[Libreoffice-bugs] [Bug 118416] New: SEGV when Calc exits when it tries to export an image of a whole column on the system clipboard
bugzilla-daemon at bugs.documentfoundation.org
bugzilla-daemon at bugs.documentfoundation.org
Wed Jun 27 15:11:07 UTC 2018
https://bugs.documentfoundation.org/show_bug.cgi?id=118416
Bug ID: 118416
Summary: SEGV when Calc exits when it tries to export an image
of a whole column on the system clipboard
Product: LibreOffice
Version: unspecified
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: Calc
Assignee: libreoffice-bugs at lists.freedesktop.org
Reporter: tml at iki.fi
Description:
In a developer build, with --enable-debug:
make debugrun
r --calc
add some numbers into A1 and A2
click the column header, Control-C
Control-Q, click "Don't Save"
Boom. Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
Stack trace:
> #0 0x00007ffff73e6530 in __memset_sse2_unaligned_erms () at /lib64/libc.so.6
> #1 0x00007fffe0095475 in _cairo_xlib_surface_create_similar_shm () at /lib64/libcairo.so.2
> #2 0x00007fffe0068b17 in cairo_surface_create_similar_image () at /lib64/libcairo.so.2
> #3 0x00007fffe0068d08 in cairo_surface_create_similar () at /lib64/libcairo.so.2
> #4 0x00007fffec574d4d in SvpSalVirtualDevice::SetSizeUsingBuffer(long, long, unsigned char*) (
> this=0x2f55e10, nNewDX=85, nNewDY=17895697, pBuffer=0x0) at /ssd1/lo/fedora/vcl/headless/svpvd.cxx:107
> #5 0x00007fffec574ae7 in SvpSalVirtualDevice::SetSize(long, long) (this=0x2f55e10, nNewDX=85, nNewDY=17895697)
> at /ssd1/lo/fedora/vcl/headless/svpvd.cxx:63
> #6 0x00007fffec262de2 in VirtualDevice::InnerImplSetOutputSizePixel(Size const&, bool, unsigned char*) (
> this=0x26eeb10, rNewSize=Size = {...}, bErase=true, pBuffer=0x0) at /ssd1/lo/fedora/vcl/source/gdi/virdev.cxx:304
> #7 0x00007fffec263376 in VirtualDevice::ImplSetOutputSizePixel(Size const&, bool, unsigned char*) (this=0x26eeb10, rNewSize=Size = {...}, bErase=true, pBuffer=0x0) at /ssd1/lo/fedora/vcl/source/gdi/virdev.cxx:379
> #8 0x00007fffec263690 in VirtualDevice::SetOutputSizePixel(Size const&, bool) (this=0x26eeb10, rNewSize=Size = {...}, bErase=true)
> at /ssd1/lo/fedora/vcl/source/gdi/virdev.cxx:425
> #9 0x00007fffc320cfe6 in ScTransferObj::GetData(com::sun::star::datatransfer::DataFlavor const&, rtl::OUString const&) (
> this=0x686c640, rFlavor=...) at /ssd1/lo/fedora/sc/source/ui/app/transobj.cxx:378
> #10 0x00007fffee789e8c in TransferableHelper::getTransferData2(com::sun::star::datatransfer::DataFlavor const&, rtl::OUString const&) (this=0x686c640, rFlavor=..., rDestDoc="") at /ssd1/lo/fedora/svtools/source/misc/transfer.cxx:377
> #11 0x00007fffee789009 in TransferableHelper::getTransferData(com::sun::star::datatransfer::DataFlavor const&) (this=0x686c640, rFlavor=...) at /ssd1/lo/fedora/svtools/source/misc/transfer.cxx:275
> #12 0x00007fffee789093 in non-virtual thunk to TransferableHelper::getTransferData(com::sun::star::datatransfer::DataFlavor const&) ()
> at /usr/bin/../lib/gcc/x86_64-redhat-linux/8/../../../../include/c++/8/bits/stl_iterator.h:794
> #13 0x00007fffd1267f3a in VclToGtkHelper::setSelectionData(com::sun::star::uno::Reference<com::sun::star::datatransfer::XTransferable> const&, _GtkSelectionData*, unsigned int) (this=0x22fb0b0, rTrans=uno::Reference to (ScTransferObj *) 0x686c668, selection_data=0x7ffffffedb50, info=5) at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkinst.cxx:488
