Bug#354251: openoffice.org-writer: Confirmation
package openoffice.org-writer
found 354251 1:2.3.1-5
found 354251 1:2.4.0~rc6-1
tags 354251 confirmed
thanks
On Monday 18 Feb 2008, Jan Krajicek wrote:
> Openoffice.org 2.3.1 on Lenny still crashes when trying to open the
> document in the attachment of the first reply.
Reproduced on current Lenny and Sid.
Backtrace:
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x2b0bcca58fa0 (LWP 14049)]
0x00002aaaadbf9d46 in SwTabFrm::GetTable (this=0x0) at ../inc/tabfrm.hxx:155
155 SwTable *GetTable() { return pTable; }
(gdb) where
#0 0x00002aaaadbf9d46 in SwTabFrm::GetTable (this=0x0)
at ../inc/tabfrm.hxx:155
#1 0x00002aaaadcef102 in SwCntntFrm::ShrinkFrm (this=0x2aaab0c36c40,
nDist=-392, bTst=0 '\0', bInfo=0 '\0')
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/wsfrm.cxx:2116
#2 0x00002aaaadcea12d in SwFrm::Shrink (this=0x2aaab0c36c40, nDist=280,
bTst=0 '\0', bInfo=0 '\0')
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/wsfrm.cxx:1444
#3 0x00002aaaadd05735 in SwTxtFrm::AdjustFrm (this=0x2aaab0c36c40,
nChgHght=280, bHasToFit=0 '\0')
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/text/frmform.cxx:604
#4 0x00002aaaadd3a6f9 in SwTxtFrm::FormatEmpty ()
from /usr/lib/openoffice/program/libsw680lx.so
#5 0x00002aaaadd090e9 in SwTxtFrm::Format (this=0x2aaab0c36c40)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/text/frmform.cxx:1975
#6 0x00002aaaadc5cee3 in SwCntntFrm::MakeAll (this=0x2aaab0c36c40)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:1436
#7 0x00002aaaadc5a849 in SwFrm::PrepareMake (this=0x2aaab0c36c40)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:419
#8 0x00002aaaadbfc4f3 in SwFrm::Calc (this=0x2aaab0c36c40)
at ../inc/frame.hxx:1067
#9 0x00002aaaadcde56e in SwTabFrm::MakeAll (this=0x2aaab0c2d340)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/tabfrm.cxx:2814
#10 0x00002aaaadc5a74e in SwFrm::PrepareMake (this=0x2aaab0c36c40)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:385
#11 0x00002aaaadbfc4f3 in SwFrm::Calc (this=0x2aaab0c36c40)
at ../inc/frame.hxx:1067
#12 0x00002aaaadcd779d in lcl_CalcLowers (pLay=0x2aaab0c2e3c0,
pDontLeave=0x2aaab0c2d0d0,
nBottom=9223372036854775807, bSkipRowSpanCells=false)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/tabfrm.cxx:1625
#13 0x00002aaaadcd832d in lcl_FirstTabCalc (pTab=0x2aaab0c2d0d0)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/tabfrm.cxx:1772
#14 0x00002aaaadcdc43c in SwTabFrm::MakeAll (this=0x2aaab0c2d0d0)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/tabfrm.cxx:2287
#15 0x00002aaaadc5a849 in SwFrm::PrepareMake (this=0x2aaab0c2d0d0)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:419
#16 0x00002aaaadbfc4f3 in SwFrm::Calc (this=0x2aaab0c2d0d0)
at ../inc/frame.hxx:1067
#17 0x00002aaaadc5a4f0 in SwFrm::PrepareMake (this=0x2aaab0c2e3c0)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:320
#18 0x00002aaaadbfc4f3 in SwFrm::Calc (this=0x2aaab0c2e3c0)
at ../inc/frame.hxx:1067
#19 0x00002aaaadc5a4f0 in SwFrm::PrepareMake (this=0x2aaab0c2f888)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:320
#20 0x00002aaaadbfc4f3 in SwFrm::Calc (this=0x2aaab0c2f888)
at ../inc/frame.hxx:1067
#21 0x00002aaaadc5a4f0 in SwFrm::PrepareMake (this=0x2aaab0c32550)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/calcmove.cxx:320
#22 0x00002aaaadbfc4f3 in SwFrm::Calc (this=0x2aaab0c32550)
at ../inc/frame.hxx:1067
#23 0x00002aaaadc9387e in SwLayAction::IsShortCut (this=0x7fffe9716190,
prPage=@0x7fffe9716078)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/layact.cxx:1488
#24 0x00002aaaadc94212 in SwLayAction::InternalAction (this=0x7fffe9716190)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/layact.cxx:847
#25 0x00002aaaadc953c1 in SwLayAction::Action (this=0x7fffe9716190)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/layout/layact.cxx:661
#26 0x00002aaaadc23245 in ViewShell::ImplEndAction (this=0x10817d0,
bIdleEnd=0 '\0')
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/view/viewsh.cxx:306
#27 0x00002aaaadbfc69c in ViewShell::EndAction (this=0x10817d0,
bIdleEnd=0 '\0') at ../../../inc/viewsh.hxx:620
#28 0x00002aaaadbf754a in SwCrsrShell::EndAction (this=0x10817d0,
bIdleEnd=0 '\0')
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/core/crsr/crsrsh.cxx:345
#29 0x00002aaaae34336a in SwView::OuterResizePixel (this=0x111f150,
rOfst=@0x7fffe9716590, rSize=@0x7fffe97165b0)
at /home/cha/src/oo/openoffice.org-2.4.0~rc6/ooo-build/build/current/sw/source/ui/uiview/viewport.cxx:1286
#30 0x00002b0bc43fa0fc in SfxViewFrame::DoAdjustPosSizePixel ()
from /usr/lib/openoffice/program/libsfx680lx.so
#31 0x00002b0bc43fa3fd in SfxViewFrame::Resize ()
from /usr/lib/openoffice/program/libsfx680lx.so
#32 0x00002b0bc18547e9 in Window::ImplCallResize ()
from /usr/lib/openoffice/program/libvcl680lx.so
The problem occurs becuase wsfrm.cxx does this:
SwTwips SwCntntFrm::ShrinkFrm( SwTwips nDist, BOOL bTst, BOOL bInfo )
{
[...] if( IsVertical() )
[...]
if ( IsInTab() )
{
SwTabFrm *pTab = FindTabFrm();
if ( pTab->GetTable()->GetHTMLTableLayout() &&
FindTabFrm() returns NULL, which causes the crash. Strangely, this is guarded
by IsInTab(), which should normally mean FindTabFrm() always returns
something.
I haven't got a vanilla upstream install to hand to verify that this bug is
present upstream, so I'm not forwarding the report yet.
Chris
Reply to: