Bug 93497 - Drag selection of elements, SVG graphic, Visio drawing, Math OLE formulas crash LO with -- access violation "no RTTI data" -- error
Summary: Drag selection of elements, SVG graphic, Visio drawing, Math OLE formulas cra...
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Draw (show other bugs)
Version:
(earliest affected)
5.1.0.0.alpha0+ Master
Hardware: All All
: high major
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: bibisected, regression
: 93549 (view as bug list)
Depends on:
Blocks:
 
Reported: 2015-08-18 02:19 UTC by V Stuart Foote
Modified: 2015-12-15 11:03 UTC (History)
5 users (show)

See Also:
Crash report or crash signature:


Attachments
gdb backtrace of crash on 64-bit Linux (3.69 KB, application/x-bzip)
2015-08-18 20:03 UTC, V Stuart Foote
Details
stacktrace of crash on 64-bit Linux (604.53 KB, application/x-bzip)
2015-08-18 20:15 UTC, V Stuart Foote
Details

Note You need to log in before you can comment on or make changes to this bug.
Description V Stuart Foote 2015-08-18 02:19:01 UTC
On Windows 10 Pro 64-bit en-US with
Version: 5.1.0.0.alpha1+ (x64)
Build ID: 98244c3cb47824babc746ebc14a199977e9768d1
TinderBox: Win-x86_64@62-TDF, Branch:MASTER, Time: 2015-08-16_11:56:32
Locale: en-US (en_US)

same on 32-bit builds on 64-bit Windows 10 Pro
Version: 5.1.0.0.alpha1+
Build ID: bc397ac8265186531e4e3de17fc9bcb71fd46f2e
TinderBox: Win-x86@39, Branch:master, Time: 2015-08-14_08:05:07
Locale: en-US (en_US)

STR

1. Open a Visio .VSD document in Draw
2. Either Edit -> Select All, or perform a mouse cursor box selection
3. selection handles show, but Draw/LO then crashes with error:

   Fatal error
   Access violation - no RTTI data!

4. Normal recovery window on relaunch.
5. Likewise, opening of an .SVG image and selecting elements is also causing the same error. 

Other graphics formats: EPS, EMF, PNG, JPG are not similarly afflicted.

Unable to get a good StackTrace either 32-bit or 64-bit builds.
Comment 1 V Stuart Foote 2015-08-18 02:21:36 UTC
Is not affecting builds through 5.0.1.1rc
Comment 2 V Stuart Foote 2015-08-18 13:31:03 UTC
On Fedora 21 32-bit with LXDE with

Version: 5.1.0.0.alpha1+
Build ID: 5d6ef74eea5d73b8cd17f313ad87138d56dc76ce
TinderBox: Linux-rpm_deb-x86@71-TDF, Branch:master, Time: 2015-08-18_01:27:27
Locale: en-US (en_US.UTF-8)

Same LO crash (but no error message) selecting elements of either SVG graphic or VSD drawing.
Comment 3 V Stuart Foote 2015-08-18 20:03:34 UTC
Created attachment 118001 [details]
gdb backtrace of crash on 64-bit Linux
Comment 4 V Stuart Foote 2015-08-18 20:15:53 UTC
Created attachment 118002 [details]
stacktrace of crash on 64-bit Linux

On RH/Centos 7 64-bit with debug build

Version: 5.1.0.0.alpha1+
Build ID: 181a7b27acf29a2728be5a0eb3696796bc7df3da
TinderBox: Linux-rpm_deb-x86_64@70-TDF-dbg, Branch:master, Time: 2015-08-17_23:39:00
Locale: en-US (en_US.utf8)

gdb backtrace and stacktrace logs attached
Comment 5 Michael Weghorn 2015-08-18 21:04:27 UTC
I bibisected this using an SVG file and the the lo-linux-dbgutil-daily bibisect repository. Result:
 f7a251c888dced052c1b7698596d05c39c1775dc is the first bad commit
commit f7a251c888dced052c1b7698596d05c39c1775dc
Author: Miklos Vajna <vmiklos@collabora.co.uk>
Date:   Fri Jul 31 05:33:15 2015 +0200

    2015-07-31: source-hash-2d9db406d301d722649ca539cacad823b89191ca

:100644 100644 fd256b95a1843b71ec2bb4c6a1e08427f965ea62 3573964e9a7587bb3c8da3e854480a234ba0980a M	build-info.txt
:040000 040000 b2df82bc40c5edc47b30e87493e02d19d32d40c9 6ed01b7962ac1ba5b365f1714f42286c5e2e7367 M	opt

