This bug affects me too.  I'm unable to attach the document or Apport
log for this crash since my document contains private data, but a stack
trace can be found below.  The bug is due to invoking
rtl_str_getLength() on a NULL value.

Version is:
LibreOffice 3.3.2 
OOO330m19 (Build:202)
tag libreoffice-3.3.2.2, Ubuntu package 1:3.3.2-1ubuntu5

Program received signal SIGSEGV, Segmentation fault.
0x00007ffc1dea3ec2 in rtl_str_getLength ()
   from /usr/lib/libreoffice/program/../basis-link/ure-link/lib/libuno_sal.so.3
(gdb) bt
#0  0x00007ffc1dea3ec2 in rtl_str_getLength ()
   from /usr/lib/libreoffice/program/../basis-link/ure-link/lib/libuno_sal.so.3
#1  0x00007ffbf72c69e9 in oox::drawingml::DrawingML::WriteImage(Graphic const&) 
()
   from /usr/lib/libreoffice/program/../basis-link/program/libooxlx.so
#2  0x00007ffbf4e8bc9c in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#3  0x00007ffbf4e8d130 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#4  0x00007ffbf4e9a2ce in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#5  0x00007ffbf4ea0372 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#6  0x00007ffbf4e60844 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#7  0x00007ffbf4e614f7 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#8  0x00007ffbf4e748c6 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#9  0x00007ffbf4e9513f in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#10 0x00007ffbf4e95235 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#11 0x00007ffbf4e79457 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#12 0x00007ffbf4e90bc0 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libmswordlx.so
#13 0x00007ffbf70a9b64 in 
oox::core::FilterBase::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>
 const&) () from /usr/lib/libreoffice/program/../basis-link/program/libooxlx.so
#14 0x00007ffbf7b3c7c0 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libwriterfilterlx.so
#15 0x00007ffc1bb5b3c8 in SfxObjectShell::ExportTo(SfxMedium&) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#16 0x00007ffc1bb6253f in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#17 0x00007ffc1bb67508 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#18 0x00007ffc1bb67abb in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#19 0x00007ffc1bbb6479 in 
SfxBaseModel::storeSelf(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue>
 const&) () from /usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#20 0x00007ffc1bbd017c in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#21 0x00007ffc1bb70e56 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#22 0x00007ffc1bc5912c in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#23 0x00007ffc1bc51699 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#24 0x00007ffc1bc54c23 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#25 0x00007ffc1bc54b15 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#26 0x00007ffc1bc7e3ba in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsfxlx.so
#27 0x00007ffc19dcf068 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libvcllx.so
#28 0x00007ffc12bbb179 in SalDisplay::DispatchInternalEvent() ()
   from /usr/lib/libreoffice/basis3.3/program/libvclplug_genlx.so
#29 0x00007ffc14705ec0 in ?? () from 
/usr/lib/libreoffice/basis3.3/program/libvclplug_gtklx.so
#30 0x00007ffc12e41bcd in g_main_context_dispatch () from 
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#31 0x00007ffc12e423a8 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#32 0x00007ffc12e42639 in g_main_context_iteration () from 
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#33 0x00007ffc14703ba5 in ?? () from 
/usr/lib/libreoffice/basis3.3/program/libvclplug_gtklx.so
#34 0x00007ffc19bd9371 in Application::Yield(bool) ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvcllx.so
#35 0x00007ffc19bd9427 in Application::Execute() ()
   from /usr/lib/libreoffice/program/../basis-link/program/libvcllx.so
#36 0x00007ffc1dc14b2e in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#37 0x00007ffc19bdfa41 in ?? () from 
/usr/lib/libreoffice/program/../basis-link/program/libvcllx.so
#38 0x00007ffc19bdfad5 in SVMain() () from 
/usr/lib/libreoffice/program/../basis-link/program/libvcllx.so
#39 0x00007ffc1dc3a28e in soffice_main ()
   from /usr/lib/libreoffice/program/../basis-link/program/libsofficeapp.so
#40 0x0000000000400ecb in main ()
(gdb) x/10i $rip
=> 0x7ffc1dea3ec2 <rtl_str_getLength+2>:        cmp    BYTE PTR [rdi],0x0
   0x7ffc1dea3ec5 <rtl_str_getLength+5>:        je     0x7ffc1dea3edb 
<rtl_str_getLength+27>
   0x7ffc1dea3ec7 <rtl_str_getLength+7>:        mov    rax,rdi
   0x7ffc1dea3eca <rtl_str_getLength+10>:       nop    WORD PTR [rax+rax*1+0x0]
   0x7ffc1dea3ed0 <rtl_str_getLength+16>:       add    rax,0x1
   0x7ffc1dea3ed4 <rtl_str_getLength+20>:       cmp    BYTE PTR [rax],0x0
   0x7ffc1dea3ed7 <rtl_str_getLength+23>:       jne    0x7ffc1dea3ed0 
<rtl_str_getLength+16>
   0x7ffc1dea3ed9 <rtl_str_getLength+25>:       sub    eax,edi
   0x7ffc1dea3edb <rtl_str_getLength+27>:       repz ret 
   0x7ffc1dea3edd:      nop    DWORD PTR [rax]
(gdb) i r
rax            0x0      0
rbx            0x4acd0f0        78434544
rcx            0x2      2
rdx            0x2      2
rsi            0x0      0
rdi            0x0      0
rbp            0x7fffb63d77d0   0x7fffb63d77d0
rsp            0x7fffb63d74d8   0x7fffb63d74d8
r8             0x1      1
r9             0x69002f00610069 29555074424438889
r10            0x6500670061006d 28429415035764845
r11            0x0      0
r12            0x1      1
r13            0x0      0
r14            0x7ffbf789edb8   140720166530488
r15            0x7ffbf72fac91   140720160615569
rip            0x7ffc1dea3ec2   0x7ffc1dea3ec2 <rtl_str_getLength+2>
eflags         0x10246  [ PF ZF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/817298

Title:
  LibreOffice crashes trying to save a document as Microsoft Word

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/817298/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to