Apache OpenOffice (AOO) Bugzilla – Issue 29168
Doc file crashes OOo
Last modified: 2013-08-07 14:44:24 UTC
Hi all, please find attached a doc file that crashes OOo on opening in different ways on different plateform - Linux MDK9.2 : starts to open crash + report - Debian : immediate crash - Win NT : freezes OOo (ctrl+alt+sup not accessible anymore) - Win98SE : the file is openned laurent
Created attachment 15251 [details] the doc file that crashes OOo
Hi, I have tested the file under XP : - opening it with OOo 1.1.0 --> everything is ok, - opening it whit OOo 1.1.1, it hangs a while then a crash report is generated Kind regards - Sophie
don't know if it helps a user reported it was ok using kword and abiword Laurent
On WinXP I also didn't have a problem opening the file with OO 1.1.1. Will chack this on Linux a little later...
crashes on linux with both OOo 1.1.1 (you can see the first page before OOo crashes) and 680m36 (crashes before document can be seen)
I was only able to see the crash on Linux. It didn't crash in Writer module, so I'll have a further look to the contents of the file with WW.
MRU->SJ: There are WordArt objects in the document, I think the crash has been triggered by these.
SJ->AW: The WordArt in the bugdoc should have a bitmap filling, but due to minor errors in the import the graphic isn't loaded properly. This empty graphic leads to a division by zero error in the method ModifyColor(see stack traces below). Linux Stacktrace /local/work/sj/pdf01/program/libsal.so.3(osl_releaseVolumeDeviceHandle+0x139c)[0x40e7ca44] /local/work/sj/pdf01/program/libsal.so.3(osl_releaseVolumeDeviceHandle+0x1526)[0x40e7cbce] /local/work/sj/pdf01/program/libsal.so.3(osl_releaseVolumeDeviceHandle+0x15ec)[0x40e7cc94] /lib/libpthread.so.0(pthread_kill+0x16d)[0x4113689d] /lib/libc.so.6(__libc_sigaction+0x138)[0x412c1b58] /local/work/sj/pdf01/program/libgo680li.so(_ZN13Base3DDefault15DrawLineTextureElR5Color+0x2c6)[0x43705c72] /local/work/sj/pdf01/program/libgo680li.so(_ZN13Base3DDefault17Clipped3DTriangleEmmm+0x21f7)[0x43704047] /local/work/sj/pdf01/program/libgo680li.so(_ZN12Base3DCommon16Create3DTriangleEmmm+0x778)[0x437121c2] /local/work/sj/pdf01/program/libgo680li.so(_ZN12Base3DCommon17ImplPostAddVertexER9B3dEntity+0x483)[0x43710c73] /local/work/sj/pdf01/program/libgo680li.so(_ZN6Base3D19DrawPolygonGeometryER11B3dGeometryh+0x18e)[0x436fab58] /local/work/sj/pdf01/program/libsvx680li.so(_ZN17E3dCompoundObject7Paint3DER15ExtOutputDeviceP6Base3DRK15SdrPaintInfoRect+0x248)[0x45dff5c8] /local/work/sj/pdf01/program/libsvx680li.so(_ZN9E3dObject7Paint3DER15ExtOutputDeviceP6Base3DRK15SdrPaintInfoRect+0xdd)[0x45df3d2f] /local/work/sj/pdf01/program/libsvx680li.so(_ZN12E3dPolyScene7Paint3DER15ExtOutputDeviceP6Base3DRK15SdrPaintInfoRect+0xe3)[0x45e0cae7] /local/work/sj/pdf01/program/libsvx680li.so(_ZN12E3dPolyScene17DrawPolySceneClipER15ExtOutputDevicePK9E3dObjectP6Base3DRK15SdrPaintInfoRec+0x319)[0x45e0c9c1] /local/work/sj/pdf01/program/libsvx680li.so(_ZN12E3dPolyScene12LocalPaint3DER15ExtOutputDeviceRK