Impress crashes every time when clicking on Outline/Note/Handout tab

Bug #982518 reported by Felix Möller
82
This bug affects 17 people
Affects Status Importance Assigned to Milestone
libreoffice (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

libreoffice-gtk:
  Installed: 1:3.5.2-2ubuntu1
  Candidate: 1:3.5.2-2ubuntu1
  Version table:
 *** 1:3.5.2-2ubuntu1 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status

My impress crashes every time when I click on the Outline/Note/Handout tab.

This happens even with an empty presentation.

WORKAROUND: Uninstall libreoffice-gtk.

Somehow apport does not catch this crash. Thus, I attached gdb to the running process and got the following:
Program received signal SIGSEGV, Segmentation fault.
0x00007f87279eb008 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
(gdb) bt
#0 0x00007f87279eb008 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#1 0x00007f87279d9a43 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#2 0x00007f87279ded97 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#3 0x00007f8727c4d9d4 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#4 0x00007f8727c684bf in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#5 0x00007f8761986e40 in Window::GetAccessible(unsigned char) () from /usr/lib/libreoffice/program/libvcllo.so
#6 0x00007f87626a1931 in VCLXAccessibleComponent::GetChildAccessible(VclWindowEvent const&) () from /usr/lib/libreoffice/program/libtklo.so
#7 0x00007f87626a0384 in VCLXAccessibleComponent::ProcessWindowChildEvent(VclWindowEvent const&) () from /usr/lib/libreoffice/program/libtklo.so
#8 0x00007f87626a1660 in VCLXAccessibleComponent::WindowChildEventListener(VclSimpleEvent*) () from /usr/lib/libreoffice/program/libtklo.so
#9 0x00007f876173bb72 in VclEventListeners::Call(VclSimpleEvent*) const () from /usr/lib/libreoffice/program/libvcllo.so
#10 0x00007f876197f719 in Window::CallEventListeners(unsigned long, void*) () from /usr/lib/libreoffice/program/libvcllo.so
#11 0x00007f8761987040 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#12 0x00007f876198b8cf in Window::Show(unsigned char, unsigned short) () from /usr/lib/libreoffice/program/libvcllo.so
#13 0x00007f8727c72f29 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#14 0x00007f8727c4e00e in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#15 0x00007f8727a6f0be in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#16 0x00007f8727a6fba2 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#17 0x00007f8727a70df8 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#18 0x00007f8727a6117c in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#19 0x00007f8727a61414 in boost::_bi::bind_t<void, boost::_mfi::mf2<void, sd::framework::ConfigurationControllerResourceManager, com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> const&, com::sun::star::uno::Reference<com::sun::star::drawing::framework::XConfiguration> const&>, boost::_bi::list3<boost::_bi::value<sd::framework::ConfigurationControllerResourceManager*>, boost::arg<1>, boost::_bi::value<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XConfiguration> > > > std::for_each<__gnu_cxx::__normal_iterator<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> const*, std::vector<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId>, std::allocator<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> > > >, boost::_bi::bind_t<void, boost::_mfi::mf2<void, sd::framework::ConfigurationControllerResourceManager, com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> const&, com::sun::star::uno::Reference<com::sun::star::drawing::framework::XConfiguration> const&>, boost::_bi::list3<boost::_bi::value<sd::framework::ConfigurationControllerResourceManager*>, boost::arg<1>, boost::_bi::value<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XConfiguration> > > > >(__gnu_cxx::__normal_iterator<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> const*, std::vector<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId>, std::allocator<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> > > >, __gnu_cxx::__normal_iterator<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> const*, std::vector<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId>, std::allocator<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> > > >, boost::_bi::bind_t<void, boost::_mfi::mf2<void, sd::framework::ConfigurationControllerResourceManager, com::sun::star::uno::Reference<com::sun::star::drawing::framework::XResourceId> const&, com::sun::star::uno::Reference<com::sun::star::drawing::framework::XConfiguration> const&>, boost::_bi::list3<boost::_bi::value<sd::framework::ConfigurationControllerResourceManager*>, boost::arg<1>, boost::_bi::value<com::sun::star::uno::Reference<com::sun::star::drawing::framework::XConfiguration> > > >) ()
   from /usr/lib/libreoffice/program/../program/libsdlo.so
#20 0x00007f8727a60834 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#21 0x00007f8727a62610 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#22 0x00007f8727a62afb in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#23 0x00007f8727a58392 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#24 0x00007f8727a583e4 in ?? () from /usr/lib/libreoffice/program/../program/libsdlo.so
#25 0x00007f8761999cb8 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#26 0x00007f87619a311e in SalGenericDisplay::DispatchInternalEvent() () from /usr/lib/libreoffice/program/libvcllo.so
#27 0x00007f87580abba2 in ?? () from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#28 0x00007f87580abc29 in ?? () from /usr/lib/libreoffice/program/libvclplug_gtklo.so
---Type <return> to continue, or q <return> to quit---
#29 0x00007f8756a01c9a in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#30 0x00007f8756a02060 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#31 0x00007f8756a02124 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#32 0x00007f87580ab909 in ?? () from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#33 0x00007f87580ac7bd in ?? () from /usr/lib/libreoffice/program/libvclplug_gtklo.so
#34 0x00007f8761732dc1 in Application::Yield(bool) () from /usr/lib/libreoffice/program/libvcllo.so
#35 0x00007f8761732e77 in Application::Execute() () from /usr/lib/libreoffice/program/libvcllo.so
#36 0x00007f87656c80fd in ?? () from /usr/lib/libreoffice/program/libsofficeapp.so
#37 0x00007f87617399b1 in ?? () from /usr/lib/libreoffice/program/libvcllo.so
#38 0x00007f8761739a55 in SVMain() () from /usr/lib/libreoffice/program/libvcllo.so
#39 0x00007f87656ef8b5 in soffice_main () from /usr/lib/libreoffice/program/libsofficeapp.so
#40 0x000000000040062b in ?? ()
#41 0x00007f876531076d in __libc_start_main () from /lib/x86_64-linux-gnu/libc.so.6
#42 0x0000000000400661 in ?? ()
#43 0x00007fff32080ad8 in ?? ()
#44 0x000000000000001c in ?? ()
#45 0x0000000000000002 in ?? ()
#46 0x00007fff320814da in ?? ()
#47 0x00007fff32081503 in ?? ()
#48 0x0000000000000000 in ?? ()

