[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-02-25 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Lubos Lunak  changed:

   What|Removed |Added

 Status|NEW |ASSIGNED
   Assignee|libreoffice-b...@lists.free |l.lu...@collabora.com
   |desktop.org |

--- Comment #12 from Lubos Lunak  ---
https://gerrit.libreoffice.org/#/c/68349/

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-24 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Xisco Faulí  changed:

   What|Removed |Added

   See Also||https://bugs.documentfounda
   ||tion.org/show_bug.cgi?id=12
   ||2821,
   ||https://bugs.documentfounda
   ||tion.org/show_bug.cgi?id=12
   ||1949

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-17 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #11 from Michael Meeks  ---
Interesting; I guess then that it is not a heap corruption - perhaps a stack
one: thanks for the trace ! =)

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-17 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #10 from Julien Nabet  ---
Created attachment 148407
  --> https://bugs.documentfoundation.org/attachment.cgi?id=148407=edit
Valgrind trace with VALGRIND_OPTS=--fair-sched=yes

Here is another Valgrind trace.
I typed this:
export VALGRIND_OPTS=--fair-sched=yes
then
./soffice --norestore --nologo --valgrind /tmp/OT.ods  >& /tmp/valgrind.log

I must recognize I didn't understand this part:
coregrind/m_scheduler/scheduler.c:#define SCHEDULING_QUANTUM   1200 // 10

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-17 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #9 from Michael Meeks  ---
Thanks Julien; as you say - all false positives from glibc internals assuming
knowledge of their own allocator (which is fine).

The DispatchUserEvents thing really looks like memory corruption though:

warn:vcl:11210:11210:vcl/source/app/salusereventlist.cxx:120: Uncaught
St12out_of_range multi_type_vector::position#1570: block position not found!
(logical pos=1048580, block size=4, logical size=1048576)

I would assume that in fact under valgrind we don't get a crash either ;-)
which is annoying - presumably it perterbs threading so the issue doesn't
happen.

What might help is getting another valgrind trace when run with:

--fair-sched=yes

It is also possible that we need to substantially reduce this eg:

coregrind/m_scheduler/scheduler.c:#define SCHEDULING_QUANTUM   1200 // 10

To get a better approximation of fast context switching to catch the race. It
is somewhat odd that this isn't a cmd-line option for valgrind particularly
since there is no performance benefit of it not being configurable; possibly an
easy-hack for valgrind lurks there =)

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-17 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #8 from Julien Nabet  ---
Created attachment 148392
  --> https://bugs.documentfoundation.org/attachment.cgi?id=148392=edit
Valgrind trace

Here's the Valgrind trace but I didn't see anything interesting since there are
only errors concerning dlopen function.
(unless I missed it?)

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-17 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Julien Nabet  changed:

   What|Removed |Added

 CC||serval2...@yahoo.fr

--- Comment #7 from Julien Nabet  ---
Created attachment 148390
  --> https://bugs.documentfoundation.org/attachment.cgi?id=148390=edit
bt with debug symbols

On pc Debian x86-64 with master sources updated yesterday, I reproduced this.
Indeed bt doesn't help but there are some console logs too.

I'll attach Valgrind trace soon.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-16 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #6 from Michael Meeks  ---
Hi Xavier - thanks for that - looks like you were tracing bash =) (?) Can you
try:

soffice --valgrind

which should do this right. Thanks !

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-16 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #5 from Xavier Van Wijmeersch  ---
Created attachment 148356
  --> https://bugs.documentfoundation.org/attachment.cgi?id=148356=edit
valgrind output

I did a valgrind test, maybe it will help

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-15 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Michael Meeks  changed:

   What|Removed |Added

 CC||michael.me...@collabora.com

--- Comment #4 from Michael Meeks  ---
I wonder if we're doing name expansion properly for pre-computing dependencies.
Then again - if we're not - surely we'd get a helpful assertion during
calculation in a dbgutil build (?). Possibly specific to relative named ranges
(which are quite a cute feature ;-). Anyhow - hopefully some useful random
speculation.

I imagine a valgrind trace of a dbgutil / symbols build would get closer to the
memory corruption going on here rather than gdb.

Thanks !

