Bug 79697 - Calc crashes after editing formula
Summary: Calc crashes after editing formula
Status: RESOLVED INVALID
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: UI (show other bugs)
Version:
(earliest affected)
4.2.4.2 release
Hardware: x86-64 (AMD64) Linux (All)
: medium major
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-06-05 18:43 UTC by Max Kellermann
Modified: 2015-05-06 14:23 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Max Kellermann 2014-06-05 18:43:17 UTC
LibreOffice on Debian Jessie amd64, package version 1:4.2.4-4

Calc crashes a few dozen times a day after editing formulas. Apparently, ScFunctionDockWin::UpdateFunctionList() crashes because the LRU list has been corrupted.

Full backtrace:


#0  0x00007f30a1a3647a in ScFunctionDockWin::UpdateFunctionList (this=0x3ef43a0) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/formdlg/dwfunctr.cxx:799
        pDesc = 0x3f03d70
        iter = 
        nSelPos = <optimized out>
        nCategory = <optimized out>
#1  0x00007f30a1a36619 in ScFunctionDockWin::InitLRUList (this=<optimized out>) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/formdlg/dwfunctr.cxx:201
        pFuncMgr = <optimized out>
        nSelPos = <optimized out>
#2  0x00007f30a1956b82 in ScModule::RecentFunctionsChanged (this=this@entry=0x288e370) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/app/scmod.cxx:812
        pWnd = <optimized out>
        nFuncListID = <optimized out>
        pViewFrm = <optimized out>
#3  0x00007f30a1cccd46 in ScViewFunc::EnterData (this=this@entry=0x2d7c008, nCol=<optimized out>, nRow=15, nTab=<optimized out>, rString=..., pData=pData@entry=0x0)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/view/viewfunc.cxx:507
        pScMod = 0x288e370
        aAppOpt = {eMetric = FUNIT_INCH, nLRUFuncCount = 10, pLRUList = 0x46a2aa0, eZoomType = SVX_ZOOM_PERCENT, nZoom = 140, bSynchronizeZoom = 1 '\001', nStatusFunc = 9, 
          bAutoComplete = 1 '\001', bDetectiveAuto = 1 '\001', nTrackContentColor = 4294967295, nTrackInsertColor = 4294967295, nTrackDeleteColor = 4294967295, 
          nTrackMoveColor = 4294967295, eLinkMode = LM_ALWAYS, nDefaultObjectSizeWidth = 8000, nDefaultObjectSizeHeight = 5000, mbShowSharedDocumentWarning = 1 '\001', 
          meKeyBindingType = ScOptionsUtil::KEY_DEFAULT}
        bOptChanged = true
        nLevel = 0
        aComp = {<formula::FormulaCompiler> = {<boost::noncopyable_::noncopyable> = {<No data fields>}, _vptr.FormulaCompiler = 0x7f30a20c5890 <vtable for ScCompiler+16>, 
            aCorrectedFormula = {pData = 0x43cec90}, aCorrectedSymbol = {pData = 0x7f30d3c7f140}, mxSymbols = {px = 0x28e4a00, pn = {pi_ = 0x2b72b80}}, mpToken = {px = 0x7f30a8041a30}, 
            pCurrentFactorToken = {px = 0x0}, pArr = 0x4621970, pCode = 0x7fff2e058980, pStack = 0x0, eLastOp = 11, nRecursion = 0, nNumFmt = 16, pc = 2, 
            meGrammar = formula::FormulaGrammar::GRAM_NATIVE, bAutoCorrect = true, bCorrected = false, bCompileForFAP = false, bIgnoreErrors = true, glSubTotal = false, mxSymbolsODFF = {
              px = 0x0, pn = {pi_ = 0x0}}, mxSymbolsPODF = {px = 0x0, pn = {pi_ = 0x0}}, mxSymbolsNative = {px = 0x28e4a00, pn = {pi_ = 0x2b72b80}}, mxSymbolsEnglish = {px = 0x0, pn = {
                pi_ = 0x0}}, mxSymbolsEnglishXL = {px = 0x0, pn = {pi_ = 0x0}}, mxSymbolsOOXML = {px = 0x0, pn = {pi_ = 0x0}}}, static pCharClassEnglish = 0x29bd520, 
          static pConventions = {0x7f30a2162080 <ConvOOO_A1>, 0x7f30a2162060 <ConvOOO_A1_ODF>, 0x7f30a2162040 <ConvXL_A1>, 0x7f30a2162000 <ConvXL_R1C1>, 0x7f30a2162020 <ConvXL_OOX>, 
