Created attachment 86883
proposed patch
Program received signal SIGSEGV, Segmentation fault.
0x00000033834488f6 in rasterize_edges_8 (image=<optimized out>,
image=<optimized out>, image=<optimized out>, b=<optimized out>,
t=<optimized out>, r=<optimized out>, l=<optimized out>)
at pixman-edge.c:210
210 WRITE (image, ap + lxi,
(gdb) bt
#0 0x00007f895bdd38f6 in rasterize_edges_8 (image=<optimized out>,
image=<optimized out>, image=<optimized out>, b=<optimized out>,
t=<optimized out>, r=<optimized out>, l=<optimized out>) at
pixman-edge.c:210
#1 pixman_rasterize_edges_no_accessors (b=<optimized out>, t=<optimized out>,
r=<optimized out>, l=<optimized out>, image=<optimized out>)
at pixman-edge.c:359
#2 pixman_rasterize_edges (image=0xffffffff, image@entry=0x1cc9bc0,
l=0x7fff8dcfd410, r=0x7fff8dcfd440, t=1055852681, b=2147481463)
at pixman-edge.c:382
#3 0x00007f895bdf109e in pixman_rasterize_trapezoid
(image=image@entry=0x1cc9bc0, trap=trap@entry=0x1bf02a8, x_off=129, y_off=0)
at pixman-trap.c:386
#4 0x00007f895aff6623 in uxa_trapezoids (op=<optimized out>, src=0x1cd7b10,
dst=0x1cd5950, maskFormat=0x16a6eb8, xSrc=<optimized out>,
ySrc=<optimized out>, ntrap=<optimized out>, traps=0x1bf02a8) at
uxa-render.c:1816
#5 0x00000000005251bf in ProcRenderTrapezoids (client=0x1be9030) at render.c:759
#6 0x000000000043a137 in Dispatch () at dispatch.c:432
#7 0x00000000004286ca in main (argc=12, argv=0x7fff8dcfd788, envp=<optimized
out>) at main.c:298
(gdb) fram 3
#3 0x00007f895bdf109e in pixman_rasterize_trapezoid
(image=image@entry=0x1cc9bc0, trap=trap@entry=0x1bf02a8, x_off=129, y_off=0)
at pixman-trap.c:386
386 pixman_rasterize_edges (image, &l, &r, t, b);
(gdb) list 359
354 pixman_fixed_t y_off_fixed;
355 pixman_edge_t l, r;
356 pixman_fixed_t t, b;
357
358 return_if_fail (image->type == BITS);
359
360 _pixman_image_validate (image);
361
362 if (!pixman_trapezoid_valid (trap))
363 return;
...
380 if (b >= t)
381 {
382 /* initialize edge walkers */
383 pixman_line_fixed_edge_init (&l, bpp, t, &trap->left, x_off, y_off);
384 pixman_line_fixed_edge_init (&r, bpp, t, &trap->right, x_off, y_off);
385
386 pixman_rasterize_edges (image, &l, &r, t, b);
387 }
388 }
(gdb) p *trap
$8 = {top = 32768, bottom = -2147483648, left = {p1 = {x = -8454144, y =
32768}, p2 = {x = -8454144, y = -2147483648}}, right = {p1 = {
x = -8388608, y = 32768}, p2 = {x = -8388608, y = -2147483648}}}
from pixman.h
1029 /* whether 't' is a well defined not obviously empty trapezoid */
1030 #define pixman_trapezoid_valid(t) \
1031 ((t)->left.p1.y != (t)->left.p2.y && \
1032 (t)->right.p1.y != (t)->right.p2.y && \
1033 (int) ((t)->bottom - (t)->top) > 0) <--- haw haw
1034
An underflow . The proposed patch checks if bottom > 0 (assuming
top/bottom are non-negative integer )
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libreoffice in Ubuntu.
https://bugs.launchpad.net/bugs/1197921
Title:
LibreOffice spreadsheet causes full Xorg crash with Anti-Aliasing
enabled
Status in LibreOffice Productivity Suite:
Confirmed
Status in “libreoffice” package in Ubuntu:
Confirmed
Status in “pixman” package in Ubuntu:
Confirmed
Status in “xorg-server” package in Ubuntu:
Triaged
Bug description:
1) lsb_release -rd
Description: Ubuntu 13.04
Release: 13.04
2) apt-cache policy xserver-xorg-core
xserver-xorg-core:
Installed: 2:1.13.3-0ubuntu6
Candidate: 2:1.13.3-0ubuntu6
Version table:
*** 2:1.13.3-0ubuntu6 0
500 http://archive.ubuntu.com/ubuntu/ raring/main i386 Packages
100 /var/lib/dpkg/status
3) 3) What is expected to happen via a terminal:
cd ~/Desktop && wget
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921/+attachment/3748789/+files/plantage-mai-only-empty.ods
&& localc --nologo plantage-mai-only-empty.ods
is that xorg does not crash.
4) What happens instead is that it crashes. Reproducible on 12.04 and
13.10 and with Libreoffice 3.5, 4.0.2,and 4.1-rc1.
WORKAROUND: Open in Gnumeric.
apt-cache policy gnumeric
gnumeric:
Installed: 1.12.1-1ubuntu1
Candidate: 1.12.1-1ubuntu1
Version table:
*** 1.12.1-1ubuntu1 0
500 http://archive.ubuntu.com/ubuntu/ raring/universe i386 Packages
100 /var/lib/dpkg/status
ProblemType: Crash
DistroRelease: Ubuntu 13.10
Package: xserver-xorg-core 2:1.13.3-0ubuntu13
ProcVersionSignature: Ubuntu 3.2.0-48.74-generic 3.2.46
Uname: Linux 3.2.0-48-generic x86_64
NonfreeKernelModules: ip6table_filter ip6_tables ebtable_nat ebtables
xt_state ipt_REJECT xt_CHECKSUM iptable_mangle xt_tcpudp iptable_filter fglrx
ipt_MASQUERADE iptable_nat kvm_amd nf_nat nf_conntrack_ipv4 kvm nf_conntrack
nf_defrag_ipv4 ip_tables x_tables bridge stp parport_pc ppdev rfcomm bnep
bluetooth binfmt_misc snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_intel
snd_usb_audio snd_hda_codec snd_pcm snd_hwdep snd_usbmidi_lib snd_seq_midi
snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device snd uvcvideo
videodev v4l2_compat_ioctl32 edac_core k10temp soundcore dm_multipath
edac_mce_amd snd_page_alloc mac_hid sp5100_tco serio_raw i2c_piix4 hwmon_vid lp
parport usbhid firewire_ohci hid r8169 pata_atiixp firewire_core crc_itu_t
pata_via
ApportVersion: 2.10.2-0ubuntu3
Architecture: amd64
Date: Thu Jul 4 13:58:20 2013
ExecutablePath: /usr/bin/Xorg
InstallationDate: Installed on 2013-05-05 (59 days ago)
InstallationMedia: Lubuntu 13.04 "Raring Ringtail" - Release amd64
(20130423.1)
MarkForUpload: True
ProcCmdline: /usr/bin/X -core :0 -auth /var/run/lightdm/root/:0 -nolisten tcp
vt7 -novtswitch
ProcEnviron:
SegvAnalysis: Skipped: missing required field "Disassembly"
Signal: 11
SourcePackage: xorg-server
UpgradeStatus: Upgraded to saucy on 2013-05-14 (50 days ago)
UserGroups:
To manage notifications about this bug go to:
https://bugs.launchpad.net/df-libreoffice/+bug/1197921/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
