soffice.bin crashed with SIGSEGV in EditView::GetFieldUnderMousePointer()

Bug #1372799 reported by David Sommen
38
This bug affects 7 people
Affects Status Importance Assigned to Milestone
libreoffice (Ubuntu)
Fix Released
Medium
Unassigned
Trusty
Fix Released
Medium
Unassigned
libreoffice-l10n (Ubuntu)
Fix Released
Medium
Unassigned
Trusty
Fix Released
Medium
Unassigned

Bug Description

[Impact]

 * over 3.000 crashes (thus possible data loss) in the last month on errors.ubuntu.com
 * likely a regression-update from the 4.2.7 security update -- no earlier crashes reported on errors.ubuntu.com

[Test Case]

 * no good repro instructions known

[Regression Potential]

 * low, we have had most of the 4.2.7 -> 4.2.8 patches already vendor patched on our version
 * 4.2.8 is in https://launchpad.net/~libreoffice/+archive/ubuntu/libreoffice-4-2 since 2014-12-05 with no problems observed

[Other Info]

While working in a spreadsheet, Libreoffice froze and this error turned up.

ProblemType: Crash
DistroRelease: Ubuntu 14.10
Package: libreoffice-core 1:4.3.1~rc2-0ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-16.22-generic 3.16.2
Uname: Linux 3.16.0-16-generic x86_64
ApportVersion: 2.14.7-0ubuntu2
Architecture: amd64
CurrentDesktop: Unity
Date: Tue Sep 23 09:42:52 2014
ExecutablePath: /usr/lib/libreoffice/program/soffice.bin
InstallationDate: Installed on 2014-09-18 (5 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Alpha amd64 (20140917)
ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --writer file:///home/username/Copy/Lesgeven/Drums%20DNK/Voorlopige%20aanwezigheidslijst%20David%20Sommen%202014_15.doc --splash-pipe=5
SegvAnalysis:
 Segfault happened at: 0x7f01b0386633 <_ZNK8EditView25GetFieldUnderMousePointerERiS0_+35>: mov 0x8(%rdi),%rax
 PC (0x7f01b0386633) ok
 source "0x8(%rdi)" (0x00000008) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: libreoffice
StacktraceTop:
 EditView::GetFieldUnderMousePointer(int&, int&) const () from /usr/lib/libreoffice/program/../program/libeditenglo.so
 EditView::GetFieldUnderMousePointer() const () from /usr/lib/libreoffice/program/../program/libeditenglo.so
 ?? () from /usr/lib/libreoffice/program/../program/libsclo.so
 ?? () from /usr/lib/libreoffice/program/../program/libsclo.so
 ?? () from /usr/lib/libreoffice/program/libvcllo.so
Title: soffice.bin crashed with SIGSEGV in EditView::GetFieldUnderMousePointer()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

Revision history for this message
David Sommen (davidsommen) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 EditView::GetFieldUnderMousePointer (this=0x0, nPara=@0x7fffa49577d0: -1533708224, nPos=@0x7fffa49577d4: 32767) at /build/buildd/libreoffice-4.3.1~rc2/editeng/source/editeng/editview.cxx:1055
 EditView::GetFieldUnderMousePointer (this=<optimized out>) at /build/buildd/libreoffice-4.3.1~rc2/editeng/source/editeng/editview.cxx:1046
 ScGridWindow::GetEditUrl (this=this@entry=0x9443a00, rPos=..., pName=pName@entry=0x0, pUrl=pUrl@entry=0x0, pTarget=pTarget@entry=0x0) at /build/buildd/libreoffice-4.3.1~rc2/sc/source/ui/view/gridwin.cxx:5245
 ScGridWindow::MouseMove (this=0x9443a00, rMEvt=...) at /build/buildd/libreoffice-4.3.1~rc2/sc/source/ui/view/gridwin.cxx:2664
 ImplHandleMouseEvent (pWindow=0x0, nSVEvent=30672, nSVEvent@entry=3, bMouseLeave=212, nX=155466240, nY=120267504, nMsgTime=480, nCode=0, nMode=193) at /build/buildd/libreoffice-4.3.1~rc2/vcl/source/window/winproc.cxx:719

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in libreoffice (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
information type: Private → Public
Revision history for this message
Björn Michaelsen (bjoern-michaelsen) wrote :

errors.ubuntu.com sees this first in 4.2.7 and it is still happening at least through to 4.3.3. Possibly related to upstream https://bugs.freedesktop.org/show_bug.cgi?id=77315, which touches related areas of code.

