[Libreoffice-bugs] [Bug 124492] New: FILESAVE XLSX: crash when save after click 'insert sheet after this' or 'insert sheet before this'

bugzilla-daemon at bugs.documentfoundation.org bugzilla-daemon at bugs.documentfoundation.org
Tue Apr 2 09:05:24 UTC 2019


https://bugs.documentfoundation.org/show_bug.cgi?id=124492

            Bug ID: 124492
           Summary: FILESAVE XLSX: crash when save after click 'insert
                    sheet after this' or 'insert sheet before this'
           Product: LibreOffice Online
           Version: unspecified
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Calc
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: wanglei at oureda.cn

It's happened in nextcloud with the latest docker image
'libreoffice/online:master'

the step of reproduction:

1. create a new xlsx file in windows 7, and then upload it to nextcloud
2. click it for opening
3. click 'insert sheet after this' or 'insert sheet before it'
4. click 'save', and then after waiting some seconds, it will automatically
reload, and the new sheet will be disappeared
5. the server crash and we can find more detail in docker logs


notice: make it in Chinese, Japanese or Castellano language, not in English. In
English, it may ok.



the stack traceback:

kit-02433-02459 2019-04-02 06:41:36.841933 [ lokit_046 ] SIG   Fatal signal
received: SIGSEGV
Backtrace 2433:                                                                 
/usr/bin/loolforkit(_ZN7SigUtil13dumpBacktraceEv+0x64) [0x55fb4a6bd114]         
/usr/bin/loolforkit(+0xb61a2) [0x55fb4a6be1a2]                
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fd3ac04e890]                
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem16GetGraphicObjectERKN3rtl8OUStringE+0x23)
[0x7fd3a75f5013]
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem10GetGraphicERKN3rtl8OUStringE+0x9)
[0x7fd3a75f53f9]
/opt/libreoffice/program/libscfiltlo.so(+0x1638b8) [0x7fd39234e8b8]             
/opt/libreoffice/program/libscfiltlo.so(+0xcdddb) [0x7fd3922b8ddb]              
/opt/libreoffice/program/libscfiltlo.so(+0xce860) [0x7fd3922b9860]
/opt/libreoffice/program/libscfiltlo.so(+0x1849f6) [0x7fd39236f9f6]    
/opt/libreoffice/program/libooxlo.so(_ZN3oox4core10FilterBase6filterERKN3com3sun4star3uno8SequenceINS4_5beans13PropertyValueEEE+0x195)
[0x7fd391c906f5]                                                          
/opt/libreoffice/program/libscfiltlo.so(+0x27ee0f) [0x7fd392469e0f]
/opt/libreoffice/program/libmergedlo.so(_ZN14SfxObjectShell8ExportToER9SfxMedium+0x634)
[0x7fd3a7d8c4b4]
/opt/libreoffice/program/libmergedlo.so(+0x1bf690e) [0x7fd3a7d9590e]
/opt/libreoffice/program/libmergedlo.so(+0x1bf8036) [0x7fd3a7d97036]            
/opt/libreoffice/program/libmergedlo.so(+0x1bf8533) [0x7fd3a7d97533]
/opt/libreoffice/program/libmergedlo.so(_ZN12SfxBaseModel9storeSelfERKN3com3sun4star3uno8SequenceINS2_5beans13PropertyValueEEE+0x98b)
[0x7fd3a7dca89b]
/opt/libreoffice/program/libmergedlo.so(+0x1bca36b) [0x7fd3a7d6936b]
/opt/libreoffice/program/libmergedlo.so(+0x1be4aaa) [0x7fd3a7d83aaa]
