Bug 97862 - With an ODT and DOC open, copy from ODT causes SIGSEGV.
Summary: With an ODT and DOC open, copy from ODT causes SIGSEGV.
Status: RESOLVED INVALID
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
5.0.4.2 release
Hardware: x86-64 (AMD64) All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard: needsKDE
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-14 19:32 UTC by Matti Aarnio
Modified: 2016-09-21 18:17 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matti Aarnio 2016-02-14 19:32:20 UTC 
(Critical as "crashes every time I am working on certain pair of documents.")

I have a .DOC and .ODT open in two separate windows.
I am preparing for copying of text from .ODT to .DOC, and after a region select in ODT pressing COPY (Control-C) results in SIGSEGV.  (The region spans several Headings, and body matter including a few tables.)

In rerun for debugger, the DOC document window was hidden entirely behind a browser, and copying did not cause problems, but when I clicked at KDE bar of active program objects to bring it forward, SIGSEGV happened again.

It won't crash if I start copy from heading + follow it with content matter, but if I span over a heading with content matter before and after it, an immediate crash.

Also, the system is less prone to crash if I export .ODT as .DOC, and restart the edit session with two .DOCs.


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ff0cffff700 (LWP 10024)]
sw::mark::MarkManager::renameMark (this=this@entry=0x7ff0c800f620, io_pMark=io_pMark@entry=0x0, rNewName=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/docbm.cxx:549
549             if ( io_pMark->GetName() == rNewName )
(gdb) print io_pMark 
$1 = (sw::mark::IMark *) 0x0
(gdb) where
#0  sw::mark::MarkManager::renameMark (this=this@entry=0x7ff0c800f620, io_pMark=io_pMark@entry=0x0, rNewName=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/docbm.cxx:549
#1  0x00007ff0c4bdf18c in (anonymous namespace)::lcl_CopyBookmarks (rPam=..., rCpyPam=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:248
#2  0x00007ff0c4be547b in sw::DocumentContentOperationsManager::CopyWithFlyInFly (this=this@entry=0x561fa1ba4f40, rRg=..., 
    nEndContentIndex=0, rInsPos=..., pCopiedPaM=pCopiedPaM@entry=0x7ff0cfffdb20, bMakeNewFrms=bMakeNewFrms@entry=true, 
    bDelRedlines=false, bCopyFlyAtFly=false)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:3199
#3  0x00007ff0c4be6166 in sw::DocumentContentOperationsManager::CopyImpl (this=this@entry=0x561fa1ba4f40, rPam=..., rPos=..., 
    bMakeNewFrms=bMakeNewFrms@entry=true, bCopyAll=bCopyAll@entry=false, pCpyRange=pCpyRange@entry=0x0)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:4429
#4  0x00007ff0c4be7c8c in sw::DocumentContentOperationsManager::CopyRange (this=0x561fa1ba4f40, rPam=..., rPos=..., 
    bCopyAll=<optimized out>, bCheckPos=<optimized out>)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:1629
#5  0x00007ff0c4caecb2 in SwEditShell::_CopySelToDoc (this=this@entry=0x561fa544f5c0, pInsDoc=pInsDoc@entry=0x7ff0c800c340, 
    pSttNd=pSttNd@entry=0x0) at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/edit/edglss.cxx:243
#6  0x00007ff0c4cfbeac in SwFEShell::Copy (this=0x561fa544f5c0, pClpDoc=pClpDoc@entry=0x7ff0c800c340, 
    pNewClpText=pNewClpText@entry=0x0) at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/frmedt/fecopy.cxx:219
#7  0x00007ff0c51e9875 in (anonymous namespace)::lclOverWriteDoc (rSrcWrtShell=..., rDest=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/uibase/dochdl/swdtflvr.cxx:381
#8  0x00007ff0c51ed48a in SwTransferable::GetData (this=0x7ff0b62c1c68, rFlavor=..., rDestDoc=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/uibase/dochdl/swdtflvr.cxx:449
#9  0x00007ff0fdd33be5 in TransferableHelper::getTransferData2 (this=this@entry=0x7ff0b62c1c68, rFlavor=..., rDestDoc=...)
    at /usr/src/debug/libreoffice-5.0.4.2/svtools/source/misc/transfer.cxx:331
#10 0x00007ff0fdd2b02b in TransferableHelper::getTransferData (this=0x7ff0b62c1c68, rFlavor=...)
    at /usr/src/debug/libreoffice-5.0.4.2/svtools/source/misc/transfer.cxx:305
#11 0x00007ff0e16f5b5b in x11::SelectionManager::convertData (this=this@entry=0x7ff0cc12e008, xTransferable=..., 
    nType=nType@entry=399, nSelection=nSelection@entry=1, rFormat=@0x7ff0cfffe78c: 8, rData=...)
    at /usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:656
#12 0x00007ff0e16f8b89 in x11::SelectionManager::sendData (this=this@entry=0x7ff0cc12e008, pAdaptor=pAdaptor@entry=0x7ff0a1f32200, 
    requestor=39845967, target=399, property=340, selection=1)
    at /usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:1504
#13 0x00007ff0e16f94bb in x11::SelectionManager::handleSelectionRequest (this=this@entry=0x7ff0cc12e008, rRequest=...)
    at /usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:1730
#14 0x00007ff0e16fa24b in x11::SelectionManager::handleXEvent (this=this@entry=0x7ff0cc12e008, rEvent=...)
    at /usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:3567
#15 0x00007ff0e16fcfbd in x11::SelectionManager::dispatchEvent (this=this@entry=0x7ff0cc12e008, millisec=millisec@entry=-1)
    at /usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:3644
#16 0x00007ff0e16fd2fd in x11::SelectionManager::run (pThis=0x7ff0cc12e008)
    at /usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:3672
#17 0x00007ff101c26d57 in osl_thread_start_Impl (pData=0x561fa1a2a2d0)
    at /usr/src/debug/libreoffice-5.0.4.2/sal/osl/unx/thread.cxx:240
#18 0x00007ff10138e60a in start_thread (arg=0x7ff0cffff700) at pthread_create.c:334
#19 0x00007ff1016a6a4d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
(gdb)
Comment 1 Buovjaga 2016-03-11 19:34:55 UTC 
I am unable to reproduce with a recent master build.
I made the odt have default style text, heading, default style text to reproduce what you described.
Could you try with 5.1?

You can get a backtrace by launching with
soffice --backtrace

You can then attach the .log file here.

https://wiki.documentfoundation.org/QA/BugReport/Debug_Information#GNU.2FLinux:_How_to_get_a_backtrace

64-bit, KDE Plasma 5
Version: 5.2.0.0.alpha0+
Build ID: 235411c9d47ecba88e46d859ea93bcecefb0c46e
CPU Threads: 8; OS Version: Linux 4.4; UI Render: default; 
Locale: fi-FI (fi_FI.UTF-8)

Set to NEEDINFO.
Change back to UNCONFIRMED, if the problem persists in 5.1. Change to RESOLVED WORKSFORME, if the problem went away.
Comment 2 Timur 2016-09-21 18:17:38 UTC 
Since no response, I close as Invalid. Feel free to reopen and set to Unconfirmed if you provide more info as requested. Please search for other KDE related bugs.