            0x0}, static pConvOOO_A1 = 0x7f30a2162080 <ConvOOO_A1>, static pConvOOO_A1_ODF = 0x7f30a2162060 <ConvOOO_A1_ODF>, static pConvXL_A1 = 0x7f30a2162040 <ConvXL_A1>, 
          static pConvXL_R1C1 = 0x7f30a2162000 <ConvXL_R1C1>, static pConvXL_OOX = 0x7f30a2162020 <ConvXL_OOX>, static maAddInMap = 0x7f30a2131560 <ScCompiler::maAddInMap>, 
          pDoc = 0x2c0bbd0, aPos = {nRow = 15, nCol = 5, nTab = 14, static detailsOOOa1 = {eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}, mpFormatter = 0x2cab540, 
          maExternalLinks = {_pSequence = 0x7f30d245e3ac, static s_pType = 0x29b2c40}, cSymbol = {0, 0, 53, 58, 67, 49, 55, 0, 48096, 638, 0, 0, 48112, 638, 0, 0, 1, 0, 12, 0, 73, 0, 14, 
            0, 39072, 11782, 32767, 0, 93, 0, 0, 0, 1, 0, 12, 0, 0, 0, 0, 0, 81, 0, 12, 0, 36992, 11782, 32767, 0, 40752, 638, 0, 0, 14, 0, 0, 0, 33488, 1092, 0, 0, 46464, 638, 0, 0, 3, 
            0, 0, 0, 0, 0, 65493, 3, 37008, 11782, 32767, 0, 42040, 638, 0, 0, 0, 0, 0, 0, 37000, 11782, 32767, 0, 42776, 638, 0, 0, 41120, 638, 0, 0, 41672, 638, 0 <repeats 46 times>, 
            45352, 638, 0 <repeats 14 times>, 15570, 49892, 32560, 0, 25392, 638, 0, 0, 33488, 1092, 0, 0, 23232, 49939, 32560, 0, 0, 0, 0, 0, 33488, 1092, 0, 0, 46848, 49898, 32560, 0, 
            33488, 1092, 0, 0, 25720, 49897, 32560, 0, 0, 0, 32767, 0, 37408, 11782, 32767, 0, 0, 0, 0, 0, 37628, 11782, 32767, 0, 4608, 638, 0, 0, 0, 0, 0, 0, 0, 0, 4, 0, 46464, 638, 0, 
            0, 19424, 49897, 32560, 0, 37408, 11782, 32767, 0, 0, 0, 0, 0...}, aFormula = {pData = 0x41efb60}, nSrcPos = 15, pRawToken = {px = 0x4481aa0}, pCharClass = 0x2892610, 
          mnPredetectedReference = 0, nMaxTab = 17, mnRangeOpPosInSymbol = -1, pConv = 0x7f30a2162080 <ConvOOO_A1>, meExtendedErrorDetection = ScCompiler::EXTENDED_ERROR_DETECTION_NONE, 
          mbCloseBrackets = true, mbRewind = false, maExternalFiles = std::vector of length 0, capacity 0, maTabNames = std::vector of length 18, capacity 18 = {{pData = 0x4630490}, {
              pData = 0x2e06bf0}, {pData = 0x2eb03c0}, {pData = 0x2f4e660}, {pData = 0x2d05ad0}, {pData = 0x35ea140}, {pData = 0x36aa4b0}, {pData = 0x3752960}, {pData = 0x37d2a30}, {
              pData = 0x38568d0}, {pData = 0x38e31f0}, {pData = 0x3966560}, {pData = 0x3a02490}, {pData = 0x356e700}, {pData = 0x3b0aa90}, {pData = 0x4616e00}, {pData = 0x3c20550}, {
              pData = 0x3ca3ac0}}}
        bAgain = <optimized out>
        aCell = {<SvtListener> = {_vptr.SvtListener = 0x14, maBroadcasters = {
              table_ = {<boost::unordered::detail::table<boost::unordered::detail::set<std::allocator<SvtBroadcaster*>, SvtBroadcaster*, boost::hash<SvtBroadcaster*>, std::equal_to<SvtBroadcaster*> > >> = {<boost::unordered::detail::functions<boost::hash<SvtBroadcaster*>, std::equal_to<SvtBroadcaster*> >> = {static nothrow_move_assignable = true, 
                    static nothrow_move_constructible = <optimized out>, current_ = false, funcs_ = {{data_ = {buf = "", align_ = 0 '\000'}}, {data_ = {buf = "", align_ = 0 '\000'}}}}, 
                  allocators_ = {<boost::unordered::detail::compressed_base<std::allocator<boost::unordered::detail::ptr_bucket>, 1>> = {<std::allocator<boost::unordered::detail::ptr_bucket>> = {<__gnu_cxx::new_allocator<boost::unordered::detail::ptr_bucket>> = {<No data fields>}, <No data fields>}, <No data fields>}, <boost::unordered::detail::compressed_base<std::allocator<boost::unordered::detail::ptr_node<SvtBroadcaster*> >, 2>> = {<std::allocator<boost::unordered::detail::ptr_node<SvtBroadcaster*> >> = {<__gnu_cxx::new_allocator<boost::unordered::detail::ptr_node<SvtBroadcaster*> >> = {<No data fields>}, <No data fields>}, <No data fields>}, <No data fields>}, bucket_count_ = 4646940759260397568, size_ = 26, mlf_ = 0, 
