Launchpad has imported 6 comments from the remote bug at https://bugs.freedesktop.org/show_bug.cgi?id=46728.
If you reply to an imported comment from within Launchpad, your comment will be sent to the remote bug automatically. Read more about Launchpad's inter-bugtracker facilities at https://help.launchpad.net/InterBugTracking. ------------------------------------------------------------------------ On 2012-02-28T15:40:41+00:00 Quantenemitter-w wrote: 1) lsb_release -rd Description: Ubuntu precise (development branch) Release: 12.04 2) apt-cache policy libreoffice-writer libreoffice-writer: Installed: 1:3.5.0-1ubuntu4 Candidate: 1:3.5.0-1ubuntu4 Version table: *** 1:3.5.0-1ubuntu4 0 500 http://us.archive.ubuntu.com/ubuntu/ precise/main i386 Packages 100 /var/lib/dpkg/status [Comment: Build-ID: 350m1(Build:13)] 3) What is expected to happen in a blank Writer document with View -> Toolbars -> Drawing checked is click Text icon, and create a Text box in the top right of the page (beteen the header and the body) and it does not crash. 4) What happens is it crashes consistently. A video of this may be found at: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/941033/+attachment/2788200/+files /libreoffice-crash.ogv ProblemType: Crash DistroRelease: Ubuntu 12.04 Package: libreoffice-core 1:3.5.0-1ubuntu4 ProcVersionSignature: Ubuntu 3.2.0-17.27-generic 3.2.6 Uname: Linux 3.2.0-17-generic i686 ApportVersion: 1.93-0ubuntu2 Architecture: i386 CrashCounter: 1 Date: Sat Feb 25 14:38:00 2012 EcryptfsInUse: Yes ExecutablePath: /usr/lib/libreoffice/program/soffice.bin ExecutableTimestamp: 1330135917 InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1) LocalLibraries: /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/libdle.so.1 /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/libsx.so /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/dudenkorrektor.uno.so /home/thomas/.config/libreoffice/3/user/uno_packages/cache/uno_packages/lumrsyro.tmp_/DRO.oxt/libdpf.so.2 ProcCmdline: /usr/lib/libreoffice/program/soffice.bin --writer /home/thomas/Schule/0_Mathe/M6/6.3_Flaechen-_und_Rauminhalt/6.3.2_Volumen/Arbeitsblaetter/AB_Einheitenvergleich.odt --splash-pipe=6 ProcCwd: /home/thomas SegvAnalysis: Segfault happened at: 0x1dae324 <_ZNK6Window9GetCursorEv+4>: mov 0xf4(%eax),%eax PC (0x01dae324) ok source "0xf4(%eax)" (0x408500f4) not located in a known VMA region (needed readable region)! destination "%eax" ok SegvReason: reading unknown VMA Signal: 11 SourcePackage: libreoffice StacktraceTop: Window::GetCursor() const () from /usr/lib/libreoffice/program/libvcllo.so ?? () from /usr/lib/libreoffice/program/../program/libsvxcorelo.so Timer::Timeout() () from /usr/lib/libreoffice/program/libvcllo.so Timer::ImplTimerCallbackProc() () from /usr/lib/libreoffice/program/libvcllo.so ?? () from /usr/lib/libreoffice/program/libvclplug_gtklo.so Title: soffice.bin crashed with SIGSEGV in Window::GetCursor() UpgradeStatus: Upgraded to precise on 2012-02-23 (2 days ago) UserGroups: adm admin audio cdrom dialout dip fax floppy fuse lp lpadmin netdev plugdev powerdev sambashare tape vboxusers video Reply at: https://bugs.launchpad.net/df- libreoffice/+bug/941033/comments/8 ------------------------------------------------------------------------ On 2012-02-28T15:43:29+00:00 Quantenemitter-w wrote: Also see: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/941033/ Reply at: https://bugs.launchpad.net/df- libreoffice/+bug/941033/comments/9 ------------------------------------------------------------------------ On 2012-03-08T18:49:19+00:00 Dezsiszabi wrote: Created attachment 58205 Possible fix Hi! This seems to solve it, or maybe it's just less frequent... Anyway, it is a step closer to the final solution. made changes in svx/source/sdr/overlay/overlaymanagerbuffered.cxx in IMPL_LINK(OverlayManagerBuffered, ImpBufferTimerHandler, AutoTimer*, /*pTimer*/) Szabolcs Reply at: https://bugs.launchpad.net/df- libreoffice/+bug/941033/comments/11 ------------------------------------------------------------------------ On 2012-03-09T16:38:52+00:00 Caolanm wrote: Created attachment 58243 valgrind log adding a valgrind log to show that the this of the handler is deleted before the end of the method Reply at: https://bugs.launchpad.net/df- libreoffice/+bug/941033/comments/12 ------------------------------------------------------------------------ On 2012-03-13T15:17:43+00:00 Libreoffice-bugs wrote: Caolan McNamara committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=131e5d35a4edb9f8875a197e8e0382c168834f70 Resolves: fdo#46728 reference count the overlay managers Reply at: https://bugs.launchpad.net/df- libreoffice/+bug/941033/comments/13 ------------------------------------------------------------------------ On 2012-03-13T16:04:49+00:00 Libreoffice-bugs wrote: Caolan McNamara committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=badbf0c9259a6ff3928958332532c5a9ed8c5774 Related: fdo#46728 it would help to initialize the reference count I suppose Reply at: https://bugs.launchpad.net/df- libreoffice/+bug/941033/comments/14 ** Changed in: df-libreoffice Status: Unknown => Fix Released ** Changed in: df-libreoffice Importance: Unknown => Critical -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/941033 Title: [Upstream] soffice.bin crashed with SIGSEGV in Window::GetCursor() To manage notifications about this bug go to: https://bugs.launchpad.net/df-libreoffice/+bug/941033/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