/opt/libreoffice/program/libmergedlo.so(_ZN8SfxShell11ExecuteSlotER10SfxRequestPK12SfxInterface+0x4b)
[0x7fd3a7c2bd0b]
/opt/libreoffice/program/../program/libsclo.so(_ZN14ScTabViewShell11ExecuteSaveER10SfxRequest+0x8f)
[0x7fd3938a45bf]
/opt/libreoffice/program/libmergedlo.so(+0x1a69bfe) [0x7fd3a7c08bfe]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher8Execute_ER8SfxShellRK7SfxSlotR10SfxRequest11SfxCallMode+0xe6)
[0x7fd3a7c09196]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher7ExecuteEt11SfxCallModePK10SfxItemSetS3_t+0x173)
[0x7fd3a7c0f303]
/opt/libreoffice/program/libmergedlo.so(+0x1abea29) [0x7fd3a7c5da29]
/opt/libreoffice/program/libmergedlo.so(_ZN10comphelper15dispatchCommandERKN3rtl8OUStringERKN3com3sun4star3uno8SequenceINS6_5beans13PropertyValue
EEERKNS7_9ReferenceINS6_5frame23XDispatchResultListenerEEE+0x48f)
[0x7fd3a723c0af]
/opt/libreoffice/program/libmergedlo.so(+0x1d54bae) [0x7fd3a7ef3bae]
/usr/bin/loolforkit(_ZN12ChildSession10unoCommandEPKciRKSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS8_EE+0x16a)
[0x55fb4a63
559a]
/usr/bin/loolforkit(_ZN12ChildSession12_handleInputEPKci+0x2acc)
[0x55fb4a64fcfc]
/usr/bin/loolforkit(_ZN7Session13handleMessageEb8WSOpCodeRSt6vectorIcSaIcEE+0x6a)
[0x55fb4a6a9bda]
/usr/bin/loolforkit(_ZN8Document14forwardToChildERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKSt6vectorIcS4_E+0xa01)
[0x55fb4a67f4b1]
/usr/bin/loolforkit(_ZN8Document3runEv+0xe47) [0x55fb4a688547]
/usr/lib/libPocoFoundation.so.50(_ZN4Poco10ThreadImpl13runnableEntryEPv+0x99)
[0x7fd3acb5bde9]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x76db) [0x7fd3ac0436db]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x3f) [0x7fd3abd6c88f]
kit-02433-02459 2019-04-02 06:41:36.849021 [ lokit_046 ] SIG  SIGSYS trapped
with code: 1 and context 140546140847616
kit-02433-02459 2019-04-02 06:41:36.849031 [ lokit_046 ] SIG   seccomp trapped
signal, un-authorized sys-call: 62
Backtrace 2433:
/usr/bin/loolforkit(_ZN7SigUtil13dumpBacktraceEv+0x64) [0x55fb4a6bd114]
/usr/bin/loolforkit(+0xa61e8) [0x55fb4a6ae1e8]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fd3ac04e890]
/lib/x86_64-linux-gnu/libc.so.6(kill+0x7) [0x7fd3abc8a187]
/usr/bin/loolforkit(+0xb61b0) [0x55fb4a6be1b0]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fd3ac04e890]
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem16GetGraphicObjectERKN3rtl8OUStringE+0x23)
[0x7fd3a75f5013]
/opt/libreoffice/program/libmergedlo.so(_ZNK12SvxBrushItem10GetGraphicERKN3rtl8OUStringE+0x9)
[0x7fd3a75f53f9]
/opt/libreoffice/program/libscfiltlo.so(+0x1638b8) [0x7fd39234e8b8]
/opt/libreoffice/program/libscfiltlo.so(+0xcdddb) [0x7fd3922b8ddb]
/opt/libreoffice/program/libscfiltlo.so(+0xce860) [0x7fd3922b9860]
/opt/libreoffice/program/libscfiltlo.so(+0x1849f6) [0x7fd39236f9f6]
/opt/libreoffice/program/libooxlo.so(_ZN3oox4core10FilterBase6filterERKN3com3sun4star3uno8SequenceINS4_5beans13PropertyValueEEE+0x195)
[0x7fd391c906f5]
/opt/libreoffice/program/libscfiltlo.so(+0x27ee0f) [0x7fd392469e0f]
/opt/libreoffice/program/libmergedlo.so(_ZN14SfxObjectShell8ExportToER9SfxMedium+0x634)
