Bug#465423: openoffice.org-writer: segfault in vclcanvas::CanvasHelper::strokePolyPolygon in specific document
Package: openoffice.org-writer
Version: 1:2.4.0~ooh680m6-3
Severity: important
Writer segfaults reproducibly when viewing the document
es_20250402v005m.doc contained in a zip file avaiable on-line [1].
The segfault occurs when scrolling with the PgDown key until page 9,
which contains some graphics.
[1] http://www.parlay.org/imwp/download.asp?ContentID=11373
Stack trace (made using oowriter 1:2.3.1-3):
~$ gdb /usr/lib/openoffice/program/soffice.bin
GNU gdb 6.7.1-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
(gdb) set pagination 0
(gdb) run -writer
Starting program: /usr/lib/openoffice/program/soffice.bin -writer
[Thread debugging using libthread_db enabled]
warning: Lowest section in /usr/lib/libicudata.so.38 is .hash at 000000b4
[New Thread 0xb57ef6c0 (LWP 21218)]
Qt: gdb: -nograb added to command-line options.
Use the -dograb option to enforce grabbing.
[New Thread 0xb35e9b90 (LWP 21224)]
[New Thread 0xb2dd2b90 (LWP 21225)]
[New Thread 0xb2472b90 (LWP 21226)]
[New Thread 0xb10d1b90 (LWP 21231)]
[New Thread 0xaec1db90 (LWP 21238)]
[New Thread 0xad68db90 (LWP 21242)]
[Thread 0xad68db90 (LWP 21242) exited]
[New Thread 0xad68db90 (LWP 21245)]
[Thread 0xad68db90 (LWP 21245) exited]
[New Thread 0xad68db90 (LWP 21247)]
[Thread 0xad68db90 (LWP 21247) exited]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb57ef6c0 (LWP 21218)]
0xaca5a15d in vclcanvas::CanvasHelper::strokePolyPolygon () from /usr/lib/openoffice/program/vclcanvas.uno.so
(gdb) bt full
#0 0xaca5a15d in vclcanvas::CanvasHelper::strokePolyPolygon () from /usr/lib/openoffice/program/vclcanvas.uno.so
No locals.
#1 0xaca46d7d in canvas::CanvasBase<canvas::BaseMutexHelper<cppu::WeakComponentImplHelper4<com::sun::star::rendering::XBitmapCanvas, com::sun::star::rendering::XIntegerBitmap, com::sun::star::lang::XServiceInfo, com::sun::star::beans::XFastPropertySet> >, vclcanvas::CanvasBitmapHelper, vclcanvas::tools::LocalGuard, cppu::OWeakObject>::strokePolyPolygon () from /usr/lib/openoffice/program/vclcanvas.uno.so
No locals.
#2 0xac6df52d in render () from /usr/lib/openoffice/program/libcppcanvas680li.so
No locals.
#3 0xac6c2415 in cppcanvas::internal::CachedPrimitiveBase::render () from /usr/lib/openoffice/program/libcppcanvas680li.so
No locals.
#4 0xac6cbc65 in cppcanvas::internal::ImplRenderer::draw () from /usr/lib/openoffice/program/libcppcanvas680li.so
No locals.
#5 0xace7b0a9 in MtfRenderer::draw () from /usr/lib/openoffice/program/libmtfrenderer.uno.so
No locals.
#6 0xb7cf209e in GDIMetaFile::ImplPlayWithRenderer () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#7 0xb7cf2bde in GDIMetaFile::Play () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#8 0xaed2f2f6 in GraphicManager::ImplDraw () from /usr/lib/openoffice/program/libgo680li.so
No locals.
#9 0xaed2f4e9 in GraphicManager::ImplCreateOutput () from /usr/lib/openoffice/program/libgo680li.so
No locals.
#10 0xaed35cd4 in GraphicManager::ImplDraw () from /usr/lib/openoffice/program/libgo680li.so
No locals.
#11 0xaed362eb in GraphicManager::DrawObj () from /usr/lib/openoffice/program/libgo680li.so
No locals.
#12 0xaed2cda1 in GraphicObject::Draw () from /usr/lib/openoffice/program/libgo680li.so
No locals.
#13 0xb01b82f4 in SwNoTxtFrm::PaintPicture () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#14 0xb01b8842 in SwNoTxtFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#15 0xb00a1964 in SwLayoutFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#16 0xb00a34d4 in SwFlyFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#17 0xb0103055 in SwFlyCntPortion::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#18 0xb00fc485 in SwTxtPainter::DrawTextLine () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#19 0xb00e52a2 in SwTxtFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#20 0xb00a1964 in SwLayoutFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#21 0xb00a1964 in SwLayoutFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#22 0xb00a2373 in SwRootFrm::Paint () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#23 0xb00150f0 in ViewShell::ImplEndAction () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#24 0xb00168d0 in ViewShell::MakeVisible () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#25 0xaffe94d3 in SwCrsrShell::MakeSelVisible () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#26 0xb03724dc in SwFEShell::MakeSelVisible () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#27 0xaffecd1d in SwCrsrShell::UpdateCrsr () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#28 0xaffeff9f in SwCrsrShell::SetCrsr () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#29 0xb07b75ba in SwWrtShell::SetCrsr () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#30 0xb07b4943 in SwWrtShell::PushCrsr () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#31 0xb07b4bb5 in SwWrtShell::PageCrsr () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#32 0xb079ab6f in SwView::PageDownCrsr () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#33 0xb0783a2d in SwView::Execute () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#34 0xb0774a54 in SfxStubSwViewExecute () from /usr/lib/openoffice/program/libsw680li.so
No locals.
#35 0xb1a6b2c6 in SfxDispatcher::Call_Impl () from /usr/lib/openoffice/program/libsfx680li.so
No locals.
#36 0xb1a5e406 in SfxBindings::Execute_Impl () from /usr/lib/openoffice/program/libsfx680li.so
No locals.
#37 0xb1a8b8b6 in SfxDispatchController_Impl::dispatch () from /usr/lib/openoffice/program/libsfx680li.so
No locals.
#38 0xb1a8c462 in SfxOfficeDispatch::dispatch () from /usr/lib/openoffice/program/libsfx680li.so
No locals.
#39 0xb77feea9 in svt::AsyncAccelExec::impl_ts_asyncCallback () from /usr/lib/openoffice/program/libsvt680li.so
No locals.
#40 0xb7f08fd5 in vcl::EventPoster::LinkStubDoEvent_Impl () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#41 0xb7ea6542 in ImplWindowFrameProc () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#42 0xb492913b in SalDisplay::DispatchInternalEvent () from /usr/lib/openoffice/program/libvclplug_gen680li.so
No locals.
#43 0xb4929175 in SalX11Display::Yield () from /usr/lib/openoffice/program/libvclplug_gen680li.so
No locals.
#44 0xb49259e3 in DisplayYield () from /usr/lib/openoffice/program/libvclplug_gen680li.so
No locals.
#45 0xb4921963 in SalXLib::Yield () from /usr/lib/openoffice/program/libvclplug_gen680li.so
No locals.
#46 0xb49312b7 in X11SalInstance::Yield () from /usr/lib/openoffice/program/libvclplug_gen680li.so
No locals.
#47 0xb7ca49c9 in Application::Yield () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#48 0xb7ca4adc in Application::Execute () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#49 0x0806d189 in desktop::Desktop::Main ()
No locals.
#50 0xb7caa595 in ImplSVMain () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#51 0xb7caa695 in SVMain () from /usr/lib/openoffice/program/libvcl680li.so
No locals.
#52 0x0805ec54 in main ()
No locals.