summary: - Impress crashes when clicking on Note tab every time
+ Impress crashes every time when clicking on Outline/Note/Handout tab
Revision history for this message
penalvch (penalvch) wrote :

Felix Möller, thank you for reporting this and helping make Ubuntu better. However, your crash report is missing. Please follow these instructions to have apport report a new bug about your crash that can be dealt with by the automatic retracer. One may execute at the Terminal:
sudo apt-get -y install libreoffice-dbg uno-libs3-dbg ure-dbg && sudo service apport start force_start=1

If you are running the Ubuntu Stable Release you might need to enable apport in /etc/default/apport and restart.

Now reproduce the crash, then open your file manager, navigate to your /var/crash directory and open the crash report you wish to submit.
If this fails you will have to open a terminal and file your report with 'ubuntu-bug /var/crash/_my_crash_report.crash' where _my_crash_report.crash is the crash you would like to report. If you get an error that you aren't allowed to access this report you will have to file it with 'sudo ubuntu-bug /var/crash/_my_crash_report.crash'. Please follow https://wiki.ubuntu.com/LibreOfficeBugWrangling when you file this crash report so the necessary information is provided.

I'm closing this bug report since the process outlined above will automatically open a new bug report which can then dealt with more efficiently. Thanks in advance for your cooperation and understanding.

