https://bugs.freedesktop.org/show_bug.cgi?id=54486

             Bug #: 54486
           Summary: debug build crashy (failed assertion) when typing
                    text; locale-specific to fr_LU?
    Classification: Unclassified
           Product: LibreOffice
           Version: 3.6.1.2 release
          Platform: x86-64 (AMD64)
        OS/Version: Linux (All)
            Status: UNCONFIRMED
          Severity: critical
          Priority: high
         Component: Writer
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Created attachment 66601
  --> https://bugs.freedesktop.org/attachment.cgi?id=66601
backtrace

Just got several aborts on failed assertion in a row typing text using bullet
lists in Writer (in an ODT file, not a .doc file), whose language is fr_LU. It
seems to happen most often a bit like this:

1) type some text in a bullet point
2) do not save
3) type enter --> crash
4) if not crashed yet, type a few characters (especially a mix of letters and
numbers: something like 12345XX, then a space) ---> crash

I attach the backtrace of one of these crashes, and here is some more info


(gdb) up 17
#17 0x00007fe016e28e4b in rtl::OUString::copy (this=this@entry=0x7fff094ad240,
beginIndex=beginIndex@entry=5)
    at
/home/master/src/libreoffice/workdirs/libreoffice-3.6/solver/unxlngx6/inc/rtl/ustring.hxx:1293
1293            assert(beginIndex >= 0 && beginIndex <= getLength());
(gdb) print beginIndex
$1 = 5

(gdb) print this->pData->length
$3 = 4

(gdb) up
#18 0x00007fe016e2b307 in com::sun::star::i18n::OrdinalSuffix::getOrdinalSuffix
(this=0x31a43b0, nNumber=42221, aLocale=...)
    at
/home/master/src/libreoffice/workdirs/libreoffice-3.6/i18npool/source/ordinalsuffix/ordinalsuffix.cxx:102
102                        retValue[ newLength - 1 ] = sValue.copy( len );
(gdb) print aLocale
$4 = (const com::sun::star::lang::Locale &) @0x20d7a60: {
  Language = "fr", 
  Country = "LU", 
  Variant = ""
}

(gdb) print sValue
$5 = "NaNe"
(gdb) print newLength
$6 = 1
(gdb) print len
$7 = 5
(gdb) print normalized
This sends GDB in a infinite (or very long) memory-consuming loop

>From *another* crash (same backtrace, same failed abort, same sValue, same len,
same newLength):


(gdb) print nCode 
$3 = U_ZERO_ERROR
(gdb) print i
$4 = 0
(gdb) print ruleSet
again infinite loop

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to