                  max_load_ = 4646940759260397568, buckets_ = 0xc}, <No data fields>}}}, mxGroup = {px = 0x0}, aResult = {static MULTILINE_UNKNOWN = 0 '\000', 
            static MULTILINE_FALSE = 1 '\001', static MULTILINE_TRUE = 2 '\002', static MAX_TOKENREF_COUNT = 61440, {mfValue = 468, mpToken = 0x407d400000000000}, mnError = 0, 
            mbToken = false, mbEmpty = false, mbEmptyDisplayedAsString = false, meMultiline = 0 '\000'}, eTempGrammar = 71598800, pCode = 0x7f30c2e85582, pDocument = 0x2807610, 
          pPrevious = 0x1b0, pNext = 0x6, pPreviousTrack = 0x36, pNextTrack = 0x0, nSeenInIteration = 21199, cMatrixFlag = 232 'è', nFormatType = 32560, bDirty = false, bChanged = false, 
          bRunning = false, bCompile = false, bSubTotal = false, bIsIterCell = false, bInChangeTrack = false, bTableOpDirty = false, bNeedListening = false, mbNeedsNumberFormat = false, 
          mbPostponedDirty = false, aPos = {nRow = 71598800, nCol = 0, nTab = 0, static detailsOOOa1 = {eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}}
        itr = <optimized out>
        aFormula = {pData = 0x41efb60}
        pArr = <optimized out>
        itrEnd = <optimized out>
        aPos = {nRow = 15, nCol = 5, nTab = 14, static detailsOOOa1 = {eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}
        pFormatter = <optimized out>
        bFormula = <optimized out>
        bNumFmtChanged = false
        bAutoFormat = <optimized out>
        pDoc = 0x2c0bbd0
        rMark = <optimized out>
        i = <optimized out>
        aModificator = {rDocShell = @0x2c0bb10, mpProtector = {px = 0x3f2e760}, bAutoCalcShellDisabled = false, bIdleEnabled = true}
        rFunc = @0x2bb00e0: {_vptr.ScDocFunc = 0x7f30a20e5490 <vtable for ScDocFuncDirect+16>, rDocShell = @0x2c0bb10}
        aTester = {mbIsEditable = true, mbOnlyMatrix = true}
#4  0x00007f30a1bf02d1 in ScCellShell::Execute (this=0x2c9c300, rReq=...) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/view/cellsh3.cxx:187
        aStr = {pData = 0x41efb60}
        pHdl = <optimized out>
        pScMod = 0x288e370
#5  0x00007f30d15d1ef6 in SfxShell::CallExec (this=0x2c9c300, pFunc=0x7f30a1bde350 <SfxStubScCellShellExecute(SfxShell*, SfxRequest&)>, rReq=...)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/include/sfx2/shell.hxx:181
No locals.
#6  0x00007f30d15cb4ec in SfxDispatcher::Call_Impl (this=0x2dea100, rShell=..., rSlot=..., rReq=..., bRecord=1 '\001')
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/dispatch.cxx:220
        bThisDispatcherAlive = 1 '\001'
        pOldInCallAliveFlag = 0x7fff2e06a5cf "\001"
        pFunc = 0x7f30a1bde350 <SfxStubScCellShellExecute(SfxShell*, SfxRequest&)>
        bAutoUpdate = 0 '\000'
#7  0x00007f30d15cd0af in SfxDispatcher::_Execute (this=0x2dea100, rShell=..., rSlot=..., rReq=..., eCallMode=4)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/dispatch.cxx:899
No locals.
#8  0x00007f30d1376dcd in SfxBindings::Execute_Impl (this=this@entry=0x3b026b0, aReq=..., pSlot=pSlot@entry=0x7f30a2151880 <aScCellShellSlots_Impl+9120>, pShell=pShell@entry=0x2c9c300)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/bindings.cxx:1293
No locals.
#9  0x00007f30d1377f0e in SfxBindings::Execute_Impl (this=this@entry=0x3b026b0, nId=nId@entry=26137, ppItems=0x7fff2e06a1a8, ppItems@entry=0x7fff2e06a1a0, nModi=nModi@entry=0, 