Changed in libreoffice (Ubuntu):
status: New → Invalid
Revision history for this message
Felix Möller (felix-derklecks) wrote :
Download full text (9.8 KiB)

Program received signal SIGSEGV, Segmentation fault.
accessibility::AccessibleViewForwarder::AccessibleViewForwarder (this=<optimized out>, pView=0x0, rDevice=...)
    at /build/buildd/libreoffice-3.5.2/sd/source/ui/accessibility/AccessibleViewForwarder.cxx:50
50 /build/buildd/libreoffice-3.5.2/sd/source/ui/accessibility/AccessibleViewForwarder.cxx: Datei oder Verzeichnis nicht gefunden.
(gdb) bt
#0 accessibility::AccessibleViewForwarder::AccessibleViewForwarder (this=<optimized out>, pView=0x0, rDevice=...)
    at /build/buildd/libreoffice-3.5.2/sd/source/ui/accessibility/AccessibleViewForwarder.cxx:50
#1 0x00007ffa1e585a43 in accessibility::AccessibleDocumentViewBase::AccessibleDocumentViewBase (this=0x46c0220, pSdWindow=0x4671200, pViewShell=0x3cd9040,
    rxController=..., rxParent=...) at /build/buildd/libreoffice-3.5.2/sd/source/ui/accessibility/AccessibleDocumentViewBase.cxx:79
#2 0x00007ffa1e58ad97 in accessibility::AccessibleOutlineView::AccessibleOutlineView (this=0x46c0220, pSdWindow=0x4671200, pViewShell=0x3cd9040,
    rxController=..., rxParent=...) at /build/buildd/libreoffice-3.5.2/sd/source/ui/accessibility/AccessibleOutlineView.cxx:77
#3 0x00007ffa1e7f99d4 in sd::OutlineViewShell::CreateAccessibleDocumentView (this=0x3cd9040, pWindow=0x4671200)
    at /build/buildd/libreoffice-3.5.2/sd/source/ui/view/outlnvsh.cxx:2097
#4 0x00007ffa1e8144bf in sd::Window::CreateAccessible (this=<optimized out>) at /build/buildd/libreoffice-3.5.2/sd/source/ui/view/sdwindow.cxx:1174
#5 0x00007ffa574dde40 in Window::GetAccessible (this=0x4671200, bCreate=<optimized out>)
    at /build/buildd/libreoffice-3.5.2/vcl/source/window/window.cxx:8480
#6 0x00007ffa581f8931 in VCLXAccessibleComponent::GetChildAccessible (this=<optimized out>, rVclWindowEvent=...)
    at /build/buildd/libreoffice-3.5.2/toolkit/source/awt/vclxaccessiblecomponent.cxx:180
#7 0x00007ffa581f7384 in VCLXAccessibleComponent::ProcessWindowChildEvent (this=0x33c2340, rVclWindowEvent=...)
    at /build/buildd/libreoffice-3.5.2/toolkit/source/awt/vclxaccessiblecomponent.cxx:194
#8 0x00007ffa581f8660 in VCLXAccessibleComponent::WindowChildEventListener (this=0x33c2340, pEvent=0x7fffc70d9860)
    at /build/buildd/libreoffice-3.5.2/toolkit/source/awt/vclxaccessiblecomponent.cxx:166
#9 0x00007ffa57292b72 in Call (pCaller=0x7fffc70d9860, this=0x34c68e0) at /build/buildd/libreoffice-3.5.2/solver/unxlngx6.pro/inc/tools/link.hxx:140
#10 VclEventListeners::Call (this=<optimized out>, pEvent=0x7fffc70d9860) at /build/buildd/libreoffice-3.5.2/vcl/source/app/vclevent.cxx:72
#11 0x00007ffa574d6719 in Window::CallEventListeners (this=<optimized out>, nEvent=<optimized out>, pData=<optimized out>)
    at /build/buildd/libreoffice-3.5.2/vcl/source/window/window.cxx:5202
#12 0x00007ffa574de040 in Window::ImplSetReallyVisible (this=0x4671200) at /build/buildd/libreoffice-3.5.2/vcl/source/window/window.cxx:1585
#13 0x00007ffa574e28cf in Window::Show (this=0x4671200, bVisible=<optimized out>, nFlags=0)
    at /build/buildd/libreoffice-3.5.2/vcl/source/window/window.cxx:6339
#14 0x00007ffa1e81ef29 in sd::ViewShell::doShow (this=0x3cd9040) at /build/buildd/libreoffice-3.5.2/sd/source/ui/view/vi...