> #14 0x00007fffd1267d44 in VclGtkClipboard::ClipboardGet(_GtkSelectionData*, unsigned int) (
> this=0x22fafa0, selection_data=0x7ffffffedb50, info=5) at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkinst.cxx:357
> #15 0x00007fffd126a2ef in (anonymous namespace)::ClipboardGetFunc(_GtkClipboard*, _GtkSelectionData*, unsigned int, void*) (selection_data=0x7ffffffedb50, info=5, user_data_or_owner=0x22fafa0) at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkinst.cxx:385
> #16 0x00007ffff5d18add in g_closure_invoke () at /lib64/libgobject-2.0.so.0
> #17 0x00007ffff5d2bf43 in signal_emit_unlocked_R () at /lib64/libgobject-2.0.so.0
> #18 0x00007ffff5d3506a in g_signal_emit_valist () at /lib64/libgobject-2.0.so.0
> #19 0x00007ffff5d35b44 in g_signal_emit_by_name () at /lib64/libgobject-2.0.so.0
> #20 0x00007fffd0b570db in gtk_selection_invoke_handler () at /lib64/libgtk-3.so.0
> #21 0x00007fffd0b58c8e in _gtk_selection_request () at /lib64/libgtk-3.so.0
> #22 0x00007fffd0ac67a8 in _gtk_marshal_BOOLEAN__BOXEDv () at /lib64/libgtk-3.so.0
> #23 0x00007ffff5d18d36 in _g_closure_invoke_va () at /lib64/libgobject-2.0.so.0
> #24 0x00007ffff5d34ae4 in g_signal_emit_valist () at /lib64/libgobject-2.0.so.0
> #25 0x00007ffff5d35663 in g_signal_emit () at /lib64/libgobject-2.0.so.0
> #26 0x00007fffd0c14134 in gtk_widget_event_internal () at /lib64/libgtk-3.so.0
> #27 0x00007fffd0ac5716 in gtk_main_do_event () at /lib64/libgtk-3.so.0
> #28 0x00007fffd05ce639 in _gdk_event_emit () at /lib64/libgdk-3.so.0
> #29 0x00007fffd05ffe76 in gdk_event_source_dispatch () at /lib64/libgdk-3.so.0
> #30 0x00007ffff5a3d8ad in g_main_context_dispatch () at /lib64/libglib-2.0.so.0
> #31 0x00007ffff5a3dc78 in g_main_context_iterate.isra () at /lib64/libglib-2.0.so.0
> #32 0x00007ffff5a3dfa2 in g_main_loop_run () at /lib64/libglib-2.0.so.0
> #33 0x00007fffd0c3ddee in gtk_clipboard_wait_for_contents () at /lib64/libgtk-3.so.0
> #34 0x00007fffd0c3e5bc in gtk_clipboard_wait_for_targets () at /lib64/libgtk-3.so.0
> #35 0x00007fffd1268559 in VclGtkClipboard::OwnerPossiblyChanged(_GtkClipboard*) (this=0x67d4d30, clipboard=0x1cb85e0)
> at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkinst.cxx:420
> #36 0x00007fffd1268909 in (anonymous namespace)::handle_owner_change(_GtkClipboard*, _GdkEvent*, void*) (clipboard=0x1cb85e0, user_data=0x67d4d30) at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkinst.cxx:397
> #37 0x00007ffff5d18add in g_closure_invoke () at /lib64/libgobject-2.0.so.0
> #38 0x00007ffff5d2bf43 in signal_emit_unlocked_R () at /lib64/libgobject-2.0.so.0
> #39 0x00007ffff5d3506a in g_signal_emit_valist () at /lib64/libgobject-2.0.so.0
> #40 0x00007ffff5d35663 in g_signal_emit () at /lib64/libgobject-2.0.so.0
> #41 0x00007fffd0ac53dd in gtk_main_do_event () at /lib64/libgtk-3.so.0
> #42 0x00007fffd05ce639 in _gdk_event_emit () at /lib64/libgdk-3.so.0
> #43 0x00007fffd05ffe76 in gdk_event_source_dispatch () at /lib64/libgdk-3.so.0
> #44 0x00007ffff5a3d8ad in g_main_context_dispatch () at /lib64/libglib-2.0.so.0
> #45 0x00007ffff5a3dc78 in g_main_context_iterate.isra () at /lib64/libglib-2.0.so.0
> #46 0x00007ffff5a3dfa2 in g_main_loop_run () at /lib64/libglib-2.0.so.0