    nCallMode=nCallMode@entry=0, ppInternalArgs=ppInternalArgs@entry=0x0, bGlobalOnly=bGlobalOnly@entry=0 '\000')
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/bindings.cxx:1185
        pCache = <optimized out>
        rDispatcher = <optimized out>
        xCache = <optimized out>
        pShell = 0x2c9c300
        pServer = <optimized out>
        pSlot = <optimized out>
        aReq = {<SfxHint> = {_vptr.SfxHint = 0x7f30d18a2c10 <vtable for SfxRequest+16>}, nSlot = 26137, pArgs = 0x4448eb0, pImp = 0x42a3280}
        pRet = <optimized out>
#10 0x00007f30d1378168 in SfxBindings::Execute (this=this@entry=0x3b026b0, nId=nId@entry=26137, ppItems=ppItems@entry=0x7fff2e06a1a0, nModi=nModi@entry=0, nCallMode=nCallMode@entry=0, 
    ppInternalArgs=ppInternalArgs@entry=0x0) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/bindings.cxx:1095
        pRet = <optimized out>
#11 0x00007f30a1bf163e in ScCellShell::Execute (this=<optimized out>, rReq=...) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/view/cellsh3.cxx:267
        aItem = {<CntUnencodedStringItem> = {<SfxPoolItem> = {_vptr.SfxPoolItem = 0x7f30d11ae330 <vtable for SfxStringItem+16>, m_nRefCount = 0, m_nWhich = 26137, m_nKind = 0}, 
            m_aValue = {pData = 0x41efb60}}, <No data fields>}
        aArgs = {0x7fff2e06a1c0, 0x0}
        pStatusItem = 0x4648e20
        aCursorPos = {nRow = 15, nCol = 5, nTab = 14, static detailsOOOa1 = {eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}
        aString = {pData = 0x41efb60}
        pScMod = <optimized out>
#12 0x00007f30d15d1ef6 in SfxShell::CallExec (this=0x2c9c300, pFunc=0x7f30a1bde350 <SfxStubScCellShellExecute(SfxShell*, SfxRequest&)>, rReq=...)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/include/sfx2/shell.hxx:181
No locals.
#13 0x00007f30d15cb4ec in SfxDispatcher::Call_Impl (this=0x2dea100, rShell=..., rSlot=..., rReq=..., bRecord=1 '\001')
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/dispatch.cxx:220
        bThisDispatcherAlive = 1 '\001'
        pOldInCallAliveFlag = 0x0
        pFunc = 0x7f30a1bde350 <SfxStubScCellShellExecute(SfxShell*, SfxRequest&)>
        bAutoUpdate = 0 '\000'
#14 0x00007f30d15cd0af in SfxDispatcher::_Execute (this=0x2dea100, rShell=..., rSlot=..., rReq=..., eCallMode=4)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/dispatch.cxx:899
No locals.
#15 0x00007f30d1376dcd in SfxBindings::Execute_Impl (this=this@entry=0x3b026b0, aReq=..., pSlot=pSlot@entry=0x7f30a2151358 <aScCellShellSlots_Impl+7800>, pShell=pShell@entry=0x2c9c300)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/bindings.cxx:1293
No locals.
#16 0x00007f30d1377f0e in SfxBindings::Execute_Impl (this=this@entry=0x3b026b0, nId=nId@entry=26101, ppItems=0x7fff2e06a978, ppItems@entry=0x7fff2e06a970, nModi=nModi@entry=0, 
    nCallMode=nCallMode@entry=0, ppInternalArgs=ppInternalArgs@entry=0x0, bGlobalOnly=bGlobalOnly@entry=0 '\000')
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/bindings.cxx:1185
        pCache = <optimized out>
        rDispatcher = <optimized out>
        xCache = <optimized out>
        pShell = 0x2c9c300
        pServer = <optimized out>
        pSlot = <optimized out>
        aReq = {<SfxHint> = {_vptr.SfxHint = 0x7f30d18a2c10 <vtable for SfxRequest+16>}, nSlot = 26101, pArgs = 0x41ffd40, pImp = 0x41fc5b0}
        pRet = <optimized out>
#17 0x00007f30d1378168 in SfxBindings::Execute (this=this@entry=0x3b026b0, nId=nId@entry=26101, ppItems=ppItems@entry=0x7fff2e06a970, nModi=nModi@entry=0, nCallMode=nCallMode@entry=0, 
    ppInternalArgs=ppInternalArgs@entry=0x0) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sfx2/source/control/bindings.cxx:1095