Revision history for this message
Felix Möller (felix-derklecks) wrote :

Apport just does not pop up.

I have the crashes in dmesg:
[23809.884610] soffice.bin[8691]: segfault at 80 ip 00007fd6f70e0008 sp 00007fff45856120 error 4 in libsdlo.so[7fd6f6e80000+5e4000]
[24055.653383] soffice.bin[8825]: segfault at 80 ip 00007fd99f9eb008 sp 00007fffa78fbd20 error 4 in libsdlo.so[7fd99f78b000+5e4000]
[24242.051733] soffice.bin[8908]: segfault at 80 ip 00007f86befe1008 sp 00007fff19c0dea0 error 4 in libsdlo.so[7f86bed81000+5e4000]

but apport does not react nor is a file in /var/crash ...

Any hint?

Revision history for this message
penalvch (penalvch) wrote :

Felix Möller, please execute the following command, as it will automatically gather debugging information, in a terminal:
apport-collect 982518
When reporting bugs in the future please use apport by using 'ubuntu-bug' and the name of the package affected. You can learn more about this functionality at https://wiki.ubuntu.com/ReportingBugs.

As well, please execute the following at the Terminal and report the result to this report:
apt-cache policy libreoffice-dbg uno-libs3-dbg ure-dbg libreoffice-gtk && sudo service apport start force_start=1

Changed in libreoffice (Ubuntu):
status: Invalid → Incomplete
Revision history for this message
Felix Möller (felix-derklecks) wrote :

apport-collect tells me: no more information collected.

fm@thinkpad:~$ LANG=en_US apt-cache policy libreoffice-dbg uno-libs3-dbg ure-dbg libreoffice-gtk && sudo service apport start force_start=1
libreoffice-dbg:
  Installed: 1:3.5.2-2ubuntu1
  Candidate: 1:3.5.2-2ubuntu1
  Version table:
 *** 1:3.5.2-2ubuntu1 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status
     1:3.5.1-1ubuntu2 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise-proposed/main amd64 Packages
uno-libs3-dbg:
  Installed: 3.5.2-2ubuntu1
  Candidate: 3.5.2-2ubuntu1
  Version table:
 *** 3.5.2-2ubuntu1 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status
     3.5.1-1ubuntu2 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise-proposed/main amd64 Packages
ure-dbg:
  Installed: 3.5.2-2ubuntu1
  Candidate: 3.5.2-2ubuntu1
  Version table:
 *** 3.5.2-2ubuntu1 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status
     3.5.1-1ubuntu2 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise-proposed/main amd64 Packages
libreoffice-gtk:
  Installed: 1:3.5.2-2ubuntu1
  Candidate: 1:3.5.2-2ubuntu1
  Version table:
 *** 1:3.5.2-2ubuntu1 0
        500 http://de.archive.ubuntu.com/ubuntu/ precise/main amd64 Packages
        100 /var/lib/dpkg/status
start: Job is already running: apport

Revision history for this message
penalvch (penalvch) wrote :

Felix Möller, thank you for providing the requested information. As a potential workaround, if you uninstall libreoffice-gtk, is the crash still reproducible?