---

$ git bisect log
# bad: [05978e67ddc322278d3ff3cbd91f1c93b3bc2bdf] 2015-08-14: source-hash-6eede78d4e75fdbec7e565ebb15f1ce9956734f0
# good: [2b392af9c8f54629e3a3a98a8c92fa5af1c6722f] 2015-05-20: source-hash-90e2dabb8d0bb5382234be776c2ad0e2d5d9e224
git bisect start '05978e67ddc322278d3ff3cbd91f1c93b3bc2bdf' '2b392af9c8f54629e3a3a98a8c92fa5af1c6722f'
# good: [cb936e89eced2812e683a84f67099ff12eb97245] 2015-07-02: source-hash-c18f11587d37f285a95447dd8996c8b605732e00
git bisect good cb936e89eced2812e683a84f67099ff12eb97245
# good: [1cd3607857e7065cfb54d4ea5ca08c78c0ab83d8] 2015-07-23: source-hash-e92a8b92072284fd7c37d7bb3e1e8fe72a185f35
git bisect good 1cd3607857e7065cfb54d4ea5ca08c78c0ab83d8
# bad: [567a84772a25278d7e30d4259f7cce71d9666f74] 2015-08-03: source-hash-71ace488448b64e6c4cd9065e109d2c9850b031a
git bisect bad 567a84772a25278d7e30d4259f7cce71d9666f74
# good: [97960d1e09b1fb9b9da21b0a84e10f8836c05494] 2015-07-28: source-hash-2d8f1faa97a3dfd38c540e0cd0b73a2e9d621d53
git bisect good 97960d1e09b1fb9b9da21b0a84e10f8836c05494
# bad: [f7a251c888dced052c1b7698596d05c39c1775dc] 2015-07-31: source-hash-2d9db406d301d722649ca539cacad823b89191ca
git bisect bad f7a251c888dced052c1b7698596d05c39c1775dc
# good: [c730056f273a5c2e249d63d8065970cff2717b3b] 2015-07-30: source-hash-37e936996acb4a8329fad2ec73a35f66be446e90
git bisect good c730056f273a5c2e249d63d8065970cff2717b3b
# first bad commit: [f7a251c888dced052c1b7698596d05c39c1775dc] 2015-07-31: source-hash-2d9db406d301d722649ca539cacad823b89191ca
Comment 6 V Stuart Foote 2015-08-19 00:39:46 UTC
Did a some bisect work with Windows builds on hand:

Good
Version: 5.1.0.0.alpha1+
Build ID: f58f10fc89e19d182b5a415bb69af5ecc7de080a
TinderBox: Win-x86@39, Branch:master, Time: 2015-07-27_22:06:15
Locale: en-US (en_US)

Version: 5.1.0.0.alpha1+
Build ID: 171990764eedee708ce458be2239466307b2dc6a
TinderBox: Win-x86@39, Branch:master, Time: 2015-07-29_06:45:32
Locale: en-US (en_US)

Bad
Version: 5.1.0.0.alpha1+ (x64)
Build ID: 303b7758e90e11aedef95e4ab51b74398cd2ce0a
TinderBox: Win-x86_64@62-TDF, Branch:MASTER, Time: 2015-07-30_23:48:31
Locale: en-US (en_US)

Version: 5.1.0.0.alpha1+
Build ID: 2d9db406d301d722649ca539cacad823b89191ca
TinderBox: Win-x86@39, Branch:master, Time: 2015-07-31_00:25:17
Locale: en-US (en_US)

So something in the range...

http://cgit.freedesktop.org/libreoffice/core/log/?qt=range&q=171990764eedee708ce458be2239466307b2dc6a..303b7758e90e11aedef95e4ab51b74398cd2ce0a
Comment 7 Julien Nabet 2015-08-22 12:40:05 UTC
Same bt as tdf#93549.
I don't know which one should be considered as a dup since the other one contains useful information.
Comment 8 V Stuart Foote 2015-08-22 12:44:15 UTC
*** Bug 93549 has been marked as a duplicate of this bug. ***
Comment 9 V Stuart Foote 2015-08-22 12:50:35 UTC
Merging info from 93549 with this, see attachment 118051 [details] from bug 93549 for additional bt.

as well as https://bugs.documentfoundation.org/show_bug.cgi?id=93549#c4
Comment 10 V Stuart Foote 2015-08-22 13:35:02 UTC
Adjusted summary to include OLE Math formulas of bug 93549
Comment 11 Caolán McNamara 2015-09-16 14:46:19 UTC
did I also fix this when I committed http://cgit.freedesktop.org/libreoffice/core/commit/?id=afe53855a221a3c767e8eb06adfc3d1090d13bfb ?
Comment 12 V Stuart Foote 2015-09-16 15:29:04 UTC
@Caolan, *

On Windows 10 Pro 64-bit with
Version: 5.1.0.0.alpha1+
Build ID: 88c51cd55d1a9b29e62269c53b3923770253ab07-GL
TinderBox: Win-x86@62-merge-TDF, Branch:MASTER, Time: 2015-09-11_13:09:15
Locale: en-US (en_US)

Tested:

SVG
VSD
ODG with embedded OLE math objects

All are now selecting, and allowing movement, and save. Don't know if it was specifically that commit, but suspect it would be.  So, setting Resolved Fixed (rather than just WFM) unless someone wants to go ahead and bibisect for the fix :-)

Thanks!
Comment 13 Robinson Tryon (qubit) 2015-12-15 11:03:06 UTC
Migrating Whiteboard tags to Keywords: (bibisected)
[NinjaEdit]