Apache OpenOffice (AOO) Bugzilla – Issue 29731
MS Word Import: Crashing doc file.
Last modified: 2013-08-07 14:42:23 UTC
This file crashes OOo1.1.2rc3, while it opens in MS Word 2002 without a problem.
Created attachment 15601 [details] .
MRU->MM: crash occurs when the progress bar reached around 50%. I couldn't locate any trasonable content in the document. As long as this worked with OO 1.1.1, please have a look if a fix could be possible for OO 1.1.2 this week. Thank you very much!
MD->Henning: As discussed this task to you.
*** Issue 29774 has been marked as a duplicate of this issue. ***
utomo > Kasey: can you please add more info regarding this documents please. what application & version used to write this, do you ever edit the documents with other editors ? if yes also please mentions. and other info which hopefully can help tracking the problems. or do you have any guess what is wrong ? Thanks I can open (both documents) with OOo 1.1.1 without problems too.
kasey->utomo The documents were obtained from public websites. http://www.cc.u-tokai.ac.jp/ewin/shinsei/Attestation.doc http://www.opm.gov/insure/04/brochures/word/73-699.doc I have no idea how they were created. I didn't edit them at all.
Thanks Kasey for the info. So it is from 2 different website and from different country (Japan and US). It maybe did not specific problems of editor as I ask you before. Thanks
due to MMAHER's new evaluation, this issue will be re-targeted to OO 1.1.3. This issue only occurs in a very specific case of "Table in table" with Word documents imported in OO Writer.
mru: what is the status of this issue now? The latest ooo113fix2 build also SIGSEGVs on this document.
That's right, there hasn't been any work on this task until now due to resource limitations. But we will care about this somehow in the next month.
The interesting parts of the stack (from 1.1.2): #5 0x007edbd4 in ReportCrash (Signal=11) at signal.c:581 ret = -512 szShellCmd = "bug-buddy --appname=soffice.bin --pid=3942 --package=OpenOffice.org\000\fÆ\227\000t\001\000\000ì\030u\006À}ïþÃ\030\177\000\bä\227\000ð\226\000\000\bä\227\000ð\030u\006ø\030u\006ÃŒ!\v\bt\001\000\000ì\030u\006à }ïþ\bý\a\b \000\000\000\001\000\000\000\022\000\000\000ÃŒ!\v\bt\001\000\000ì\030u\006Ãß\034\000\000\000\000\000Hvû\001\006\000\000\000\a\000\000\000à öû\001\001\000û\001\a\000\000\000Õz¸U\004v/V\a\000\000\000<~ïþ"... i = -17859648 act = {__sigaction_handler = {sa_handler = 0x67504d0, sa_sigaction = 0x67504d0}, sa_mask = {__val = {134947276, 0, 4277109120, 4277108584, 134741424, 108332248, 134947276, 4277108608, 134741687, 108332248, 4277108600, 134912748, 2283948, 4277108636, 1908238, 108332248, 108335384, 1445950980, 1, 33177712, 4277109164, 1440238001, 4277109120, 4277109088, 4277109120, 33177712, 15696272, 4277109104, 4277108840, 1, 7661224, 10946887}}, sa_flags = -17858440, sa_restorer = 0x1} bCrashReporterExecuted = 0 '\0' argi = 4277108040 argc = 1 ustrCommandArg = (rtl_uString *) 0x6751078 #6 0x007edde0 in SignalHandlerFunction (Signal=11) at signal.c:737 Info = {Signal = osl_Signal_AccessViolation, UserSignal = 11, UserData = 0x0} act = {__sigaction_handler = {sa_handler = 0x1fa4070, sa_sigaction = 0x1fa4070}, sa_mask = {__val = {4277109936, 4277109908, 15697100, 0, 0, 4277109216, 4277109896, 0, 0, 4277109232, 0, 2147483672, 2147483696, 0, 0, 4277109908, 4277109936, 4277109120, 32440320, 134741248, 108331288, 33184036, 0, 0, 108331288, 33184036, 0, 0, 4277108856, 33161216, 33177752, 0}}, sa_flags = -17857348, sa_restorer = 0x1d0003 <InitializeRanges_Impl(unsigned short*&, char*, unsigned short, unsigned short, unsigned short)+183>} #7 <signal handler called> No symbol table info available. #8 wwRedlineStack::closeall (this=0x0, rPos=@0x1fbde7c) at _vector.h:169 