Revision history for this message
Felix Möller (felix-derklecks) wrote :

Thanks Christopher, this in fact makes the crash go away... Although it looks really bad. ;)

penalvch (penalvch)
Changed in libreoffice (Ubuntu):
status: Incomplete → New
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in libreoffice (Ubuntu):
status: New → Confirmed
penalvch (penalvch)
description: updated
Revision history for this message
Brian Farrow (brifarrow) wrote :

Same problem; same fix; same ugliness.

Revision history for this message
penalvch (penalvch) wrote :

Felix Möller, thank you for taking the time to report this bug and helping to make Ubuntu better. The issue you are reporting is an upstream one and it would be nice if somebody having it could send the bug to the developers of the software by following the instructions at http://wiki.documentfoundation.org/BugReport . If you have done so, please tell us the number of the upstream bug (or the link), so we can add a bugwatch that will inform us about the status. Thanks in advance.

Changed in df-libreoffice:
status: New → Incomplete
Revision history for this message
Björn Michaelsen (bjoern-michaelsen) wrote :

not reproducable here. which window manager is used?

this is likely:
 https://bugs.freedesktop.org/show_bug.cgi?id=46687 (fixed in 3.5.3)
or
 https://bugs.freedesktop.org/show_bug.cgi?id=50173 (fixed in 3.5.4)

Revision history for this message
Koen Roggemans (koen-roggemans) wrote :

I have this problem on LibreOffice 3.5.4.2, using "ubuntu classic" on 10.04
The proposed workaround works for me: I removed libreoffice-gnome libreoffice-gtk
It's ugly, but I prefer it working...

Revision history for this message
Felix Möller (felix-derklecks) wrote :

I cannot reproduce this on Ubuntu 12.10, do not have any older installations anymore ...

Revision history for this message
penalvch (penalvch) wrote :

Felix Möller, glad to here this issue is resolved for you. Did you need a backport to a release prior to Quantal or may we close this report as Status Invalid?

no longer affects: df-libreoffice
Changed in libreoffice (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
OC (olivier-c) wrote :

I get this on version 1:3.5.4-0ubuntu1.1 (I run 12.04 64bit on a ThinkPad X201). Rolling back the libreoffice lot of packages to 1:3.5.2-2ubuntu1 does not solve the problem. Deleting user setting folders (~/.config/libreoffice and ~/.libreoffice) does not affect the bug.

Workaround above works (but what a shameful sight for the university room audience!).

I cannot reproduce the problem booting from USB key on vanilla 12.04 64bit.

Revision history for this message
Gianfranco Cecconi (giacecco) wrote :

Same problem here on Ubuntu 12.04 32 bit AND the workaround of uninstalling libreoffice-gtk does not work, too.

Revision history for this message
penalvch (penalvch) wrote :

OC / Gianfranco Cecconi, please follow the directions noted in https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/982518/comments/1 .

Revision history for this message
Atanas Popov (popov-atanas) wrote :

I have the same issue. It appears even with empty document. When click one of (OUTLINE,NOTES,HANDOUT), the app exits with SEGFAULT

soffice.bin[11376]: segfault at 80 ip 00007faf460d6008 sp 00007fff28e003a0 error 4 in libsdlo.so[7faf45e76000+5e4000]

Ubuntu 12.04.
Attached is the valgrind output.

Revision history for this message
penalvch (penalvch) wrote :
Revision history for this message
Björn Michaelsen (bjoern-michaelsen) wrote :

On precise, could you please test with the1:3.5.7-0ubuntu4~ppa1 version in:
https://launchpad.net/~bjoern-michaelsen/+archive/libreoffice-quantaltest-20120601
(or the 1:3.5.7-0ubuntu3~ppa2 from https://launchpad.net/~libreoffice/+archive/libreoffice-3-5?field.series_filter=precise)

Thanks!

Revision history for this message
Björn Michaelsen (bjoern-michaelsen) wrote :

Regardless of the state on precise, as per comment 13 this is solved on later release. => thus fix released.

Changed in libreoffice (Ubuntu):
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.