https://bugs.documentfoundation.org/show_bug.cgi?id=173562
Bug ID: 173562
Summary: Windows Explorer crashes (STATUS_HEAP_CORRUPTION,
0xc0000374 in ntdll.dll) triggered by LibreOffice
shell extensions when interacting with .ods files
Product: LibreOffice
Version: 25.2.5.2 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: Installation
Assignee: [email protected]
Reporter: [email protected]
Description:
Over several weeks, Windows Explorer (explorer.exe) crashed repeatedly and
unpredictably on a Windows 11 workstation, with Windows Event Viewer
reporting:
Faulting application: Explorer.EXE
Faulting module: ntdll.dll
Exception code: 0xc0000374 (STATUS_HEAP_CORRUPTION)
The crash occurred at irregular intervals during normal use, roughly every
few days, always with the identical faulting module/exception code. Extensive
troubleshooting was performed first to rule out other causes:
- Windows Memory Diagnostic: no RAM errors found
- sfc /scannow + DISM /RestoreHealth: repaired corrupted system files, no
change in crash frequency
- Driver Verifier (full test of all unsigned drivers): no BSOD triggered
despite multiple Explorer crashes occurring while Driver Verifier was
active, ruling out a faulty driver
- Antivirus software (G DATA) shell extensions disabled: no change
The crash was eventually correlated with a specific user action: copying/
selecting an .ods (OpenDocument Spreadsheet) file in Windows Explorer. This
pointed to Explorer's shell extension mechanism (thumbnail/property/column
generation triggered when Explorer touches such a file).
Using NirSoft ShellExView, the following LibreOffice-registered Explorer
shell extensions were identified and disabled:
- LibreOffice Column Handler
- LibreOffice Infotip Handler
- LibreOffice Property Handler
- LibreOffice Property Sheet Handler
- LibreOffice Thumbnail Viewer
After disabling all five and restarting explorer.exe, the workstation was
used normally (including regular file operations in Explorer, unrelated
heavy workloads like WSL/local LLM inference, and a major Windows Update)
for 5 consecutive days with zero recurrence of the Explorer.EXE / ntdll.dll
/ 0xc0000374 crash — compared to a prior pattern of crashes roughly every
1-4 days. This strongly suggests one or more of the LibreOffice shell
extensions listed above is corrupting the heap inside the Explorer.EXE
process, most likely during thumbnail or property generation for .ods
files.
Steps to Reproduce:
1. Install LibreOffice 26.2.5.2 on Windows 11 with default shell integration
enabled.
2. In Windows Explorer, browse to a folder containing one or more .ods
files (thumbnail/preview generation is triggered).
3. Copy, move, or otherwise interact with .ods file(s) in Explorer over
an extended period of normal use.
4. Observe intermittent Explorer.EXE crashes (Windows Event Viewer,
Application log, Event ID 1000, Exception code 0xc0000374, faulting
module ntdll.dll).
Actual Results:
Windows Explorer crashes with STATUS_HEAP_CORRUPTION at unpredictable
intervals during normal use involving .ods files.
Expected Results:
Windows Explorer should not crash; LibreOffice's shell extensions should
not corrupt the host process's heap.
Reproducible: Always
User Profile Reset: No
Additional Info:
Disabling the five LibreOffice shell extensions listed above via NirSoft
ShellExView (or equivalent registry/CLSID unregistration) eliminates the
crashes. This disables Explorer-integrated thumbnails, property display,
and the infotip/column handlers for LibreOffice document types, but
LibreOffice itself continues to function normally for opening/editing/
saving files.
ADDITIONAL NOTES:
- Crash is 100% reproducible over time with the extensions enabled and has
not recurred once in 5 days of normal use with them disabled.
- Happy to provide the exact CLSIDs of the affected shell extensions (from
ShellExView) and/or a Windows crash dump if useful for diagnosis — please
advise on the preferred method to capture/generate one for this specific
application (explorer.exe), since it is a system process rather than a
LibreOffice process itself.
Wersja: 26.2.5.2 (X86_64)
Kompilacja: cd7284b4cbbfeb507e630c1aac019f4157393acb
Środowisko: Wątki CPU: 12; System operacyjny: Windows 11 X86_64 (build 26200)
Interfejs użytkownika: Render UI: Skia/Raster; VCL: win
Ustawienia regionalne: pl-PL (pl_PL); UI: pl-PL
Różne: Calc: CL threaded
--
You are receiving this mail because:
You are the assignee for the bug.