        pRet = <optimized out>
#18 0x00007f30a194aa44 in ScInputHandler::EnterHandler (this=this@entry=0x2e15f80, nBlockMode=<optimized out>)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/app/inputhdl.cxx:2819
        nId = 26101
        aItem = {<SfxPoolItem> = {_vptr.SfxPoolItem = 0x7f30a20dbf50 <vtable for ScInputStatusItem+16>, m_nRefCount = 0, m_nWhich = 26100, m_nKind = 0}, aCursorPos = {nRow = 15, 
            nCol = 5, nTab = 14, static detailsOOOa1 = {eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}, aStartPos = {nRow = 15, nCol = 5, nTab = 14, 
            static detailsOOOa1 = {eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}, aEndPos = {nRow = 15, nCol = 5, nTab = 14, static detailsOOOa1 = {
              eConv = formula::FormulaGrammar::CONV_OOO, nRow = 0, nCol = 0}}, aString = {pData = 0x41efb60}, pEditData = 0x0, mpMisspellRanges = 0x0}
        aArgs = {0x7fff2e06a9a0, 0x0}
        pSfxApp = 0x257fe40
        aString = {pData = 0x41efb60}
        pActiveView = <optimized out>
        aMisspellRanges = std::vector of length 0, capacity 0
        bSpellErrors = false
        bMatrix = false
        pObject = 0x0
        bForget = false
        pCellAttrs = 0x0
        pExecuteSh = 0x2d7bf40
        bOldMod = true
#19 0x00007f30a194c2a7 in ScInputHandler::KeyInput (this=0x2e15f80, rKEvt=..., bStartEdit=<optimized out>)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/app/inputhdl.cxx:3152
        nMode = <optimized out>
        bShift = false
        bControl = false
        bUsed = false
        bSkip = false
        bCursorKey = <optimized out>
        bInsKey = <optimized out>
        aCode = <optimized out>
        bAlt = <optimized out>
        bInputLine = <optimized out>
        bDoEnter = false
#20 0x00007f30a194d31a in ScTextWnd::KeyInput (this=0x3eeafd8, rKEvt=...) at /build/libreoffice-UGxupn/libreoffice-4.2.4/sc/source/ui/app/inputwin.cxx:1641
No locals.
#21 0x00007f30cf74dc7e in ImplHandleKey (pWindow=0x3d26af0, nSVEvent=nSVEvent@entry=4, nKeyCode=<optimized out>, nCharCode=0, nRepeat=<optimized out>, bForward=bForward@entry=1 '\001')
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/vcl/source/window/winproc.cxx:1089
        aKeyEvt = {maKeyCode = {nCode = 1280, eFunc = KEYFUNC_DONTKNOW}, mnRepeat = 0, mnCharCode = 0}
        aNotifyEvt = {mpWindow = 0x3eeafd8, mpData = 0x7fff2e06ab10, mnType = 4, mnRetValue = 0}
        bKeyPreNotify = <optimized out>
        nRet = 1
        pSVData = 0x7f30cfac9aa0 <rtl::Static<ImplSVData, (anonymous namespace)::private_aImplSVData>::get()::instance>
        bCtrlF6 = <optimized out>
        pChild = 0x3eeafd8
        aDelData = {_vptr.ImplDelData = 0x7f30cfac3470 <vtable for ImplDelData+16>, mpNext = 0x0, mpWindow = 0x3eeafd8, mbDel = 0 '\000'}
        aKeyCode = {nCode = 1280, eFunc = KEYFUNC_DONTKNOW}
        aKeyEvent = {maKeyCode = {nCode = 1280, eFunc = KEYFUNC_DONTKNOW}, mnRepeat = 0, mnCharCode = 0}
#22 0x00007f30cf7508cd in ImplWindowFrameProc (pWindow=0x3d26af0, nEvent=<optimized out>, pEvent=0x7fff2e06ad10)
    at /build/libreoffice-UGxupn/libreoffice-4.2.4/vcl/source/window/winproc.cxx:2461
        pKeyEvt = 0x7fff2e06ad10
        nRet = 0
#23 0x00007f30c318b09d in CallCallback (pEvent=0x7fff2e06ad10, nEvent=5, this=0x2d0db70) at /build/libreoffice-UGxupn/libreoffice-4.2.4/vcl/inc/salframe.hxx:243
No locals.
#24 GtkSalFrame::doKeyCallback (this=this@entry=0x2d0db70, state=0, keyval=keyval@entry=65293, hardware_keycode=<optimized out>, group=<optimized out>, time=<optimized out>, aOrigCode=0, 
    bDown=bDown@entry=true, bSendRelease=bSendRelease@entry=false) at /build/libreoffice-UGxupn/libreoffice-4.2.4/vcl/unx/gtk/window/gtksalframe.cxx:474
        bHandled = <optimized out>
        aEvent = {mnTime = 166157612, mnCode = 1280, mnCharCode = 0, mnRepeat = 0}
        aDel = {m_pNotifier = 0x2d0db78}
#25 0x00007f30c318cb91 in GtkSalFrame::signalKey (pEvent=0x40690a0, frame=0x2d0db70) at /build/libreoffice-UGxupn/libreoffice-4.2.4/vcl/unx/gtk/window/gtksalframe.cxx:3838
        pThis = 0x2d0db70
        aDel = {m_pNotifier = 0x2d0db78}
#26 0x00007f30c290a4f5 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
No symbol table info available.
#27 0x00007f30cacdc3b8 in g_closure_invoke (closure=0x2d5c7c0, return_value=0x7fff2e06aee0, n_param_values=2, param_values=0x7fff2e06af90, invocation_hint=0x7fff2e06af30)
    at /tmp/buildd/glib2.0-2.40.0/./gobject/gclosure.c:768
        marshal = 0x7f30c290a480
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x2d5c7a0
        __FUNCTION__ = "g_closure_invoke"
#28 0x00007f30cacedd3d in signal_emit_unlocked_R (node=node@entry=0x24403f0, detail=detail@entry=0, instance=instance@entry=0x24709f0, 
    emission_return=emission_return@entry=0x7fff2e06b060, instance_and_params=instance_and_params@entry=0x7fff2e06af90) at /tmp/buildd/glib2.0-2.40.0/./gobject/gsignal.c:3551
        tmp = <optimized out>
        handler = 0x2ad96d0
        accumulator = 0x2440460
        emission = {next = 0x0, instance = 0x24709f0, ihint = {signal_id = 42, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
        handler_list = 0x2ad96d0
        return_accu = 0x7fff2e06aee0
        accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 42
        max_sequential_handler_number = 1775
        return_value_altered = 0
#29 0x00007f30cacf56f9 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fff2e06b128)
    at /tmp/buildd/glib2.0-2.40.0/./gobject/gsignal.c:3317
        return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
              v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        error = 0x0
        rtype = 20
        static_scope = 0
        instance_and_params = 0x7fff2e06af90
        signal_return_type = <optimized out>
        param_values = 0x7fff2e06afa8
        i = <optimized out>
        n_params = <optimized out>
        __FUNCTION__ = "g_signal_emit_valist"
#30 0x00007f30cacf5ce2 in g_signal_emit (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>) at /tmp/buildd/glib2.0-2.40.0/./gobject/gsignal.c:3363
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff2e06b200, reg_save_area = 0x7fff2e06b140}}
#31 0x00007f30c2a1a114 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
No symbol table info available.
#32 0x00007f30c2908d77 in gtk_propagate_event () from /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
No symbol table info available.
#33 0x00007f30c290905b in gtk_main_do_event () from /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
No symbol table info available.
#34 0x00007f30c25841fc in ?? () from /usr/lib/x86_64-linux-gnu/libgdk-x11-2.0.so.0
No symbol table info available.
#35 0x00007f30ce1ebe04 in g_main_dispatch (context=0x2431c60) at /tmp/buildd/glib2.0-2.40.0/./glib/gmain.c:3064
        dispatch = 0x7f30c25841b0
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x0
        callback = 0x0
        cb_funcs = <optimized out>
        cb_data = 0x0
        need_destroy = <optimized out>
        source = 0x2431b70
        current = 0x2498880
        i = 0
#36 g_main_context_dispatch (context=context@entry=0x2431c60) at /tmp/buildd/glib2.0-2.40.0/./glib/gmain.c:3663