Revision history for this message
Björn Michaelsen (bjoern-michaelsen) wrote :

Interestingly, errors.ubuntu.com does not list a single instance of this happening beyond 4.3.3 even though 4.3.4 and 4.3.5 are already in the ppa for extended amounts of time. Lets see, if this changes if the queued 4.3.4 update to utopic is released.

Revision history for this message
Björn Michaelsen (bjoern-michaelsen) wrote :

Likely solved by upstream commit 8bc56801af0540c0496c1f8ddd335578a8791017/I37cbf8ff49c6ccf38bfac3e1c8c6492ac7bad61b in 4.2.8 and 4.3.5 and master.

description: updated
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in libreoffice (Ubuntu Trusty):
status: New → Confirmed
Changed in libreoffice (Ubuntu):
status: New → Confirmed
Revision history for this message
LAZA (laza74) wrote :

If more infos needed, i got a crash today and will save the bug report.

Revision history for this message
Josep Pujadas-Jubany (jpujades) wrote :

Ubuntu 12.04 LTS 32 bit up-to-date

With Unity desktop:

Mar 6 10:45:39 educat-bellera kernel: [700198.329044] soffice.bin[26517]: segfault at 0 ip b61b927e sp bf89b270 error 6 in libvcllo.so[b5e31000+4a9000]

No crash wih LXDE (Lubuntu) desktop.

Revision history for this message
Chris Halse Rogers (raof) wrote : Please test proposed package

Hello David, or anyone else affected,

Accepted libreoffice-l10n into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/libreoffice-l10n/1:4.2.8-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags: added: verification-needed
Revision history for this message
Chris Halse Rogers (raof) wrote :

Hello David, or anyone else affected,

Accepted libreoffice into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/libreoffice/1:4.2.8-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in libreoffice (Ubuntu Trusty):
status: Confirmed → Fix Committed
Revision history for this message
Rolf Leggewie (r0lf) wrote :

Since there is no know way of reproducing the crash what is the advised way of going up verification for this one? Install the package and then wait? Seems basically impossible to verify to me.

Revision history for this message
Bryan Quigley (bryanquigley) wrote :

@r0lf well generally it falls back to has anyone been running the -proposed version and found an other regressions?

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libreoffice - 1:4.2.8-0ubuntu2

---------------
libreoffice (1:4.2.8-0ubuntu2) trusty-security; urgency=medium

  * avoid null deref in EditEngine
  * add checks in hwpfilter
 -- Bjoern Michaelsen <email address hidden> Tue, 07 Apr 2015 16:48:19 +0200

Changed in libreoffice (Ubuntu Trusty):
status: Fix Committed → Fix Released
Mathew Hodson (mhodson)
Changed in libreoffice-l10n (Ubuntu Trusty):
status: New → Fix Committed
Mathew Hodson (mhodson)
tags: added: verification-done
removed: verification-needed
Mathew Hodson (mhodson)
Changed in libreoffice (Ubuntu):
status: Confirmed → Fix Released
Changed in libreoffice-l10n (Ubuntu):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libreoffice-l10n - 1:4.2.8-0ubuntu1

---------------
libreoffice-l10n (1:4.2.8-0ubuntu1) trusty; urgency=medium

  * new upstream version, remove upstreamed patches
  * likely fixes (LP: #1372799)
 -- Bjoern Michaelsen <email address hidden> Fri, 09 Jan 2015 19:45:44 +0100

Changed in libreoffice-l10n (Ubuntu Trusty):
status: Fix Committed → Fix Released
Revision history for this message
Chris J Arges (arges) wrote : Update Released

The verification of the Stable Release Update for libreoffice-l10n has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Mathew Hodson (mhodson)
Changed in libreoffice (Ubuntu Trusty):
importance: Undecided → Medium
Changed in libreoffice-l10n (Ubuntu):
importance: Undecided → Medium
Changed in libreoffice-l10n (Ubuntu Trusty):
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.