Created attachment 79084 [details] Word 2007 (Mac) created document that causes the crash upon opening On attempting to open a Word docx file (created with Mac MS Office 2007) I get a General input/output error. This may be a duplicate of bug 64256 but, when opening it in Word 2000, I don't see any graphical bullet points in the document. I don't have a later version of Word so any such bullet points may be being converted upon loading into W2000. I have attached the offending doc for you. The crash occurs in the release versions of both 4.0.2 and 4.0.3.3 (I am using the release version although I have selected the RC version as the 4.0.3.3 release wasn't an option in the version list when I submitted this bug). Steps to reproduce: 1. Attempt to open the attached docx file.
I can reproduce a crash using Linux Mint 14 x64 with LibreOffice Version: 4.1.0.0.alpha1+ Build ID: 94fdd5d302e34220a0b1beaf3610658d15c7b80 Terminal output: warn:oox:3181:1:oox/source/helper/propertyset.cxx:139: PropertySet::implSetPropertyValue - cannot set property "LineEndCenter" warn:oox:3181:1:oox/source/helper/propertyset.cxx:139: PropertySet::implSetPropertyValue - cannot set property "LineEndName" warn:oox:3181:1:oox/source/helper/propertyset.cxx:139: PropertySet::implSetPropertyValue - cannot set property "LineEndWidth" warn:oox:3181:1:oox/source/helper/propertyset.cxx:139: PropertySet::implSetPropertyValue - cannot set property "LineJoint" warn:writerfilter:3181:1:writerfilter/source/dmapper/DomainMapper_Impl.cxx:1715: Exception when adding shape: warn:writerfilter:3181:1:writerfilter/source/dmapper/OLEHandler.cxx:114: Exception in OLE Handler: position cannot be determined with this method /usr/include/c++/4.7/bits/stl_stack.h:160:error: attempt to access an element in an empty container. Objects involved in the operation: sequence "this" @ 0x0x1bb3960 { type = St5stackIN5boost10shared_ptrIN12writerfilter7dmapper24DomainMapperTableManagerEEENSt7__debug5dequeIS5_SaIS5_EEEE; }
Created attachment 79091 [details] backtrace
Created attachment 79120 [details] bt after naive patch On pc Debian x86-64 with master sources updated today, I reproduced the crash with same bt as Joren. I noticed this: 244 GetParaPortions().Reset(); 245 246 ParaPortion* pIniPortion = new ParaPortion( aEditDoc[0] ); 247 GetParaPortions().Insert(0, pIniPortion); GetParaPortions is declared twice in editeng/source/editeng/editeng.cxx and editeng/source/editeng/impedit.hxx one is const, the other is non const In both case, it returns "aParaPortionList" which has the type "ParaPortionList". This last one is a class (present in editdoc.hxx/cxx) containing boost::ptr_vector<ParaPortion> maPortions Since "Reset" method clear the ptr_vector (see http://opengrok.libreoffice.org/xref/core/editeng/source/editeng/editdoc.cxx#759) I thought that replacing the call to "Insert" by a call to "Append" would help. But I had a new bt attached.
Cédric/Michael: one for you?
*** This bug has been marked as a duplicate of bug 64249 ***