(gdb)
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.24-lg (PREEMPT)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages openoffice.org-writer depends on:
ii libc6 2.7-6 GNU C Library: Shared libraries
ii libgcc1 1:4.3-20080116-1 GCC support library
ii libicu38 3.8-6 International Components for Unico
ii libstdc++6 4.3-20080116-1 The GNU Standard C++ Library v3
ii libstlport4.6c2 4.6.2-3 STLport C++ class library
ii libwpd8c2a 0.8.13-2 Library for handling WordPerfect d
ii libwps-0.1-1 0.1.2-1 Works text file format import filt
ii libxml2 2.6.31.dfsg-1 GNOME XML library
ii openoffice.org-base-c 1:2.4.0~ooh680m6-3 OpenOffice.org office suite -- lib
ii openoffice.org-core 1:2.4.0~ooh680m6-3 OpenOffice.org office suite archit
ii openoffice.org-writer 0.5-3 Writer/Calc to LaTeX/XHTML convert
ii python-uno 1:2.4.0~ooh680m6-3 Python interface for OpenOffice.or
ii zlib1g 1:1.2.3.3.dfsg-11 compression library - runtime
Versions of packages openoffice.org-writer recommends:
ii gij-4.1 [java2-runtim 4.1.2-16 The GNU Java bytecode interpreter
ii gij-4.2 [java2-runtim 4.2.1-5 The GNU Java bytecode interpreter
ii java-gcj-compat [java 1.0.77-4 Java runtime environment using GIJ
ii openoffice.org-filter 1:2.4.0~ooh680m6-3 Legacy filters (e.g. StarOffice 5.
ii openoffice.org-java-c 1:2.3.1-3 OpenOffice.org office suite Java s
ii sun-java6-jre [java2- 6-04-2 Sun Java(TM) Runtime Environment (
Versions of packages openoffice.org-core depends on:
ii fontconfig 2.5.0-2 generic font configuration library
ii libc6 2.7-6 GNU C Library: Shared libraries
ii libcairo2 1.4.14-1 The Cairo 2D vector graphics libra
ii libcurl3 7.18.0-1 Multi-protocol file transfer libra
ii libdb4.5 4.5.20-11 Berkeley v4.5 Database Libraries [
ii libexpat1 1.95.8-4 XML parsing C library - runtime li
ii libfreetype6 2.3.5-1+b1 FreeType 2 font engine, shared lib
ii libgcc1 1:4.3-20080116-1 GCC support library
ii libglib2.0-0 2.14.5-2 The GLib library of C routines
ii libgstreamer-plugins- 0.10.17-1 GStreamer libraries from the "base
ii libgstreamer0.10-0 0.10.17-1 Core GStreamer libraries and eleme
ii libgtk2.0-0 2.12.5-2 The GTK+ graphical user interface
ii libhunspell-1.1-0 1.1.9-1 spell checker and morphological an
ii libhyphen0 2.3-5 ALTLinux hyphenation library - sha
ii libice6 2:1.0.4-1 X11 Inter-Client Exchange library
ii libicu38 3.8-6 International Components for Unico
ii libjpeg62 6b-14 The Independent JPEG Group's JPEG
ii libldap-2.4-2 2.4.7-4 OpenLDAP libraries
ii libneon27 0.27.2-1 An HTTP and WebDAV client library
ii libnspr4-0d 4.7.0~1.9b1-2 NetScape Portable Runtime Library
ii libnss3-1d 3.12.0~1.9b1-2 Network Security Service libraries
ii libpam0g 0.99.7.1-5 Pluggable Authentication Modules l
ii libpango1.0-0 1.18.4-1 Layout and rendering of internatio
ii libsm6 2:1.0.3-1+b1 X11 Session Management library
ii libssl0.9.8 0.9.8g-4 SSL shared libraries
ii libstdc++6 4.3-20080116-1 The GNU Standard C++ Library v3
ii libstlport4.6c2 4.6.2-3 STLport C++ class library
ii libx11-6 2:1.0.3-7 X11 client-side library
ii libxaw7 2:1.0.4-1 X11 Athena Widget library
ii libxext6 1:1.0.3-2 X11 miscellaneous extension librar
ii libxinerama1 1:1.0.2-1 X11 Xinerama extension library
ii libxml2 2.6.31.dfsg-1 GNOME XML library
ii libxrender1 1:0.9.4-1 X Rendering Extension client libra
ii libxslt1.1 1.1.22-1 XSLT processing library - runtime
ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library
ii openoffice.org-common 1:2.4.0~ooh680m6-3 OpenOffice.org office suite archit
ii ttf-opensymbol 1:2.3.1-3 The OpenSymbol TrueType font
ii zlib1g 1:1.2.3.3.dfsg-11 compression library - runtime
-- no debconf information
Reply to: