[Libreoffice-bugs] [Bug 113812] New: assertion fail nMapNum >= 0 in ImplLogicToPixel

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=113812

            Bug ID: 113812
           Summary: assertion fail nMapNum >= 0 in ImplLogicToPixel
           Product: LibreOffice
           Version: 6.0.0.0.alpha1+ Master
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: filters and storage
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: samtygier at yahoo.co.uk

Description:
Opening a specific pptx I get a crash.

(Full GDB log attached)
#0  0x00007ffff73998df in __GI_raise (sig=sig at entry=6) at
../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff739b4da in __GI_abort () at abort.c:89
#2  0x00007ffff7391d67 in __assert_fail_base (fmt=<optimized out>,
assertion=assertion at entry=0x7fffecb5a491 "nMapNum >= 0",
file=file at entry=0x7fffecb5a3e8
"/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx",
line=line at entry=359, function=function at entry=0x7fffecb5acc0
<ImplLogicToPixel(long, long, long, long, long)::__PRETTY_FUNCTION__> "long int
ImplLogicToPixel(long int, long int, long int, long int, long int)") at
assert.c:92
#3  0x00007ffff7391e12 in __GI___assert_fail (assertion=0x7fffecb5a491 "nMapNum
>= 0", file=0x7fffecb5a3e8
"/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx", line=359,
function=0x7fffecb5acc0 <ImplLogicToPixel(long, long, long, long,
long)::__PRETTY_FUNCTION__> "long int ImplLogicToPixel(long int, long int, long
int, long int, long int)") at assert.c:101
#4  0x00007fffec442b1d in ImplLogicToPixel(long, long, long, long, long)
(n=-31131, nDPI=96, nMapNum=-1, nMapDenom=2032, nThres=48038396025285285) at
/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx:359
#5  0x00007fffec443828 in OutputDevice::ImplLogicToDevicePixel(tools::Polygon
const&) const (this=0x7868610, rLogicPoly=...) at
/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx:544
#6  0x00007fffec3f6b3b in OutputDevice::DrawPolygon(tools::Polygon const&)
(this=0x7868610, rPoly=...) at
/usr/local/src/libreoffice/core/vcl/source/outdev/polygon.cxx:223
#7  0x00007fffec3f64ac in OutputDevice::DrawPolyPolygon(tools::PolyPolygon
const&) (this=0x7868610, rPolyPoly=...) at
/usr/local/src/libreoffice/core/vcl/source/outdev/polygon.cxx:122
#8  0x00007fffc18cbf54 in emfio::MtfTools::ImplDrawBitmap(Point const&, Size
const&, BitmapEx const&) (this=0x7ffffffebc40, rPos=..., rSize=...,
rBitmap=...) at
/usr/local/src/libreoffice/core/emfio/source/reader/mtftools.cxx:1633
#9  0x00007fffc18cd6fa in
emfio::MtfTools::ResolveBitmapActions(std::__debug::vector<std::unique_ptr<emfio::BSaveStruct,
std::default_delete<emfio::BSaveStruct> >,
std::allocator<std::unique_ptr<emfio::BSaveStruct,
std::default_delete<emfio::BSaveStruct> > > >&) (this=0x7ffffffebc40,
rSaveList=std::__debug::vector of length 1, capacity 1 = {...}) at
/usr/local/src/libreoffice/core/emfio/source/reader/mtftools.cxx:1921
#10 0x00007fffc18e5110 in emfio::EmfReader::ReadEnhWMF() (this=0x7ffffffebc40)
at /usr/local/src/libreoffice/core/emfio/source/reader/emfreader.cxx:654

Crash happens with 
Version: 6.0.0.0.alpha1+
Build ID: 9984579e96a966c2e47db98ceeb9a83b1adefa00
CPU threads: 4; OS: Linux 4.13; UI render: default; VCL: gtk2; 
Locale: en-GB (en_GB.utf8); Calc: group

But I can open the file fine with
Version: 5.4.2.2
Build ID: 22b09f6418e8c2d508a9eaf86b2399209b0990f4
CPU threads: 4; OS: Linux 4.13; UI render: default; VCL: gtk2; 
Locale: en-GB (en_GB.utf8); Calc: group

I shall try to bisect.

Steps to Reproduce:
1. Download
https://indico.cern.ch/event/647714/contributions/2632839/attachments/1556799/2448620/Exp-Upgrades.pptx
2. Open with LibreOffice
3. Crashes during open

Actual Results:  
Crashes

Expected Results:
Opens file


Reproducible: Always


User Profile Reset: No



Additional Info:


User-Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:57.0) Gecko/20100101
Firefox/57.0

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20171113/bb54d837/attachment-0001.html>