(gdb) p *pDesc
$1 = {_vptr.IFunctionDescription = 0x1c00000001}

(gdb) p aLRUList
$2 = std::vector of length 20, capacity 32 = {0x3f03d70, 0x3f237f0, 0x3f30b90, 0x3f464e0, 0x3f32d30, 0x3f342e0, 0x3f1fbe0, 0x3f14340, 0x3f09040, 0x3f0f390, 0x2565700, 0x41ee2d0, 
  0x3f198a0, 0x3f5e500, 0x3f0acc0, 0x3f3cd00, 0x4675890, 0x3f47b90, 0x3d347d0, 0x3f185d0}
(gdb) p *(const formula::IFunctionDescription *)0x3f237f0
$4 = {_vptr.IFunctionDescription = 0x3800000001}
(gdb) p *(const formula::IFunctionDescription *)0x3f30b90
$5 = {_vptr.IFunctionDescription = 0x2a23da0}
(gdb) p *(const formula::IFunctionDescription *)0x3f464e0
$6 = {_vptr.IFunctionDescription = 0x2b00000001}
(gdb) p *(const formula::IFunctionDescription *)0x3f32d30
$7 = {_vptr.IFunctionDescription = 0x3f32d50}
(gdb) p *(const formula::IFunctionDescription *)0x3f342e0
$8 = {_vptr.IFunctionDescription = 0x1f00000001}
(gdb) p *(const formula::IFunctionDescription *)0x3f1fbe0
$9 = {_vptr.IFunctionDescription = 0x7200000001}
(gdb) p *(const formula::IFunctionDescription *)0x3f14340
$10 = {_vptr.IFunctionDescription = 0x2d00000001}
(gdb) p *(const formula::IFunctionDescription *)0x3f09040
$11 = {_vptr.IFunctionDescription = 0x3600000001}
(gdb) p *(const formula::IFunctionDescription *)0x3f0f390
$12 = {_vptr.IFunctionDescription = 0x7f30a20c3570 <vtable for ScFuncDesc+16>}
Comment 1 Max Kellermann 2014-06-05 18:43:36 UTC
(gdb) p *ScGlobal::pStarCalcFunctionMgr->pFuncList
$13 = {aFunctionList = std::vector of length 440, capacity 440 = {0x41ee2d0, 0x2dc8890, 0x3f08e90, 0x4204200, 0x24224f0, 0x410f800, 0x3f383f0, 0x4636d00, 0x428a410, 0x3ef0ba0, 0x3d347d0, 
    0x40e6060, 0x406d480, 0x2dec260, 0x3f08fc0, 0x2dec310, 0x4243520, 0x48a9ca0, 0x48a5dd0, 0x3f3ae60, 0x3f39f70, 0x3f3aa60, 0x3f07b50, 0x3f399c0, 0x3f090e0, 0x3f3a090, 0x3f39450, 
    0x3f38ed0, 0x3f3a670, 0x46bafd0, 0x3f38cd0, 0x4898730, 0x428aac0, 0x4243fc0, 0x41f3f20, 0x3f1ec50, 0x48b0150, 0x4273110, 0x4243e30, 0x4620b50, 0x4660f70, 0x48985f0, 0x4640f10, 
    0x26bc390, 0x3f377b0, 0x3f40d50, 0x3f3dc90, 0x3f3db90, 0x3f3a2d0, 0x3f3a1c0, 0x3f39140, 0x3f38860, 0x3f385a0, 0x3f37fc0, 0x3f37c20, 0x3f379a0, 0x3f37340, 0x3f37080, 0x3f36d00, 
    0x3f36bd0, 0x3f36820, 0x3f35c10, 0x3f35b40, 0x3f39da0, 0x3f3c840, 0x429fca0, 0x465de60, 0x41f82e0, 0x3f09730, 0x4627930, 0x48983e0, 0x464ede0, 0x448a060, 0x4675890, 0x3f3eab0, 
    0x41f7bb0, 0x3f3e940, 0x3f356c0, 0x3f3fd40, 0x46aeea0, 0x45f0f30, 0x463a2a0, 0x40d5e20, 0x4664d80, 0x4662390, 0x46624b0, 0x406de90, 0x3f40750, 0x3f402f0, 0x2dc2150, 0x2565700, 
    0x3f47da0, 0x3f0d990, 0x3f15960, 0x3f19fa0, 0x46afec0, 0x3f0b690, 0x3f3d2b0, 0x45ec750, 0x3f3ff60, 0x3f3bed0, 0x3f1c300, 0x3f1ba90, 0x3f19d40, 0x3f1c190, 0x3f0c530, 0x3f1cf30, 
    0x3f16e80, 0x3f1eb00, 0x3f12bd0, 0x3f1cca0, 0x3f12e60, 0x3f1adb0, 0x3f1cde0, 0x3f1a1c0, 0x3f1a5a0, 0x3f168c0, 0x3f16c00, 0x3f306a0, 0x3f160b0, 0x3f165a0, 0x468b630, 0x3f0dee0, 
    0x3f16380, 0x3f172e0, 0x3f0dba0, 0x3f0a3a0, 0x3f4be30, 0x3f0a580, 0x3f198a0, 0x4286590, 0x4624710, 0x4652c10, 0x428b2f0, 0x4244830, 0x3f17950, 0x3f17690, 0x3f1ddd0, 0x3f0abe0, 
    0x3f0acc0, 0x3f44ac0, 0x3f3c670, 0x4372120, 0x4372200, 0x3f3cd00, 0x3f3cde0, 0x3f12620, 0x3f0ebb0, 0x44d7d30, 0x3f4c110, 0x3f17f20, 0x465a100, 0x436e180, 0x4639f70, 0x3f4ab80, 
    0x3f0f390, 0x3f0f5f0, 0x3f182e0, 0x3f18550, 0x3f4b800, 0x3f4a780, 0x3f0e920, 0x3f211d0, 0x3f212b0, 0x3f0cb20, 0x454da70, 0x45f64e0, 0x3f19250, 0x3f32600, 0x40d78f0, 0x3f1ed00, 
    0x3f3de20, 0x3f3b6e0, 0x3f3b970, 0x3f3b600, 0x3f5e220, 0x3f57440, 0x3f57170, 0x3f185d0, 0x3f3ce50, 0x3f21780, 0x3f3ba10, 0x3f18fa0, 0x3f3bc90, 0x3f568d0, 0x3f4b410, 0x3f5b5f0, 
    0x3f45f30, 0x3f46100, 0x3f0edc0, 0x3f4dee0, 0x4619480, 0x46383f0, 0x463b510, 0x2d035a0, 0x3f4ee80, 0x3f50cc0, 0x3f50da0, 0x3f47b90, 0x3f4dc80...}, aFunctionListIter = , 
  nMaxFuncNameLen = 21}
Comment 2 Julien Nabet 2014-06-05 20:22:30 UTC
Could you attach a file and give a minimal step by step process to reproduce this?

