Reproducible 100%. Tested on MacOSX 10.6.8. How to reproduce: - start LibreOffice - open http://www.usenix.org/event/sec03/tech/full_papers/gutmann/gutmann.doc - (document will be rendered correctly) - File | Quit LibreOffice will crash. I tested and I can open the same document with MS Word without problems. Stack trace: Process: soffice [1842] Path: /Applications/LibreOffice.app/Contents/MacOS/soffice Identifier: org.libreoffice.script Version: 3.4.2 (???) Code Type: X86 (Native) Parent Process: launchd [400] Date/Time: 2011-08-05 18:07:11.868 +0200 OS Version: Mac OS X 10.6.8 (10K549) Report Version: 6 Exception Type: EXC_BAD_ACCESS (SIGBUS) Exception Codes: KERN_PROTECTION_FAILURE at 0x000000000000008c Crashed Thread: 0 Dispatch queue: com.apple.main-thread Thread 0 Crashed: Dispatch queue: com.apple.main-thread 0 libswmxi.dylib 0x280fc0a1 SwFtnBossFrm::RemoveFtn(SwCntntFrm const*, SwTxtFtn const*, unsigned char) + 145 1 libswmxi.dylib 0x2820d43b SwTxtFtn::DelFrms(SwFrm const*) + 475 2 libswmxi.dylib 0x28139d37 SwCntntFrm::~SwCntntFrm() + 407 3 libswmxi.dylib 0x281ea282 SwTxtFrm::~SwTxtFrm() + 66 4 libswmxi.dylib 0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560 5 libswmxi.dylib 0x28116ffe SwBodyFrm::~SwBodyFrm() + 46 6 libswmxi.dylib 0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560 7 libswmxi.dylib 0x280d4a62 SwColumnFrm::~SwColumnFrm() + 114 8 libswmxi.dylib 0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560 9 libswmxi.dylib 0x281318d9 SwSectionFrm::~SwSectionFrm() + 217 10 libswmxi.dylib 0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560 11 libswmxi.dylib 0x28116ffe SwBodyFrm::~SwBodyFrm() + 46 12 libswmxi.dylib 0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560 13 libswmxi.dylib 0x28116165 SwPageFrm::~SwPageFrm() + 437 14 libswmxi.dylib 0x2813a030 SwLayoutFrm::~SwLayoutFrm() + 560 15 libswmxi.dylib 0x2810ebe1 SwRootFrm::~SwRootFrm() + 305 16 libswmxi.dylib 0x283d2c78 ViewShell::~ViewShell() + 904 17 libswmxi.dylib 0x286eb06c SwWrtShell::~SwWrtShell() + 220 18 libswmxi.dylib 0x2862e0d3 SwView::~SwView() + 435 19 libsfxmxi.dylib 0x00684b14 SfxViewFrame::ReleaseObjectShell_Impl() + 132 20 libsfxmxi.dylib 0x00684f14 SfxViewFrame::~SfxViewFrame() + 68 21 libsfxmxi.dylib 0x00683d8b SfxViewFrame::Close() + 139 22 libsfxmxi.dylib 0x0066060b SfxFrame::DoClose_Impl() + 59 23 libsfxmxi.dylib 0x0067abc8 SfxBaseController::dispose() + 1656 24 libfwkmxi.dylib 0x1a84b0ea framework::Frame::setComponent(com::sun::star::uno::Reference<com::sun::star::awt::XWindow> const&, com::sun::star::uno::Reference<com::sun::star::frame::XController> const&) + 1898 25 libfwkmxi.dylib 0x1a84a64b framework::Frame::close(unsigned char) + 571 26 libfwkmxi.dylib 0x1a83b0f0 framework::Desktop::impl_closeFrames(unsigned char) + 832 27 libfwkmxi.dylib 0x1a83b58e framework::Desktop::terminate() + 302 28 libsofficeapp.dylib 0x0006229b 0x58000 + 41627 29 libvclmxi.dylib 0x01955ba8 vcl::LazyDeletor<Window>::~LazyDeletor() + 19048 30 libvclmxi.dylib 0x01a26333 SalGetDesktopEnvironment() + 18563 31 com.apple.AppKit 0x963c0356 -[NSApplication _docController:shouldTerminate:] + 84 32 com.apple.AppKit 0x963bfe7c -[NSDocumentController(NSInternal) _continueTerminationHavingClosedAllDocuments:context:] + 160 33 com.apple.AppKit 0x963bfc5a -[NSDocumentController(NSInternal) _shouldTerminateWithDelegate:shouldTerminateSelector:] + 1376 34 com.apple.AppKit 0x963bf533 -[NSApplication _shouldTerminate] + 373 35 com.apple.AppKit 0x963bf0a5 -[NSApplication terminate:] + 519 36 com.apple.AppKit 0x961c4a26 -[NSApplication sendAction:to:from:] + 112 37 com.apple.AppKit 0x961c48d9 -[NSMenuItem _corePerformAction] + 435 38 com.apple.AppKit 0x961c45ca -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] + 174 39 com.apple.AppKit 0x961c44b6 -[NSMenu performActionForItemAtIndex:] + 65 40 com.apple.AppKit 0x961c4469 -[NSMenu _internalPerformActionForItemAtIndex:] + 50 41 com.apple.AppKit 0x961c43cf -[NSMenuItem _internalPerformActionThroughMenuIfPossible] + 97 42 com.apple.AppKit 0x961c4313 -[NSCarbonMenuImpl _carbonCommandProcessEvent:handlerCallRef:] + 336 43 com.apple.AppKit 0x961b8a55 NSSLMMenuEventHandler + 404 44 com.apple.HIToolbox 0x92df4c2f DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1567 45 com.apple.HIToolbox 0x92df3ef6 SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 411 46 com.apple.HIToolbox 0x92e167f3 SendEventToEventTarget + 52 47 com.apple.HIToolbox 0x92e42e87 SendHICommandEvent(unsigned long, HICommand const*, unsigned long, unsigned long, unsigned char, void const*, OpaqueEventTargetRef*, OpaqueEventTargetRef*, OpaqueEventRef**) + 448 48 com.apple.HIToolbox 0x92e67b90 SendMenuCommandWithContextAndModifiers + 66 49 com.apple.HIToolbox 0x92e67b47 SendMenuItemSelectedEvent + 121 50 com.apple.HIToolbox 0x92e67a5d FinishMenuSelection(SelectionData*, MenuResult*, MenuResult*) + 152 51 com.apple.HIToolbox 0x92e37160 MenuSelectCore(MenuData*, Point, double, unsigned long, OpaqueMenuRef**, unsigned short*) + 454 52 com.apple.HIToolbox 0x92e368bb _HandleMenuSelection2 + 465 53 com.apple.HIToolbox 0x92e366d9 _HandleMenuSelection + 53 54 com.apple.AppKit 0x961b1f96 _NSHandleCarbonMenuEvent + 285 55 com.apple.AppKit 0x96186b46 _DPSNextEvent + 2304 56 com.apple.AppKit 0x96185dd6 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 156 57 libvclmxi.dylib 0x01a21f66 SalGetDesktopEnvironment() + 1206 58 libvclmxi.dylib 0x01716180 Application::Yield(bool) + 96 59 libvclmxi.dylib 0x01716281 Application::Execute() + 97 60 libsofficeapp.dylib 0x0006a785 0x58000 + 75653 61 libvclmxi.dylib 0x0171e268 DeInitVCL() + 3624 62 libvclmxi.dylib 0x01a2181b component_getFactory + 209547 63 libvclmxi.dylib 0x01a26c4b SalGetDesktopEnvironment() + 20891 64 com.apple.AppKit 0x96148253 -[NSApplication run] + 917 65 com.apple.AppKit 0x96140289 NSApplicationMain + 574 66 libvclmxi.dylib 0x01a225a7 SalGetDesktopEnvironment() + 2807 67 libvclmxi.dylib 0x0171e311 SVMain() + 17 68 libsofficeapp.dylib 0x00096f65 soffice_main + 245 69 org.libreoffice.script 0x00001ebe main + 30 70 org.libreoffice.script 0x00001822 start + 258 71 org.libreoffice.script 0x00001749 start + 41
Confirmed with [Win2K LibreOffice 3.4.2 OOO340m1 (Build:203)]. If someone on linux can confirm this too, you can set 'Platform' to 'All'.
Is this bug related to bug 39510? Or even a duplicate?
(In reply to comment #2) > Is this bug related to bug 39510? Or even a duplicate? Yes, there are two paragraphs with endnotes--over two pages--which cause the crash (on pages 1/2 [endnotes 2-11], on pages 6/7 [endnotes 36-38]). After splitting these paragraphs, Writer doesn't crash anymore (see attached file 'gutmann_modified.doc'). [Tested with LibO 3.4.2 release on WinXP 32b] *** This bug has been marked as a duplicate of bug 39510 ***
Created attachment 49978 [details] Modified document 'gutmann_modified.doc' without crash
Since all new unconfirmed bugs start in state UNCONFIRMED now and old unconfirmed bugs were moved to NEEDINFO with a explanatory comment, all bugs promoted above those bug states to NEW and later are automatically confirmed making the CONFIRMED whiteboard status redundant. Thus it will be removed.
CLOSED