[0x7fd3a7d8c4b4]
/opt/libreoffice/program/libmergedlo.so(+0x1bf690e) [0x7fd3a7d9590e]
/opt/libreoffice/program/libmergedlo.so(+0x1bf8036) [0x7fd3a7d97036]
/opt/libreoffice/program/libmergedlo.so(+0x1bf8533) [0x7fd3a7d97533]
/opt/libreoffice/program/libmergedlo.so(_ZN12SfxBaseModel9storeSelfERKN3com3sun4star3uno8SequenceINS2_5beans13PropertyValueEEE+0x98b)
[0x7fd3a7dca89b]
/opt/libreoffice/program/libmergedlo.so(+0x1bca36b) [0x7fd3a7d6936b]
/opt/libreoffice/program/libmergedlo.so(+0x1be4aaa) [0x7fd3a7d83aaa]
/opt/libreoffice/program/libmergedlo.so(_ZN8SfxShell11ExecuteSlotER10SfxRequestPK12SfxInterface+0x4b)
[0x7fd3a7c2bd0b]
/opt/libreoffice/program/../program/libsclo.so(_ZN14ScTabViewShell11ExecuteSaveER10SfxRequest+0x8f)
[0x7fd3938a45bf]
/opt/libreoffice/program/libmergedlo.so(+0x1a69bfe) [0x7fd3a7c08bfe]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher8Execute_ER8SfxShellRK7SfxSlotR10SfxRequest11SfxCallMode+0xe6)
[0x7fd3a7c09196]
/opt/libreoffice/program/libmergedlo.so(_ZN13SfxDispatcher7ExecuteEt11SfxCallModePK10SfxItemSetS3_t+0x173)
[0x7fd3a7c0f303]
/opt/libreoffice/program/libmergedlo.so(+0x1abea29) [0x7fd3a7c5da29]
/opt/libreoffice/program/libmergedlo.so(_ZN10comphelper15dispatchCommandERKN3rtl8OUStringERKN3com3sun4star3uno8SequenceINS6_5beans13PropertyValueEEERKNS7_9ReferenceINS6_5frame23XDispatchResultListenerEEE+0x48f)[0x7fd3a723c0af]
/opt/libreoffice/program/libmergedlo.so(+0x1d54bae) [0x7fd3a7ef3bae]
/usr/bin/loolforkit(_ZN12ChildSession10unoCommandEPKciRKSt6vectorINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESaIS8_EE+0x16a)
[0x55fb4a63559a]
/usr/bin/loolforkit(_ZN12ChildSession12_handleInputEPKci+0x2acc)
[0x55fb4a64fcfc]
/usr/bin/loolforkit(_ZN7Session13handleMessageEb8WSOpCodeRSt6vectorIcSaIcEE+0x6a)
[0x55fb4a6a9bda]
/usr/bin/loolforkit(_ZN8Document14forwardToChildERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKSt6vectorIcS4_E+0xa01)
[0x55fb4a67f4b1]
/usr/bin/loolforkit(_ZN8Document3runEv+0xe47) [0x55fb4a688547]
/usr/lib/libPocoFoundation.so.50(_ZN4Poco10ThreadImpl13runnableEntryEPv+0x99)
[0x7fd3acb5bde9]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x76db) [0x7fd3ac0436db]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x3f) [0x7fd3abd6c88f]
wsd-00015-02457 2019-04-02 06:41:36.884245 [ docbroker_046 ] ERR 
DocumentBroker stopping although modified  Broker: 新建 Microsoft Excel 工作表.
xlsx pid: 2433 has live sessions
  loaded in: 961ms
  sent: 136506
  recv: 10328
  modified?: 1
  jail id: NmC1J221OhtoQUcR
  filename: 新建 Microsoft Excel 工作表.xlsx
  public uri:
http://10.16.66.182:12000/apps/richdocuments/wopi/files/317_octkxhbrr0lj?access_token=SAcLC1WvRQzSLEu6M0mtNpL7lZm5YvrA&access_token
_ttl=0&permission=edit
  jailed uri:
file:///user/docs/NmC1J221OhtoQUcR/%E6%96%B0%E5%BB%BA%20Microsoft%20Excel%20%E5%B7%A5%E4%BD%9C%E8%A1%A8.xlsx
  doc key: /apps/richdocuments/wopi/files/317_octkxhbrr0lj
  doc id: 046
  num sessions: 1
  last saved: Tue Apr  2 06:41:29 2019
  cursor 0, 0( 0,0)
  tile cache: num: 37 size: 35969 bytes
     - '9_256x256.0,0.3840x3840.png' - 979 bytes