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-11 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Xisco Faulí  changed:

   What|Removed |Added

   See Also|https://bugs.documentfounda |
   |tion.org/show_bug.cgi?id=12 |
   |0479|

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-11 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Xisco Faulí  changed:

   What|Removed |Added

   See Also||https://crashreport.libreof
   ||fice.org/stats/signature/li
   ||bc-2.27.so

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-11 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Xisco Faulí  changed:

   What|Removed |Added

   Keywords||bisected
 CC||xiscofa...@libreoffice.org
   Severity|major   |critical
   Priority|high|highest

--- Comment #3 from Xisco Faulí  ---
I get this error:

multi_type_vector::position#1570: block position not found! ( logical pos=
1048580, block size=4, logical size=1048576)

in

Versión: 6.2.0.1
Id. de compilación: 0412ee99e862f384c1106d0841a950c4cfaa9df1
Subprocs. CPU: 1; SO: Windows 6.1; Repres. IU: predet.; VCL: win; 
Configuración regional: es-ES (es_ES); Idioma de IU: es-ES
Calc: threaded

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-11 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Timur  changed:

   What|Removed |Added

   See Also||https://bugs.documentfounda
   ||tion.org/show_bug.cgi?id=12
   ||0479

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-10 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

raal  changed:

   What|Removed |Added

   Keywords||bibisected, regression
 Status|UNCONFIRMED |NEW
 Ever confirmed|0   |1
 CC||l.lu...@collabora.com,
   ||r...@post.cz
   Priority|medium  |high
   Severity|normal  |major

--- Comment #2 from raal  ---
This seems to have begun at the below commit.
Adding Cc: to Luboš Luňák ; Could you possibly take a look at this one?
Thanks

a79e88101e6ecc177dd9de08f7c5fa0fd4a9843b is the first bad commit
commit a79e88101e6ecc177dd9de08f7c5fa0fd4a9843b
Author: Jenkins Build User 
Date:   Wed Oct 10 13:22:44 2018 +0200

source sha:79449d73900d7a9bf061244d76f5f8eecc441198

author  Luboš Luňák  2018-10-01 14:26:57 +0200
committer   Luboš Luňák  2018-10-10 13:01:59
+0200
commit  79449d73900d7a9bf061244d76f5f8eecc441198 (patch)
treee85f9bc29941cbf5e5ccb858ee4703ae67d00810
parent  b1721b04d8a921a69230927cd7995d8c5d8f5fe2 (diff)
make VLOOKUP in Calc thread-safe

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-10 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

--- Comment #1 from Xavier Van Wijmeersch  ---
I have this gdbtrace, don't know if it will be helpful 

[Detaching after fork from child process 9583]
[New Thread 0x7fffe434d700 (LWP 9586)]
[New Thread 0x7fffe3b4c700 (LWP 9587)]
[Thread 0x7fffe434d700 (LWP 9586) exited]
[New Thread 0x7fffe434d700 (LWP 9598)]
[Thread 0x7fffe434d700 (LWP 9598) exited]
[New Thread 0x7fffe434d700 (LWP 9600)]
[New Thread 0x7fffe1dee700 (LWP 9601)]
[New Thread 0x7fffdf826700 (LWP 9602)]
[New Thread 0x7fffdeec1700 (LWP 9603)]
[Thread 0x7fffdeec1700 (LWP 9603) exited]
[New Thread 0x7fffdeec1700 (LWP 9604)]
[Thread 0x7fffdeec1700 (LWP 9604) exited]
[New Thread 0x7fffdeec1700 (LWP 9605)]
[Thread 0x7fffdeec1700 (LWP 9605) exited]
[New Thread 0x7fffdeec1700 (LWP 9606)]
[Thread 0x7fffdeec1700 (LWP 9606) exited]
[New Thread 0x7fffdeec1700 (LWP 9607)]
[Thread 0x7fffdeec1700 (LWP 9607) exited]
[New Thread 0x7fffdeec1700 (LWP 9608)]
[New Thread 0x7fffde661700 (LWP 9609)]
[Thread 0x7fffdeec1700 (LWP 9608) exited]
[Thread 0x7fffde661700 (LWP 9609) exited]
[Thread 0x7fffdf826700 (LWP 9602) exited]
[New Thread 0x7fffdf826700 (LWP 9610)]
[New Thread 0x7fffde661700 (LWP 9611)]
[Thread 0x7fffde661700 (LWP 9611) exited]
[Thread 0x7fffdf826700 (LWP 9610) exited]
[New Thread 0x7fffdf826700 (LWP 9612)]