> #47 0x00007fffd0c3cdd6 in gtk_clipboard_real_store () at /lib64/libgtk-3.so.0
> #48 0x00007fffd12692c4 in VclGtkClipboard::flushClipboard() (this=0x22fafa0) at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkinst.cxx:551
> #49 0x00007fffee788d41 in TransferableHelper::ImplFlush() (this=0x686c640) at /ssd1/lo/fedora/svtools/source/misc/transfer.cxx:522
> #50 0x00007fffee788c8d in TransferableHelper::TerminateListener::notifyTermination(com::sun::star::lang::EventObject const&) (this=0x686c3b0) at /ssd1/lo/fedora/svtools/source/misc/transfer.cxx:254
> #51 0x00007fffc5617504 in framework::Desktop::impl_sendTerminateToClipboard() (this=0x1e71640)
> at /ssd1/lo/fedora/framework/source/services/desktop.cxx:1655
> #52 0x00007fffc5616096 in framework::Desktop::terminate() (this=0x1e71640) at /ssd1/lo/fedora/framework/source/services/desktop.cxx:327
> #53 0x00007ffff1962b6c in SfxApplication::MiscExec_Impl(SfxRequest&) (this=0x1e841d0, rReq=...)
> at /ssd1/lo/fedora/sfx2/source/appl/appserv.cxx:428
> #54 0x00007ffff1942eb5 in SfxStubSfxApplicationMiscExec_Impl(SfxShell*, SfxRequest&) (pShell=0x1e841d0, rReq=...)
> at /ssd1/lo/fedora/workdir/SdiTarget/sfx2/sdi/sfxslots.hxx:1228
> #55 0x00007ffff1aaed62 in SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (this=0x1e841d0, pFunc=0x7ffff1942e90 <SfxStubSfxApplicationMiscExec_Impl(SfxShell*, SfxRequest&)>, rReq=...) at /ssd1/lo/fedora/include/sfx2/shell.hxx:211
> #56 0x00007ffff1aa4790 in SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (this=0x2014710, rShell=..., rSlot=..., rReq=..., bRecord=true) at /ssd1/lo/fedora/sfx2/source/control/dispatch.cxx:355
> #57 0x00007ffff1aa9d47 in SfxDispatcher::PostMsgHandler(SfxRequest*) (this=0x2014710, pReq=0x67ac060)
> at /ssd1/lo/fedora/sfx2/source/control/dispatch.cxx:1126
> #58 0x00007ffff1aa4d78 in SfxDispatcher::LinkStubPostMsgHandler(void*, SfxRequest*) (instance=0x2014710, data=0x67ac060)
> at /ssd1/lo/fedora/sfx2/source/control/dispatch.cxx:1106
> #59 0x00007ffff1eec468 in Link<SfxRequest*, void>::Call(SfxRequest*) const (this=0x2066760, data=0x67ac060)
> at /ssd1/lo/fedora/include/tools/link.hxx:84
> #60 0x00007ffff1eec3db in SfxHintPoster::DoEvent_Impl(void*) (this=0x2066750, pPostedHint=0x67ac060)
> at /ssd1/lo/fedora/sfx2/source/notify/hintpost.cxx:44
> #61 0x00007ffff1eec3a8 in SfxHintPoster::LinkStubDoEvent_Impl(void*, void*) (instance=0x2066750, data=0x67ac060)
> at /ssd1/lo/fedora/sfx2/source/notify/hintpost.cxx:42
> #62 0x00007fffebdd27d8 in Link<void*, void>::Call(void*) const (this=0x688c1b8, data=0x67ac060)
> at /ssd1/lo/fedora/include/tools/link.hxx:84
> #63 0x00007fffebdcfa5c in ImplHandleUserEvent(ImplSVEvent*) (pSVEvent=0x688c1b0) at /ssd1/lo/fedora/vcl/source/window/winproc.cxx:1928
> #64 0x00007fffebdcd02d in ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) (
> _pWindow=0x1ea61d0, nEvent=SalEvent::UserEvent, pEvent=0x688c1b0) at /ssd1/lo/fedora/vcl/source/window/winproc.cxx:2479
> #65 0x00007fffec55d6e5 in SalFrame::CallCallback(SalEvent, void const*) const (this=0x1ea6910, nEvent=SalEvent::UserEvent, pEvent=0x688c1b0) at /ssd1/lo/fedora/vcl/inc/salframe.hxx:280
> #66 0x00007fffec5751df in SalGenericDisplay::ProcessEvent(SalUserEventList::SalUserEvent) (this=0x1c1cfa0, aEvent=...)