     - '9_256x256.0,11520.3840x3840.png' - 980 bytes
     - '9_256x256.0,3840.3840x3840.png' - 981 bytes
     - '9_256x256.0,7680.3840x3840.png' - 979 bytes
     - '9_256x256.11520,0.3840x3840.png' - 996 bytes
     - '9_256x256.11520,11520.3840x3840.png' - 998 bytes
     - '9_256x256.11520,3840.3840x3840.png' - 997 bytes
     - '9_256x256.11520,7680.3840x3840.png' - 996 bytes
     - '9_256x256.15360,0.3840x3840.png' - 1001 bytes
     - '9_256x256.15360,11520.3840x3840.png' - 1003 bytes
     - '9_256x256.15360,3840.3840x3840.png' - 1002 bytes
     - '9_256x256.15360,7680.3840x3840.png' - 1000 bytes
     - '9_256x256.19200,0.3840x3840.png' - 1003 bytes
     - '9_256x256.19200,11520.3840x3840.png' - 1005 bytes
     - '9_256x256.19200,3840.3840x3840.png' - 1004 bytes
     - '9_256x256.19200,7680.3840x3840.png' - 1002 bytes
     - '9_256x256.23040,0.3840x3840.png' - 1003 bytes
     - '9_256x256.23040,11520.3840x3840.png' - 1004 bytes
     - '9_256x256.23040,3840.3840x3840.png' - 1003 bytes
     - '9_256x256.23040,7680.3840x3840.png' - 1002 bytes
     - '9_256x256.26880,0.3840x3840.png' - 1003 bytes
     - '9_256x256.26880,11520.3840x3840.png' - 1005 bytes
     - '9_256x256.26880,3840.3840x3840.png' - 1004 bytes
     - '9_256x256.26880,7680.3840x3840.png' - 1002 bytes
     - '9_256x256.30720,0.3840x3840.png' - 1006 bytes
     - '9_256x256.30720,11520.3840x3840.png' - 1007 bytes
     - '9_256x256.30720,3840.3840x3840.png' - 1007 bytes
     - '9_256x256.30720,7680.3840x3840.png' - 1005 bytes
     - '9_256x256.3840,0.3840x3840.png' - 1002 bytes
     - '9_256x256.3840,11520.3840x3840.png' - 1005 bytes
     - '9_256x256.3840,3840.3840x3840.png' - 1003 bytes
     - '9_256x256.3840,7680.3840x3840.png' - 1003 bytes
     - '9_256x256.7680,0.3840x3840.png' - 994 bytes
     - '9_256x256.7680,11520.3840x3840.png' - 996 bytes
     - '9_256x256.7680,3840.3840x3840.png' - 995 bytes
     - '9_256x256.7680,7680.3840x3840.png' - 993 bytes
     - 'unsaved.txt' - 1 bytes
 Poll [1] - wakeup r: 21 w: 22
        fd      events  rsize   wsize
        15      1       0       0        r: 10328        w: 136506      alive  
  0ms
                id: 035b
                name: ToClient-035b
                disconnected: 0
                isActive: 1
                isCloseFrame: 0
                isReadOnly: 0
                docURL:
http%3A%2F%2F10.16.66.182%3A12000%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F317_octkxhbrr0lj
                jailedFilePath:
                docPwd:
                haveDocPwd: 0
                isDocPwdProtected: 0
                DocOptions:
                userId: cstic
                userName: cstic
                lang: zh-CN
                isReadOnly: 0
                isDocumentOwner: 1
                isAttached: 1
                keyEvents: 1
                sent/keystroke: 136506bytes

                queue size 0
| wsd/DocumentBroker.cpp:351

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20190402/df21513c/attachment-0001.html>


More information about the Libreoffice-bugs mailing list