Also what number of lines/col do you have? I wonder if http://cgit.freedesktop.org/libreoffice/core/commit/?id=68ec95b3f80408ae50897b043eed69a07d084df9 could help.


Keep in mind that attachments are automatically made public so remove any confidential/private part
Comment 3 Max Kellermann 2014-06-05 20:34:46 UTC
I cannot reproduce it reliably; sometimes, Calc works well for many hours, and sometimes it crashes a few times in a row. It occurred often after changing the range parameter of SUM formulas, and after sorting a table. It always happened right after pressing the Enter key.

The one file I have been working on recently does not look suspicious; 18 sheets, no more than 20 columns, and no more than 200 rows per sheet. There is one pivot table and a few external links (to another Calc file).

So what I have is 27 core files of today. Do you want me to extract more data from this core file?
Comment 4 Max Kellermann 2014-06-05 20:40:06 UTC
Disregard the sorting part in my previous post; the backtrace for the sorting crash looks very different and I will open a new bug report for it. That appears to be a completely different bug.
Comment 5 Eike Rathke 2014-08-15 17:17:33 UTC
As this happened with version 4.2.4.2, does it continue to happen with later releases?
Comment 6 QA Administrators 2015-04-01 14:46:46 UTC
Dear Bug Submitter,

This bug has been in NEEDINFO status with no change for at least
6 months. Please provide the requested information as soon as
possible and mark the bug as UNCONFIRMED. Due to regular bug
tracker maintenance, if the bug is still in NEEDINFO status with
no change in 30 days the QA team will close the bug as INVALID
due to lack of needed information.

For more information about our NEEDINFO policy please read the
wiki located here:
https://wiki.documentfoundation.org/QA/Bugzilla/Fields/Status/NEEDINFO

If you have already provided the requested information, please
mark the bug as UNCONFIRMED so that the QA team knows that the
bug is ready to be confirmed.
 
Thank you for helping us make LibreOffice even better for everyone!


Warm Regards,
QA Team
Comment 7 QA Administrators 2015-05-06 14:21:01 UTC
Dear Bug Submitter,

Please read this message in its entirety before proceeding.

Your bug report is being closed as INVALID due to inactivity and
a lack of information which is needed in order to accurately
reproduce and confirm the problem. We encourage you to retest
your bug against the latest release. If the issue is still
present in the latest stable release, we need the following
information (please ignore any that you've already provided):

a) Provide details of your system including your operating
   system and the latest version of LibreOffice that you have
   confirmed the bug to be present

b) Provide easy to reproduce steps – the simpler the better

c) Provide any test case(s) which will help us confirm the problem

d) Provide screenshots of the problem if you think it might help

e) Read all comments and provide any requested information

Once all of this is done, please set the bug back to UNCONFIRMED
and we will attempt to reproduce the issue. Please do not:

a) respond via email 

b) update the version field in the bug or any of the other details
   on the top section of our bug tracker

-- The LibreOffice QA Team 

This INVALID Message was generated on: 2015-05-06

Warm Regards,
QA Team