> at /ssd1/lo/fedora/vcl/unx/generic/app/gendisp.cxx:67
> #67 0x00007fffec32ec24 in SalUserEventList::DispatchUserEvents(bool) (this=0x1c1cfa0, bHandleAllCurrentEvents=false)
> at /ssd1/lo/fedora/vcl/source/app/salusereventlist.cxx:109
> #68 0x00007fffec575135 in SalGenericDisplay::DispatchInternalEvent(bool) (this=0x1c1cfa0, bHandleAllCurrentEvent=false)
> at /ssd1/lo/fedora/vcl/unx/generic/app/gendisp.cxx:52
> #69 0x00007fffd1263643 in call_userEventFn(void*) (data=0x6fc9f0) at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkdata.cxx:784
> #70 0x00007ffff5a3a1cb in g_idle_dispatch () at /lib64/libglib-2.0.so.0
> #71 0x00007ffff5a3d8ad in g_main_context_dispatch () at /lib64/libglib-2.0.so.0
> #72 0x00007ffff5a3dc78 in g_main_context_iterate.isra () at /lib64/libglib-2.0.so.0
> #73 0x00007ffff5a3dd10 in g_main_context_iteration () at /lib64/libglib-2.0.so.0
> #74 0x00007fffd1262272 in GtkSalData::Yield(bool, bool) (this=0x6fc9f0, bWait=true, bHandleAllCurrentEvents=false)
> at /ssd1/lo/fedora/vcl/unx/gtk3/gtk3gtkdata.cxx:459
> #75 0x00007fffd12668e7 in GtkInstance::DoYield(bool, bool) (this=0x6fc7f0, bWait=true, bHandleAllCurrentEvents=false)
> at /ssd1/lo/fedora/vcl/unx/gtk3/../gtk/gtkinst.cxx:399
> #76 0x00007fffec392e01 in ImplYield(bool, bool) (i_bWait=true, i_bAllEvents=false) at /ssd1/lo/fedora/vcl/source/app/svapp.cxx:470
> #77 0x00007fffec38da44 in Application::Yield() () at /ssd1/lo/fedora/vcl/source/app/svapp.cxx:535
> #78 0x00007fffec38d9d0 in Application::Execute() () at /ssd1/lo/fedora/vcl/source/app/svapp.cxx:450
> #79 0x00007ffff7744f79 in desktop::Desktop::Main() (this=0x7fffffff2340) at /ssd1/lo/fedora/desktop/source/app/app.cxx:1634
> #80 0x00007fffec3a2605 in ImplSVMain() () at /ssd1/lo/fedora/vcl/source/app/svmain.cxx:200
> #81 0x00007fffec3a41e8 in SVMain() () at /ssd1/lo/fedora/vcl/source/app/svmain.cxx:238
> #82 0x00007ffff77b1dc5 in soffice_main() () at /ssd1/lo/fedora/desktop/source/app/sofficemain.cxx:169
> #83 0x000000000040089d in sal_main () at /ssd1/lo/fedora/desktop/source/app/main.c:48
> #84 0x0000000000400877 in main (argc=2, argv=0x7fffffff24f8) at /ssd1/lo/fedora/desktop/source/app/main.c:47
Note the nNewDX=85, nNewDY=17895697 at #5.
Steps to Reproduce:
.
Actual Results:
.
Expected Results:
.
Reproducible: Always
User Profile Reset: No
Additional Info:
.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180627/15e20597/attachment-0001.html>
More information about the Libreoffice-bugs
mailing list