Thread 1 "soffice.bin" received signal SIGABRT, Aborted.
0x77ccf75b in raise () from /lib64/libc.so.6
#0  0x77ccf75b in raise () at /lib64/libc.so.6
#1  0x77cb1524 in abort () at /lib64/libc.so.6
#2  0x7426556e in SalUserEventList::DispatchUserEvents(bool)
(this=0x14e4f00, bHandleAllCurrentEvents=) at
/home/libreoffice/vcl/source/app/salusereventlist.cxx:125
#3  0x77ea199d in KDEXLib::processYield(bool, bool)
(this=this@entry=0x537970, bWait=bWait@entry=true,
bHandleAllCurrentEvents=bHandleAllCurrentEvents@entry=false) at
/home/libreoffice/vcl/unx/kde4/KDESalDisplay.hxx:42
#4  0x77ea36cf in KDEXLib::Yield(bool, bool) (this=0x537970,
bWait=, bHandleAllCurrentEvents=) at
/home/libreoffice/vcl/unx/kde4/KDEXLib.cxx:289
#5  0x745c4cf2 in ImplYield(bool, bool) (i_bWait=i_bWait@entry=true,
i_bAllEvents=i_bAllEvents@entry=false) at
/home/libreoffice/vcl/source/app/svapp.cxx:439
#6  0x745c534c in Application::Yield() () at
/home/libreoffice/vcl/source/app/svapp.cxx:503
#7  0x745c6a85 in Application::Execute() () at
/home/libreoffice/vcl/source/app/svapp.cxx:420
#8  0x77ee1de3 in desktop::Desktop::Main() (this=0x7fffdc60) at
/home/libreoffice/desktop/source/app/app.cxx:1637
#9  0x745ccf46 in ImplSVMain() () at
/home/libreoffice/vcl/source/app/svmain.cxx:199
#10 0x77f08cf1 in soffice_main() () at
/home/libreoffice/desktop/source/app/sofficemain.cxx:169
#11 0x0040107b in sal_main () at
/home/libreoffice/desktop/source/app/main.c:48
#12 0x0040107b in main (argc=, argv=) at
/home/libreoffice/desktop/source/app/main.c:47

Thread 17 (Thread 0x7fffdf826700 (LWP 9612)):
#0  0x77c7c567 in pthread_cond_timedwait@@GLIBC_2.3.2 () at
/lib64/libpthread.so.0
#1  0x77fa2718 in osl_waitCondition(oslCondition, TimeValue const*)
(Condition=0x232d540, pTimeout=pTimeout@entry=0x7fffdf825a80) at
/home/libreoffice/sal/osl/unx/conditn.cxx:200
#2  0x7fffe470fe4d in osl::Condition::wait(TimeValue const*)
(this=, pTimeout=0x7fffdf825a80) at
/home/libreoffice/include/osl/conditn.hxx:123
#3  0x7fffe470fe4d in osl::Condition::wait(TimeValue const&) (timeout=...,
this=) at /home/libreoffice/include/osl/conditn.hxx:123
#4  0x7fffe470fe4d in configmgr::Components::WriteThread::execute()
(this=0x232ad00) at /home/libreoffice/configmgr/source/components.cxx:183
#5  0x76cebaa6 in salhelper::Thread::run() (this=0x232ad00) at
/home/libreoffice/salhelper/source/thread.cxx:40
#6  0x76cebc3a in osl::threadFunc(void*) (param=0x232ad10) at
/home/libreoffice/include/osl/thread.hxx:185
#7  0x77fae438 in osl_thread_start_Impl(void*) (pData=0x232af00) at
/home/libreoffice/sal/osl/unx/thread.cxx:235
#8  0x77c7617e in start_thread () at /lib64/libpthread.so.0
#9  0x77da585f in clone () at /lib64/libc.so.6

Thread 6 (Thread 0x7fffe1dee700 (LWP 9601)):
#0  0x77d99aa9 in poll () at /lib64/libc.so.6
#1  0x7fffeb2bdd53 in x11::SelectionManager::dispatchEvent(int)
(this=0x194bb20, millisec=-1) at
/home/libreoffice/vcl/unx/generic/dtrans/X11_selection.cxx:3608
#2  0x7fffeb2bdf9c in x11::SelectionManager::run(void*) (pThis=0x194bb20)
at /home/libreoffice/vcl/unx/generic/dtrans/X11_selection.cxx:3645
#3  0x77fae438 in osl_thread_start_Impl(void*) (pData=0x195e950) at
/home/libreoffice/sal/osl/unx/thread.cxx:235
#4  0x77c7617e in start_thread () at /lib64/libpthread.so.0
#5  0x77da585f in clone () at /lib64/libc.so.6

Thread 5 (Thread 0x7fffe434d700 (LWP 9600)):
#0  0x77d99aa9 in poll () at /lib64/libc.so.6
#1  0x7fffeb2a1429 

[Libreoffice-bugs] [Bug 122643] Crash in: libc-2.27.so after setting Named Ranges to e.g. F:F (non-absolute columns)

2019-01-10 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=122643

Jim Avera  changed:

   What|Removed |Added

Summary|Crash in: libc-2.27.so  |Crash in: libc-2.27.so
   ||after setting Named Ranges
   ||to e.g. F:F (non-absolute
   ||columns)

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs