e 00f65508 0116e838 sofficeapp+0x8729
00e4f858 5e650ad3 00f65508 00e4f8c4 60605a3b vcllo!DockingWindow::SetFloatingPos+0x5eb9
00e4f864 60605a3b d040ad7a 00e4f87c 00e4f87c vcllo!SVMain+0x23
00e4f8c4 003b14d9 00e4f8d8 003b1479 0116f6e8 sofficeapp!soffice_main+0xab
00e4f8cc 003b1479 0116f6e8 00e4f8f0 003b14b8 soffice+0x14d9
00e4f8d8 003b14b8 00000003 0116f6e8 0116f6e8 soffice+0x1479
00e4f8f0 003b1f5d 003b0000 00000000 001e3389 soffice+0x14b8
00e4f980 7588ed4c 7ffd8000 00e4f9cc 7713382b soffice+0x1f5d
00e4f98c 7713382b 7ffd8000 773229ab 00000000 kernel32!BaseThreadInitThunk+0xe
00e4f9cc 771337fe 003b213c 7ffd8000 00000000 ntdll!__RtlUserThreadStart+0x70
00e4f9e4 00000000 003b213c 7ffd8000 00000000 ntdll!_RtlUserThreadStart+0x1b


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  swlo!SwAnchoredObject::GetCurrRelPos+a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: swlo

IMAGE_NAME:  swlo.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  4f92fc69

STACK_COMMAND:  dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!LdrpFailureData ; ~0s ; kb

FAILURE_BUCKET_ID:  NULL_CLASS_PTR_READ_c0000005_swlo.dll!SwAnchoredObject::GetCurrRelPos

BUCKET_ID:  APPLICATION_FAULT_NULL_CLASS_PTR_READ_swlo!SwAnchoredObject::GetCurrRelPos+a

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/soffice_bin/3_5_3_1/4f92f69e/swlo_dll/3_5_3_1/4f92fc69/c0000005/002c8a8a.htm?Retriage=1

Followup: MachineOwner
---------
Comment 6 khagaroth 2012-04-22 10:13:28 UTC
I hope the trace is usable, I followed the Windows debugging video guide and doublechecked I set everything right, but there seem to be some errors.
Comment 7 bfoman (inactive) 2012-06-06 02:31:08 UTC
Created attachment 62648 [details]
Bug 38780 - WinDbg session with FAILED_SOURCE_CODE

Confirmed with:
LO 3.5.4.2 
Build ID: own W7 debug build
Windows 7 Professional SP1 64 bit

Crash while saving as .docx.
Attached full WinDbg session with FAILED_SOURCE_CODE.
Comment 8 Julien Nabet 2012-10-12 23:28:53 UTC
Created attachment 68505 [details]
bt on master

On pc Debian x86-64 with master sources updated today, I reproduced the crash.
Attached bt.
Comment 9 Julien Nabet 2012-10-12 23:29:28 UTC
Cedric: one for you?
Comment 10 Jorendc 2013-05-23 20:05:35 UTC
@Arnaud: any chance you are interested in this one :)? I can still reproduce a crash using Version: 4.2.0.0.alpha0+ Build ID: 66c315bcf2b78c4928d1e436d1a853f58f4cccd

Kind regards,
Joren
Comment 11 Julien Nabet 2013-05-27 20:39:25 UTC
Created attachment 79869 [details]
console + bt with symbols on master sources

On pc Debian x86-64 with master sources updated today, I gave a new try.

I didn't have a crash during saving in docx but when closing Writer.
The docx file generated can be opened without problem.
Comment 12 Julien Nabet 2013-11-23 05:47:11 UTC
for information, no crash with master sources (future 4.3.0) updated today.
Comment 13 retired 2013-11-23 08:03:33 UTC
WORKSFORME in both 
LO 4.1.3.2 and
LO Version: 4.3.0.0.alpha0+
Build ID: 73342dbb82ba074d01962359dac50fb2aa36cbeb
TinderBox: MacOSX-x86@49-TDF, Branch:master, Time: 2013-11-22_07:09:14

on OS X 10.9.

Please re-open if the issue persists for you with the latest LO stable release.
Comment 14 retired 2013-11-23 08:04:54 UTC
update: 4.1.3.2 still produces the crash.

So please test with latest nightly on your system. should work with that: http://dev-builds.libreoffice.org/daily/master/