[Libreoffice-bugs] [Bug 107539] New: crash

bugzilla-daemon at bugs.documentfoundation.org bugzilla-daemon at bugs.documentfoundation.org
Sun Apr 30 21:08:48 UTC 2017 

https://bugs.documentfoundation.org/show_bug.cgi?id=107539

            Bug ID: 107539
           Summary: crash
           Product: LibreOffice
           Version: 4.3.3.2 release
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Calc
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: g4827387 at trbvm.com

Created attachment 132974
  --> https://bugs.documentfoundation.org/attachment.cgi?id=132974&action=edit
spreadsheet to reproduce the crash.

I get a crash when pasting a few numbers in D3 (sheet 'cuentas').
What I paste is the following:

1116.07
980.77
858.57
775.33
721.48
650.58
605.94
566.20
526.81
486.20
447.93
387.61
276.99
244.59
237.31
228.49
212.36
194.55
171.32
149.02
131.78
113.34
94.05
72.93
47.30
25.00
4.32

I can reproduce this 100% of the times.

$ uname -a
Linux PC 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64
GNU/Linux
$ cat /etc/debian_version 
8.7
Libre office version:
Version: 4.3.3.2
Build ID: 430m0(Build:2)


crash:
--------------------------
[New Thread 0x7ff4532e9700 (LWP 19243)]

Program received signal SIGSEGV, Segmentation fault.
ScFormulaCell::SetCellGroup (this=0x0, xRef=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/formulacell.cxx:3509
3509   
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/formulacell.cxx:
No such file or directory.
(gdb) quit
A debugging session is active.

        Inferior 1 [process 18204] will be detached.

Quit anyway? (y or n) y
------------------------
backtrace:
(gdb) backtrace
#0  ScFormulaCell::SetCellGroup (this=0x0, xRef=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/formulacell.cxx:3509
#1  0x00007f23fb3a5d7b in operator() (this=<optimized out>, node=..., node=...)
at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/column3.cxx:2915
#2 
for_each<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52,
svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53,
EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54,
ScFormulaCell> > >::iterator_trait,
mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned
long, mdds::mtv::base_element_block> > >, (anonymous
namespace)::GroupFormulaCells> (__f=..., __last=..., __first=...) at
/usr/include/c++/4.9/bits/stl_algo.h:3755
#3  ScColumn::RegroupFormulaCells (this=this at entry=0x1f6d6e0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/column3.cxx:2960
#4  0x00007f23fb4250f9 in ScDocumentImport::initColumn
(this=this at entry=0x7ffcab280670, rCol=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/documentimport.cxx:505
#5  0x00007f23fb4254e2 in ScDocumentImport::finalize
(this=this at entry=0x7ffcab280670) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/documentimport.cxx:496
#6  0x00007f23fb822c7c in ScImportExport::ExtText2Doc (this=0x7ffcab280fa0,
rStrm=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/docshell/impex.cxx:1451
#7  0x00007f23fb824645 in ScImportExport::ImportStream
(this=this at entry=0x7ffcab280fa0, rStrm=..., rBaseURL="", nFmt=nFmt at entry=1)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/docshell/impex.cxx:363
#8  0x00007f23fb82473f in ScImportExport::ImportString
(this=this at entry=0x7ffcab280fa0, 
   
