Issue 121134 - Aoo crashes while opening the MS Word document
Summary: Aoo crashes while opening the MS Word document
Alias: None
Product: Writer
Classification: Application
Component: code (show other issues)
Version: 4.0.0-dev
Hardware: All All
: P2 Major (vote)
Target Milestone: 4.0.0
Assignee: AOO issues mailing list
QA Contact:
: 121199 (view as issue list)
Depends on:
Reported: 2012-09-28 03:24 UTC by wujinlong
Modified: 2013-07-11 08:17 UTC (History)
3 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---

Test document (607.72 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document)
2012-09-28 03:24 UTC, wujinlong
no flags Details
Patch (641 bytes, patch)
2012-09-28 06:00 UTC, wujinlong
wujinlong: review?
Details | Diff

Note You need to log in before you can comment on or make changes to this issue.
Description wujinlong 2012-09-28 03:24:05 UTC
Created attachment 79668 [details]
Test document

When opening the test MS Word document (attached), Aoo crashes.
Comment 1 wujinlong 2012-09-28 06:00:21 UTC
Created attachment 79671 [details]

The crash is related with fix for bug 119657. There is a bug in the solution. If revert the fix, Aoo will not crash.

In the test document, there is a special case not covered. The "AbstractNum id 0" has a style link to style "MinDList", which references "Num id 8". At the same time, "AbstractNum id 0" has a complete level definition. 

When processing "num id 1", it finds that the AbstractNum it points to, which is "AbstractNum id 0", has a style linked. Then it will use the style name to find the Num it uses, which is "Num id 8". Since the Num is processed in sequence, "Num id 8" is not processed at that moment. So it will fail to retrieve the AbstractNum "Num id 8" uses, which should be "AbstractNum id 0".

According to the logic of fix for 119657, in such case, the "AbstractNum id 0" would not be created  successfully. In fact, we should create the number rule using the level definitions defined in "AbstractNum id 0", rather than look for the style link. 

The above explains the bug in previous solution, however the reason why the Aoo crashes is not clear. I've tried to attach the soffice process, when Aoo crashes, the Visual Studio can't show any meaningful call stack to determine where Aoo crashes.

But if I add two lines of code to the previous fix, Aoo will not crash. So I suppose the crash is related with unsuccessful creation of Number rule for "AbstractNum id 0".

This new fix is to return the current AbstractNum if can't find a correct AbstractNum through style link, which gos the same path as previous (without the previous fix).

-------------- numbering.xml -------------
<w:abstractNum w:abstractNumId="0">
  <w:nsid w:val="22A540F9"/>
  <w:multiLevelType w:val="multilevel"/>
  <w:tmpl w:val="22AC870E"/>
  <w:styleLink w:val="MinDList"/>
  <w:lvl w:ilvl="0">
<w:num w:numId="1">
  <w:abstractNumId w:val="0"/>
<w:num w:numId="8">
  <w:abstractNumId w:val="0"/>
------- style.xml------
<w:style w:type="numbering" w:customStyle="1" w:styleId="MinDList">
  <w:name w:val="MinD List"/>
  <w:rsid w:val="00E278DA"/>
      <w:numId w:val="8"/>
Comment 2 zhang jianfang 2012-10-25 13:31:27 UTC
Mark as confirmed.
Comment 3 SVN Robot 2012-10-25 13:58:21 UTC
"zhangjf" committed SVN revision 1402153 into trunk:
#i121134#, more fix for i119657, fallback to old logic to use current Abstrac...
Comment 4 zhang jianfang 2012-10-25 14:02:10 UTC
The analysis is clear enough and I think it is acceptable to fallback to old logic when the AbstractNum can not be found.

delivered the code and mark the bug as resolved.
Comment 5 zhang jianfang 2012-10-25 14:05:30 UTC
*** Issue 121199 has been marked as a duplicate of this issue. ***
Comment 6 Li Feng Wang 2012-11-08 07:20:11 UTC
Verified pass on trunk r1404513.
Comment 7 2013-07-11 08:17:18 UTC
Updated target to release that will contain the fix.