<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - assertion fail nMapNum >= 0 in ImplLogicToPixel"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=113812">113812</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>assertion fail nMapNum >= 0 in ImplLogicToPixel
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>6.0.0.0.alpha1+ Master
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>filters and storage
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>libreoffice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>samtygier@yahoo.co.uk
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Description:
Opening a specific pptx I get a crash.

(Full GDB log attached)
#0  0x00007ffff73998df in __GI_raise (sig=sig@entry=6) at
../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff739b4da in __GI_abort () at abort.c:89
#2  0x00007ffff7391d67 in __assert_fail_base (fmt=<optimized out>,
assertion=assertion@entry=0x7fffecb5a491 "nMapNum >= 0",
file=file@entry=0x7fffecb5a3e8
"/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx",
line=line@entry=359, function=function@entry=0x7fffecb5acc0
<ImplLogicToPixel(long, long, long, long, long)::__PRETTY_FUNCTION__> "long int
ImplLogicToPixel(long int, long int, long int, long int, long int)") at
assert.c:92
#3  0x00007ffff7391e12 in __GI___assert_fail (assertion=0x7fffecb5a491 "nMapNum
<span class="quote">>= 0", file=0x7fffecb5a3e8</span >
"/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx", line=359,
function=0x7fffecb5acc0 <ImplLogicToPixel(long, long, long, long,
long)::__PRETTY_FUNCTION__> "long int ImplLogicToPixel(long int, long int, long
int, long int, long int)") at assert.c:101
#4  0x00007fffec442b1d in ImplLogicToPixel(long, long, long, long, long)
(n=-31131, nDPI=96, nMapNum=-1, nMapDenom=2032, nThres=48038396025285285) at
/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx:359
#5  0x00007fffec443828 in OutputDevice::ImplLogicToDevicePixel(tools::Polygon
const&) const (this=0x7868610, rLogicPoly=...) at
/usr/local/src/libreoffice/core/vcl/source/outdev/map.cxx:544
#6  0x00007fffec3f6b3b in OutputDevice::DrawPolygon(tools::Polygon const&)
(this=0x7868610, rPoly=...) at
/usr/local/src/libreoffice/core/vcl/source/outdev/polygon.cxx:223
#7  0x00007fffec3f64ac in OutputDevice::DrawPolyPolygon(tools::PolyPolygon
const&) (this=0x7868610, rPolyPoly=...) at
/usr/local/src/libreoffice/core/vcl/source/outdev/polygon.cxx:122
#8  0x00007fffc18cbf54 in emfio::MtfTools::ImplDrawBitmap(Point const&, Size
const&, BitmapEx const&) (this=0x7ffffffebc40, rPos=..., rSize=...,
rBitmap=...) at
/usr/local/src/libreoffice/core/emfio/source/reader/mtftools.cxx:1633
#9  0x00007fffc18cd6fa in
emfio::MtfTools::ResolveBitmapActions(std::__debug::vector<std::unique_ptr<emfio::BSaveStruct,
std::default_delete<emfio::BSaveStruct> >,
std::allocator<std::unique_ptr<emfio::BSaveStruct,
std::default_delete<emfio::BSaveStruct> > > >&) (this=0x7ffffffebc40,
rSaveList=std::__debug::vector of length 1, capacity 1 = {...}) at
/usr/local/src/libreoffice/core/emfio/source/reader/mtftools.cxx:1921
#10 0x00007fffc18e5110 in emfio::EmfReader::ReadEnhWMF() (this=0x7ffffffebc40)
at /usr/local/src/libreoffice/core/emfio/source/reader/emfreader.cxx:654

Crash happens with 
Version: 6.0.0.0.alpha1+
Build ID: 9984579e96a966c2e47db98ceeb9a83b1adefa00
CPU threads: 4; OS: Linux 4.13; UI render: default; VCL: gtk2; 
Locale: en-GB (en_GB.utf8); Calc: group

But I can open the file fine with
Version: 5.4.2.2
Build ID: 22b09f6418e8c2d508a9eaf86b2399209b0990f4
CPU threads: 4; OS: Linux 4.13; UI render: default; VCL: gtk2; 
Locale: en-GB (en_GB.utf8); Calc: group

I shall try to bisect.

Steps to Reproduce:
1. Download
<a href="https://indico.cern.ch/event/647714/contributions/2632839/attachments/1556799/2448620/Exp-Upgrades.pptx">https://indico.cern.ch/event/647714/contributions/2632839/attachments/1556799/2448620/Exp-Upgrades.pptx</a>
2. Open with LibreOffice
3. Crashes during open

Actual Results:  
Crashes

Expected Results:
Opens file


Reproducible: Always


User Profile Reset: No



Additional Info:


User-Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:57.0) Gecko/20100101
Firefox/57.0</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>