15SdrPaintInfoRec+0x475)[0x45e0c4cd] /local/work/sj/pdf01/program/libsvx680li.so(_ZNK12E3dPolyScene13DoPaintObjectER15ExtOutputDeviceRK15SdrPaintInfoRec+0x58)[0x45e0c042] /local/work/sj/pdf01/program/libsvx680li.so(_ZNK9SdrObject21DoPaintObject_WrapperER15ExtOutputDeviceRK15SdrPaintInfoRec+0x65)[0x45b8be6b] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact21ViewContactOfE3dScene11PaintObjectERNS0_11DisplayInfoER9RectangleRKNS0_17ViewObjectContactE+0xd1)[0x45b7ccd1] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact17ViewObjectContact11PaintObjectERNS0_11DisplayInfoE+0xa2)[0x45b80750] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact17ViewObjectContact20PaintObjectHierarchyERNS0_11DisplayInfoE+0x92)[0x45b808da] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact17ViewObjectContact18PaintDrawHierarchyERNS0_11DisplayInfoE+0x66)[0x45b8081a] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact17ViewObjectContact20PaintObjectHierarchyERNS0_11DisplayInfoE+0x9e)[0x45b808e6] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact23ObjectContactOfPageView16DoProcessDisplayERNS0_11DisplayInfoE+0x18c)[0x45b7fede] /local/work/sj/pdf01/program/libsvx680li.so(_ZN3sdr7contact23ObjectContactOfPageView14ProcessDisplayERNS0_11DisplayInfoE+0x1bf)[0x45b7fcaf] /local/work/sj/pdf01/program/libsvx680li.so(_ZNK17SdrPageViewWindow6RedrawERK6RegiontPK4LinkPKh+0x362)[0x45c75772] /local/work/sj/pdf01/program/libsvx680li.so(_ZNK11SdrPageView10InitRedrawEhRK9RectangleP12OutputDevicet+0x7f)[0x45c77c87] Windows Stacktrace: go680mi.dll!B3dTexture::ModifyColor(Color & rCol={...}, double fS=-1.#IND000000000000, double fT=-1.#IND000000000000) Line 502 C++ > go680mi.dll!Base3DDefault::DrawLineTexture(long nYPos=0x00000012, Color & rCol={...}) Line 1807 C++ go680mi.dll!Base3DDefault::Clipped3DTriangle(unsigned long nInd1=0x00000012, unsigned long nInd2=0x0b0039f0, unsigned long nInd3=0x00000000) Line 1384 C++ go680mi.dll!Base3DCommon::Create3DTriangle(unsigned long nInd1=0x0b018d60, unsigned long nInd2=0x00000001, unsigned long nInd3=0x0b018d5c) Line 806 C++ go680mi.dll!Base3DCommon::ImplPostAddVertex(B3dEntity & rEntity={...}) Line 332 C++ go680mi.dll!Base3D::DrawPolygonGeometry(B3dGeometry & rGeometry={...}, unsigned char bOutline=0) Line 650 + 0x8 C++ dl680mi.dll!E3dCompoundObject::Paint3D(ExtOutputDevice & rOut={...}, Base3D * pBase3D=0x01002800, const SdrPaintInfoRec & rInfoRec={...}, unsigned short nDrawFlags=0x0003) Line 4531 C++ dl680mi.dll!E3dObject::Paint3D(ExtOutputDevice & rOut={...}, Base3D * pBase3D=0x0b0028b0, const SdrPaintInfoRec & rInfoRec={...}, unsigned short nDrawFlags=0x0003) Line 783 + 0x17 C++
AW: Inside E3dCompoundObject::ImpSet3DParForFill, the texture is extracted as fill attribute from the ItemSet. The received Bitmap may still be empty (see bug), so the fix needs his own if, it is not enough to use the else-tree. AW: Changed, works. Maybe SJ needs to fix the missing bitmap, too.
AW->WG: Please verify.
.
Set to fixed.
Verified in CWS.
Tested in master src680m47. Closed.
Closed.