rText="1116.07\n980.77\n858.57\n775.33\n721.48\n650.58\n605.94\n566.20\n526.81\n486.20\n447.93\n387.61\n276.99\n244.59\n237.31\n228.49\n212.36\n194.55\n171.32\n149.02\n131.78\n113.34\n94.05\n72.93\n47.30\n25.00\n4.32",
nFmt=nFmt at entry=1) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/docshell/impex.cxx:285
#9  0x00007f23fbb3994e in ScViewFunc::PasteDataFormat
(this=this at entry=0x2398f98, nFormatId=nFormatId at entry=1,
rxTransferable=uno::Reference to (x11::X11Transferable *) 0x2093798,
nPosX=<optimized out>, 
    nPosY=2, pLogicPos=pLogicPos at entry=0x0, bLink=false, bAllowDialogs=true) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/viewfun5.cxx:351
#10 0x00007f23fbb3198a in ScViewFunc::PasteFromSystem
(this=this at entry=0x2398f98, nFormatId=nFormatId at entry=1, bApi=bApi at entry=false)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/viewfun3.cxx:686
#11 0x00007f23fbb32005 in ScViewFunc::PasteFromSystem
(this=this at entry=0x2398f98) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/viewfun3.cxx:543
#12 0x00007f23fba59cf7 in ScClipUtil::PasteFromClipboard (pViewData=0x2398fa0,
pTabViewShell=pTabViewShell at entry=0x2398ed0,
bShowDialog=bShowDialog at entry=true)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/cliputil.cxx:58
#13 0x00007f23fba4ba2b in ScCellShell::ExecuteEdit (this=0x209bd90, rReq=...)
at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/cellsh1.cxx:1251
#14 0x00007f2422bd17d4 in SfxShell::CallExec (this=0x209bd90,
pFunc=0x7f23fba418b0 <SfxStubScCellShellExecuteEdit(SfxShell*, SfxRequest&)>,
rReq=...)
    at /build/libreoffice-jn5nCw/libreoffice-4.3.3/include/sfx2/shell.hxx:181
#15 0x00007f2422bc9484 in SfxDispatcher::Call_Impl (this=0x260cf30, rShell=...,
rSlot=..., rReq=..., bRecord=true) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/dispatch.cxx:283
#16 0x00007f2422bcb405 in SfxDispatcher::_Execute (this=0x260cf30, rShell=...,
rSlot=..., rReq=..., eCallMode=4) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/dispatch.cxx:960
#17 0x00007f2422928c6d in SfxBindings::Execute_Impl (this=0x1d19e70, aReq=...,
pSlot=pSlot at entry=0x7f23fbfd7560 <aScCellShellSlots_Impl+480>,
pShell=pShell at entry=0x209bd90)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/bindings.cxx:1238
#18 0x00007f242296338b in SfxDispatchController_Impl::dispatch (this=0x2f0d0a0,
aURL=..., aArgs=empty uno::Sequence, rListener=empty uno::Reference)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/unoctitm.cxx:731
#19 0x00007f2422965c79 in SfxOfficeDispatch::dispatch (this=0x2e68f10,
aURL=..., aArgs=empty uno::Sequence) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/unoctitm.cxx:359
#20 0x00007f242206b2e7 in svt::AsyncAccelExec::impl_ts_asyncCallback
(this=0x2f16050) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/svtools/source/misc/acceleratorexecute.cxx:475
#21 0x00007f2420b88bca in Call (pCaller=<optimized out>, this=<optimized out>)
at /build/libreoffice-jn5nCw/libreoffice-4.3.3/include/tools/link.hxx:123
#22 DoEvent_Impl (pEvent=<optimized out>, this=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/helper/evntpost.cxx:53
#23 vcl::EventPoster::LinkStubDoEvent_Impl (pThis=<optimized out>,
pCaller=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/helper/evntpost.cxx:49
#24 0x00007f24209acf92 in Call (pCaller=<optimized out>, this=<optimized out>)
at /build/libreoffice-jn5nCw/libreoffice-4.3.3/include/tools/link.hxx:123
#25 ImplHandleUserEvent (pSVEvent=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/window/winproc.cxx:1883
#26 ImplWindowFrameProc (pWindow=0x268ec48, nEvent=30368, pEvent=0x268ec30) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/window/winproc.cxx:2454
#27 0x00007f2420c11eb1 in CallCallback (pEvent=0x268ec30, nEvent=22,
this=0x1973ea0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/inc/salframe.hxx:243
#28 SalGenericDisplay::DispatchInternalEvent (this=this at entry=0xd540b0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/generic/app/gendisp.cxx:90
#29 0x00007f2414489534 in SalX11Display::Yield (this=0xd540b0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldisp.cxx:1850
#30 0x00007f2414489335 in DisplayYield (fd=<optimized out>, pDisplay=0xd540b0)
at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldisp.cxx:375
#31 0x00007f2414488a2b in HandleNextEvent (this=0x7f24146efec0
<yieldTable+384>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldata.cxx:583
#32 SalXLib::Yield (this=0xd38e60, bWait=<optimized out>,
bHandleAllCurrentEvents=false) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldata.cxx:675
#33 0x00007f2420b9c91e in ImplYield (i_bAllEvents=false, i_bWait=true) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svapp.cxx:359
#34 Application::Yield () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svapp.cxx:391
#35 0x00007f2420b9c9b5 in Application::Execute () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svapp.cxx:340
#36 0x00007f24253f57a5 in desktop::Desktop::Main (this=0x7ffcab282670) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/app.cxx:1682
#37 0x00007f2420ba1582 in ImplSVMain () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svmain.cxx:155
#38 0x00007f2420ba15b2 in SVMain () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svmain.cxx:188
#39 0x00007f2425418225 in soffice_main () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/sofficemain.cxx:85
#40 0x000000000040071b in sal_main () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/main.c:48
#41 main (argc=<optimized out>, argv=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/main.c:47
-------------------------
Detaching from program: /usr/lib/libreoffice/program/soffice.bin, process 18204


Backtrace full and backtrace no-filters full attached below

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20170430/20df40f9/attachment-0001.html>

More information about the Libreoffice-bugs mailing list