https://bugs.documentfoundation.org/show_bug.cgi?id=97862

            Bug ID: 97862
           Summary: With an ODT and DOC open, copy from ODT causes
                    SIGSEGV.
           Product: LibreOffice
           Version: 5.0.4.2 release
          Hardware: x86-64 (AMD64)
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Writer
          Assignee: libreoffice-bugs@lists.freedesktop.org
          Reporter: matti.aar...@zmailer.org

(Critical as "crashes every time I am working on certain pair of documents.")

I have a .DOC and .ODT open in two separate windows.
I am preparing for copying of text from .ODT to .DOC, and after a region select
in ODT pressing COPY (Control-C) results in SIGSEGV.  (The region spans several
Headings, and body matter including a few tables.)

In rerun for debugger, the DOC document window was hidden entirely behind a
browser, and copying did not cause problems, but when I clicked at KDE bar of
active program objects to bring it forward, SIGSEGV happened again.

It won't crash if I start copy from heading + follow it with content matter,
but if I span over a heading with content matter before and after it, an
immediate crash.

Also, the system is less prone to crash if I export .ODT as .DOC, and restart
the edit session with two .DOCs.


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ff0cffff700 (LWP 10024)]
sw::mark::MarkManager::renameMark (this=this@entry=0x7ff0c800f620,
io_pMark=io_pMark@entry=0x0, rNewName=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/docbm.cxx:549
549             if ( io_pMark->GetName() == rNewName )
(gdb) print io_pMark 
$1 = (sw::mark::IMark *) 0x0
(gdb) where
#0  sw::mark::MarkManager::renameMark (this=this@entry=0x7ff0c800f620,
io_pMark=io_pMark@entry=0x0, rNewName=...)
    at /usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/docbm.cxx:549
#1  0x00007ff0c4bdf18c in (anonymous namespace)::lcl_CopyBookmarks (rPam=...,
rCpyPam=...)
    at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:248
#2  0x00007ff0c4be547b in
sw::DocumentContentOperationsManager::CopyWithFlyInFly
(this=this@entry=0x561fa1ba4f40, rRg=..., 
    nEndContentIndex=0, rInsPos=...,
pCopiedPaM=pCopiedPaM@entry=0x7ff0cfffdb20,
bMakeNewFrms=bMakeNewFrms@entry=true, 
    bDelRedlines=false, bCopyFlyAtFly=false)
    at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:3199
#3  0x00007ff0c4be6166 in sw::DocumentContentOperationsManager::CopyImpl
(this=this@entry=0x561fa1ba4f40, rPam=..., rPos=..., 
    bMakeNewFrms=bMakeNewFrms@entry=true, bCopyAll=bCopyAll@entry=false,
pCpyRange=pCpyRange@entry=0x0)
    at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:4429
#4  0x00007ff0c4be7c8c in sw::DocumentContentOperationsManager::CopyRange
(this=0x561fa1ba4f40, rPam=..., rPos=..., 
    bCopyAll=<optimized out>, bCheckPos=<optimized out>)
    at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/core/doc/DocumentContentOperationsManager.cxx:1629
#5  0x00007ff0c4caecb2 in SwEditShell::_CopySelToDoc
(this=this@entry=0x561fa544f5c0, pInsDoc=pInsDoc@entry=0x7ff0c800c340, 
    pSttNd=pSttNd@entry=0x0) at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/core/edit/edglss.cxx:243
#6  0x00007ff0c4cfbeac in SwFEShell::Copy (this=0x561fa544f5c0,
pClpDoc=pClpDoc@entry=0x7ff0c800c340, 
    pNewClpText=pNewClpText@entry=0x0) at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/core/frmedt/fecopy.cxx:219
#7  0x00007ff0c51e9875 in (anonymous namespace)::lclOverWriteDoc
(rSrcWrtShell=..., rDest=...)
    at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/uibase/dochdl/swdtflvr.cxx:381
#8  0x00007ff0c51ed48a in SwTransferable::GetData (this=0x7ff0b62c1c68,
rFlavor=..., rDestDoc=...)
    at
/usr/src/debug/libreoffice-5.0.4.2/sw/source/uibase/dochdl/swdtflvr.cxx:449
#9  0x00007ff0fdd33be5 in TransferableHelper::getTransferData2
(this=this@entry=0x7ff0b62c1c68, rFlavor=..., rDestDoc=...)
    at /usr/src/debug/libreoffice-5.0.4.2/svtools/source/misc/transfer.cxx:331
#10 0x00007ff0fdd2b02b in TransferableHelper::getTransferData
(this=0x7ff0b62c1c68, rFlavor=...)
    at /usr/src/debug/libreoffice-5.0.4.2/svtools/source/misc/transfer.cxx:305
#11 0x00007ff0e16f5b5b in x11::SelectionManager::convertData
(this=this@entry=0x7ff0cc12e008, xTransferable=..., 
    nType=nType@entry=399, nSelection=nSelection@entry=1,
rFormat=@0x7ff0cfffe78c: 8, rData=...)
    at
/usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:656
#12 0x00007ff0e16f8b89 in x11::SelectionManager::sendData
(this=this@entry=0x7ff0cc12e008, pAdaptor=pAdaptor@entry=0x7ff0a1f32200, 
    requestor=39845967, target=399, property=340, selection=1)
    at
/usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:1504
#13 0x00007ff0e16f94bb in x11::SelectionManager::handleSelectionRequest
(this=this@entry=0x7ff0cc12e008, rRequest=...)
    at
/usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:1730
#14 0x00007ff0e16fa24b in x11::SelectionManager::handleXEvent
(this=this@entry=0x7ff0cc12e008, rEvent=...)
    at
/usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:3567
#15 0x00007ff0e16fcfbd in x11::SelectionManager::dispatchEvent
(this=this@entry=0x7ff0cc12e008, millisec=millisec@entry=-1)
    at
/usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:3644
#16 0x00007ff0e16fd2fd in x11::SelectionManager::run (pThis=0x7ff0cc12e008)
    at
/usr/src/debug/libreoffice-5.0.4.2/vcl/unx/generic/dtrans/X11_selection.cxx:3672
#17 0x00007ff101c26d57 in osl_thread_start_Impl (pData=0x561fa1a2a2d0)
    at /usr/src/debug/libreoffice-5.0.4.2/sal/osl/unx/thread.cxx:240
#18 0x00007ff10138e60a in start_thread (arg=0x7ff0cffff700) at
pthread_create.c:334
#19 0x00007ff1016a6a4d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:109
(gdb)

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to