Bug 39919 - CRASH when insert particular SVG picture from file
Summary: CRASH when insert particular SVG picture from file
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Draw (show other bugs)
Version:
(earliest affected)
3.4.2 release
Hardware: Other All
: high major
Assignee: Not Assigned
URL:
Whiteboard: target:3.5.0
Keywords:
Depends on:
Blocks:
 
Reported: 2011-08-08 01:39 UTC by Rainer Bielefeld Retired
Modified: 2011-12-23 17:10 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:


Attachments
Sample tazzarana.svg (30.41 KB, image/svg+xml)
2011-08-09 02:37 UTC, Rainer Bielefeld Retired
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Rainer Bielefeld Retired 2011-08-08 01:39:12 UTC
I see the crash with sample from URL and "LibreOffice 3.4.2  - WIN7  Home Premium (64bit) German UI [OOO340m1 (Build:203)]" 

Steps to reproduce:
1. Download "tazzarana.svg" from a.m. URL
2. Open NEW empty DRAW document
3. Menu 'Insert -> Picture -> from file'
4. Browse for "tazzarana.svg" and open
   expected: picture will be inserted
   Actual: Crash (IWN Error Message), LibO does no longer respond.

Same crash result when insert to WRITER document

with "LibreOffice Portable 3.3.3  - WIN7  Home Premium (64bit) German UI [OOO330m19 (Build:301  Tag 3.3.3.1)]" result looks terrible, but no CRASH
Comment 1 rk601 2011-08-09 02:04:40 UTC
@Rainer Bielefeld

On 2011-08-09 the URL http://www.clker.com/clipart-tazzarana.html resulted in 404 - Page not found.

Unable to test "tazzarana.svg" from your URL.

However, SVG pictures do CRASH OSX. Please see CRASH reports in:
"Bug 39799 - CRASH when insert SVG image while EDITING" and 
"Bug 37830 - SVG inconsistent, especially gradients and transparency" CRASH on resizing SVG.
Comment 2 Rainer Bielefeld Retired 2011-08-09 02:37:20 UTC
Created attachment 50063 [details]
Sample tazzarana.svg

It would ease things if we could find a common crash sample for all OS
Comment 3 rk601 2011-08-09 02:51:20 UTC
@Rainer Bielefeld 

As per your request, in an attempt to Insert a Picture into "LibreOffice 3.4.2 release" using OSX, we selected the attached "tazzarana.svg" picture and LibreOffice crashed.

Steps to reproduce:
1. Download "tazzarana.svg" from attachment
2. Open NEW empty DRAW document
3. Menu 'Insert -> Picture -> from file'
4. Browse for "tazzarana.svg" and open
   expected: picture will be inserted
   Actual: Crash (Problem report for LibreOffice Generated)

Similar crash result when insert to WRITER document.

OSX generated the following partial crash report on DRAW:

Process:         soffice [997]
Path:            /Applications/LibreOffice 3.4.2.app/Contents/MacOS/soffice
Identifier:      org.libreoffice.script
Version:         3.4.2 (???)
Code Type:       X86 (Native)
Parent Process:  launchd [128]

Date/Time:       2011-08-09 02:44:21.314 -0700
OS Version:      Mac OS X 10.6.8 (10K549)
Report Version:  6

Interval Since Last Report:          34715 sec
Crashes Since Last Report:           3
Per-App Interval Since Last Report:  2903 sec
Per-App Crashes Since Last Report:   1

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000300722e4
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libsvgfiltermxi.dylib         	0x3001bb89 0x3000e000 + 56201
1   libsvgfiltermxi.dylib         	0x30013d05 0x3000e000 + 23813
2   libsvgfiltermxi.dylib         	0x3004233d component_getFactory + 85053
3   libsvgfiltermxi.dylib         	0x30042839 component_getFactory + 86329
4   libsvgfiltermxi.dylib         	0x30064399 component_getFactory + 224409
5   libsvgfiltermxi.dylib         	0x300663f2 component_getFactory + 232690
6   libsvgfiltermxi.dylib         	0x30066247 component_getFactory + 232263
7   libsvgfiltermxi.dylib         	0x30066247 component_getFactory + 232263
8   libsvgfiltermxi.dylib         	0x30033e3c component_getFactory + 26428
9   libsvgfiltermxi.dylib         	0x3002d6b8 GraphicImport + 24
10  libsvtmxi.dylib               	0x00b943e1 GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned long, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>*) + 2577
11  libsvtmxi.dylib               	0x00b95274 GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned long) + 68
12  libsvtmxi.dylib               	0x00b9535a GraphicFilter::ImportGraphic(Graphic&, INetURLObject const&, unsigned short, unsigned short*, unsigned long) + 218
13  libsfxmxi.dylib               	0x004bfd37 sfx2::FileDialogHelper_Impl::getGraphic(rtl::OUString const&, Graphic&) const + 695
14  libsfxmxi.dylib               	0x004bff89 sfx2::FileDialogHelper_Impl::getGraphic(Graphic&) const + 361
15  libsdmxi.dylib                	0x27619a04 SdUndoGroup::~SdUndoGroup() + 48516
16  libsdmxi.dylib                	0x27619953 SdUndoGroup::~SdUndoGroup() + 48339
17  libsdmxi.dylib                	0x27384058 sd::ViewShell::GetViewFrame() const + 164424
18  libsdmxi.dylib                	0x2736cec8 sd::ViewShell::GetViewFrame() const + 69816
19  libsfxmxi.dylib               	0x0047fc62 SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, unsigned char) + 530
20  libsfxmxi.dylib               	0x00480404 SfxDispatcher::PostMsgHandler(SfxRequest*) + 308
21  libsfxmxi.dylib               	0x006509d9 SfxHintPoster::LinkStubDoEvent_Impl(void*, void*) + 25
22  libvclmxi.dylib               	0x0195681f vcl::LazyDeletor<Window>::~LazyDeletor() + 22239
23  libvclmxi.dylib               	0x01a21ec3 SalGetDesktopEnvironment() + 1043
24  libvclmxi.dylib               	0x01716180 Application::Yield(bool) + 96
25  libvclmxi.dylib               	0x0171626c Application::Execute() + 76
26  libsofficeapp.dylib           	0x0006a785 0x58000 + 75653
27  libvclmxi.dylib               	0x0171e268 DeInitVCL() + 3624
28  libvclmxi.dylib               	0x01a2181b component_getFactory + 209547
29  libvclmxi.dylib               	0x01a26c4b SalGetDesktopEnvironment() + 20891
30  com.apple.AppKit              	0x98b47253 -[NSApplication run] + 917
31  com.apple.AppKit              	0x98b3f289 NSApplicationMain + 574
32  libvclmxi.dylib               	0x01a225a7 SalGetDesktopEnvironment() + 2807
33  libvclmxi.dylib               	0x0171e311 SVMain() + 17
34  libsofficeapp.dylib           	0x00096f65 soffice_main + 245
35  org.libreoffice.script        	0x00001ebe main + 30
36  org.libreoffice.script        	0x00001822 start + 258
37  org.libreoffice.script        	0x00001749 start + 41
Comment 4 Rainer Bielefeld Retired 2011-08-09 03:26:09 UTC
Confirmed due to Comment 3, Bugs listed in Comment 1 might be related.
Comment 5 Caolán McNamara 2011-08-11 06:20:18 UTC
14  libsfxmxi.dylib                   0x004bff89
sfx2::FileDialogHelper_Impl::getGraphic(Graphic&) const + 361
15  libsdmxi.dylib                    0x27619a04 SdUndoGroup::~SdUndoGroup() +
48516

looks like an odd leap from 14 to 15, perhaps its just an artifact of the symbol lookup of the bt

13  libsfxmxi.dylib                   0x004bfd37
sfx2::FileDialogHelper_Impl::getGraphic(rtl::OUString const&, Graphic&) const 

looks like its a crash in getting the preview image for the file dialog ? Unfortunately can't reproduce this under Linux locally
Comment 6 m_a_riosv 2011-08-12 04:00:56 UTC
I tried with another svg file created from scratch with Inkscape, and file download from web, open with no problem.
Crash only with tazzarana.svg file.
With Inscape I have saved the tazzarana.svg in png and then reopen a saved as svg.
There is no crash open with Draw.
Could you upload other files with same issue.

Win7x64 Ultimate
Comment 7 m_a_riosv 2011-08-12 04:12:30 UTC
In http://validator.w3.org/check can validate the tazzarana.svg file, seems not to be a standard file.
Comment 8 Julien Nabet 2011-09-01 13:11:31 UTC
No crash on Debian testing x86 32 bits on debug mode with 3.5 master branch.

Here are the logs at the moment I insert the svg :
Error: SfxModule::GetFieldUnit: no metric item in the module implemented by '8SwModule'! From File /.../libo/sfx2/source/appl/module.cxx at Line 399
repeated 6 times.
Comment 9 Rainer Bielefeld Retired 2011-09-10 22:38:36 UTC
Still crashes with with "LibreOffice 3.4.3 RC2 - WIN7 Home Premium (64bit) German UI [OOO340m1 (Build:302)]", but no longer with  Server installation of Master "LibO-dev 3.5.0 – WIN7 Home Premium (64bit) English UI [(Build ID:  d3d1481-3f8994a-2ba0a9f)]". So and Due to Comment 8 works for me with master.