No locals. #9 0x55f9ed22 in WW8TabDesc::FinishSwTable (this=0x1faaad8) at pam.hxx:223 aDup = {pCtrlStck = 0x97c60c, aChrSet = { _vptr.SfxItemSet = 0x6751078, _pPool = 0x1fbde7c, _pParent = 0xfeef852c, _aItems = 0x7f8a51, _pWhichRanges = 0x6751078, _nCount = 30212}, aParSet = {_vptr.SfxItemSet = 0xfeef8538, _pPool = 0xfeef8554, _pParent = 0x55fc5a41, _aItems = 0x6751078, _pWhichRanges = 0x6751078, _nCount = 24360}} #10 0x55fa062f in SwWW8ImplReader::StopTable (this=0x1fbde78) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par2.cxx:3131 No locals. #11 0x55f8fad4 in SwWW8ImplReader::ProcessSpecial (this=0x1fbde78, rbReSync=@0xfeef86af, nStartCp=345) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:1610 bTableRowEnd = false nCellLevel = 0 '\0' pTabPos = (WW8_TablePos *) 0x0 aTabPos = {nSp26 = -13755, nSp27 = 22012, nLeMgn = 30212, nRiMgn = 22063, nUpMgn = -31076, nLoMgn = -273, nSp29 = 182 '¶', nSp37 = 219 'Û'} bStartApo = false bStopApo = true pNowStyleApo = (WW8FlyPara *) 0x0 pSprm29 = (const BYTE *) 0x0 bStartTab = false bStopTab = true #12 0x55f90baf in SwWW8ImplReader::ProcessAktCollChange (this=0x1fbde78, rRes=@0xfeef86f4, pStartAttr=0xfeef86f3, bCallProcessSpecial=true) at ww8scan.hxx:903 bReSync = false nOldColl = 0 bTabRowEnd = 249 #13 0x55f90d28 in SwWW8ImplReader::ReadTextAttr (this=0x1fbde78, rTxtPos=@0xfeef877c, rbStartLine=@0xfeef8783) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:2126 nSkipChars = 0 aRes = {nCpPos = 0, nMemLen = 0, nCp2OrIdx = 0, nAktCp = 345, pMemPos = 0x1fabdfc "", nSprmId = 0, nFlags = 1 '\001'} bStartAttr = true nSkipPos = -1 bOldIgnoreText = false nOldColl = 0 bDoPlcxManPlusPLus = true nNext = 33159304 #14 0x55f90ef9 in SwWW8ImplReader::ReadAttrs (this=0x1fbde78, rNext=@0xfeef8778, rTxtPos=@0xfeef877c, rbStartLine=@0xfeef8783) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:2208 No locals. #15 0x55f9130f in SwWW8ImplReader::ReadText (this=0x1fbde78, nStartCp=0, nTextLen=807, nType=0) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:2281 eContext = eMainText bJoined = false bStartLine = false nCrCount = 27 nCpOfs = 0 nNext = 345 l = 345 #16 0x55f950e5 in SwWW8ImplReader::LoadDoc1 (this=0x1fbde78, rPaM=@0x0, pGloss=0x0) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:3044 eNumTA = {SVX_NUM_ARABIC, SVX_NUM_ROMAN_UPPER, SVX_NUM_ROMAN_LOWER, SVX_NUM_CHARS_UPPER_LETTER_N, SVX_NUM_CHARS_LOWER_LETTER_N, SVX_NUM_ARABIC <repeats 11 times>} xTableStream = {pObj = 0x1fbe4f0} xDataStream = {pObj = 0x1fbe5b8} pRefObj = (SvStorageStream * const) 0x1fb4d94 nErrRet = 0 nPageDescOffset = 1 aSttNdIdx = {pNd = 0x7074a1c, pNext = 0x1fb4db0, pPrev = 0x1fa9c98} aRelNumRule = {pNumRuleTbl = 0x1fb5600, bNewDoc = 1 '\001'} eMode = 16 #17 0x55f96824 in SwWW8ImplReader::LoadDoc (this=0x1fbde78, rPaM=@0x1fb4d3c, pGloss=0x0) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:3500 nErrRet = 0 nMagic = 42476 #18 0x55f969c4 in WW8Reader::Read (this=0x7b21910, rDoc=@0x1fb6dc0, rPam=@0x1fb4d3c) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/ww8/ww8par.cxx:3561 nOldBuffSize = 0 refStrm = {pObj = 0x1fb50e8} pIn = (class SvStream *) 0x1fb50e8 nRet = 0 nVersion = 8 '\b' sFltName = {mpData = 0x7a0a288} #19 0x55eaa5f4 in SwReader::Read (this=0x1fb4d10, rOptions=@0x7b21910) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/filter/basflt/shellio.cxx:289 pUndoPam = (class SwPaM *) 0x0 nSttCntnt = 0 pCNd = (class SwCntntNode *) 0x1fb4d3c nEndCntnt = 0 aEndPos = {pNd = 0x7075bcc, pNext = 0xfeef8e08, pPrev = 0x1fb4d94} nError = 1438145694 pPam = (class SwPaM *) 0x1fb4d3c pEnd = (class SwPaM *) 0x1fb4d3c pUndo = (class SwUndoInsDoc *) 0x0 bReadPageDescs = 0 '\0' bDocUndo = 0 '\0' bSaveUndo = 0 '\0' aSplitIdx = {pNd = 0x7074a1c, pNext = 0x1fb4d48, pPrev = 0xfeef8de8} eOld = REDLINE_SHOW_MASK aFlyFrmArr = {<SvPtrarr> = {pData = 0x0, nFree = 0, nA = 0}, <No data fields>} bFmtsOnly = 0 '\0' #20 0x56012484 in SwDocShell::ConvertFrom (this=0x1fb2608, rMedium=@0x1f8c8c0) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sw/source/ui/app/docsh.cxx:475 pRdr = (SwReader *) 0x1fb4d10 pRead = 0x7b21910 aWait = {rDoc = @0x1fb2608, bLock = 1 '\001'} nErr = 33254848 bOk = 1 '\001' #21 0x04e5c679 in SfxObjectShell::DoLoad (this=0x1fb2608, pMed=0x1f8c8c0) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sfx2/source/doc/objstor.cxx:670 aOldURL = {mpData = 0x1facfe8} aBlock = {pPersist = 0x1fb2608, bWasEnabled = 1 '\001'} bOk = 0 '\0' pFilter = (const SfxFilter *) 0xfeef9074 pSet = (class SfxItemSet *) 0xfeef9074 aBaseURL = {mpData = 0x1f99470} pSalvageItem = (const class SfxStringItem *) 0x0 bHasStorage = 0 '\0' #22 0x04df1bb3 in LoadEnvironment_Impl::Load (this=0x1faea80, pFactory=0x1688200) at doctempl.hxx:78 xSave = {pObj = 0x1fb2608} pTop = (class SfxTopFrame *) 0x0 pFilter = (const SfxFilter *) 0x0 #23 0x04df3287 in LoadEnvironment_Impl::LoadDataAvailable (this=0x1faea80) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sfx2/source/appl/loadenv.cxx:1387 pFactory = (const class SfxObjectFactory *) 0x1688200 xSave = {pObj = 0x1faea80} #24 0x04df33ef in LoadEnvironment_Impl::LoadDataAvailable (this=0x1faea80) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sfx2/source/appl/loadenv.cxx:1452 xSave = {pObj = 0x1faea80} #25 0x04df0ec4 in LoadEnvironment_Impl::Start (this=0x1faea80) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sfx2/source/appl/loadenv.cxx:733 No locals. #26 0x04ead3fb in SfxFrameLoader_Impl::load (this=0x1f9bd28, rArgs=@0xfeef9b0c, rFrame=@0xfeef9b2c) at /usr/src/debug/ooo-build-1.1.61pre/build/OOO_1_1_2/sfx2/source/view/frmload.cxx:474 aGuard = {_vptr.OGuard = 0x8082ea8, m_rMutex = @0x94c3154} rURL = {mpData = 0x1fa8120} aTypeName = {mpData = 0x8d0bd80} nPropertyCount = 13 xInteraction = {<com::sun::star::uno::BaseReference> = { _pInterface = 0x1fb1ff4}, <No data fields>} xModel = {<com::sun::star::uno::BaseReference> = { _pInterface = 0x0}, <No data fields>} nProperty = 13 pFilter = (const SfxFilter *) 0x17a1648 rMatcher = (SfxFilterMatcher &) @0x1670500: {pImpl = 0x17b9920} pApp = (class SfxApplication *) 0x78f9900 aSet = {<SfxItemSet> = {_vptr.SfxItemSet = 0x2304c8, _pPool = 0x1586170, _pParent = 0x0, _aItems = 0x1fb1ab8, _pWhichRanges = 0x1f9bdc0, _nCount = 11}, aDefault = {<SfxPoolItem> = { _vptr.SfxPoolItem = 0x230828, nRefCount = 0, nWhich = 0, nKind = 0}, <No data fields>}, nFree = 8} pFrame = (class SfxFrame *) 0x8c60f00 pFactory = (const class SfxObjectFactory *) 0x1688200 aPrefix = {mpData = 0x1f8f4c0} aFact = {mpData = 0x1fa8120} aResSet = {<SfxItemSet> = {_vptr.SfxItemSet = 0x2304c8, _pPool = 0x1586170, _pParent = 0x0, _aItems = 0x1f8c868, _pWhichRanges = 0x1f9bc98, _nCount = 11}, aDefault = {<SfxPoolItem> = { _vptr.SfxPoolItem = 0x230828, nRefCount = 0, nWhich = 0, nKind = 0}, <No data fields>}, nFree = 0} #27 0x096d6fde in framework::BaseDispatcher::implts_loadIt (this=0x1fae458, aURL=@0xfeefa50c, lDescriptor=@0xfeef9b0c, sTypeName=@0xfeef9afc, xTarget=@0xfeef9b2c, aAsyncInfo=@0xfeef9b4c) at Reference.h:334 bState = 0 '\0' aAnalyzer = <incomplete type> xLock = {<com::sun::star::uno::BaseReference> = { _pInterface = 0x179cf6c}, <No data fields>} eType = E_UNKNOWNFRAME xLoader = {<com::sun::star::uno::BaseReference> = { _pInterface = 0x1f9bd28}, <No data fields>} xAsyncLoader = {<com::sun::star::uno::BaseReference> = { _pInterface = 0x0}, <No data fields>} xSyncLoader = {<com::sun::star::uno::BaseReference> = { _pInterface = 0x1f9bd3c}, <No data fields>} aTransaction = {<framework::INonCopyable> = {<No data fields>}, m_pManager = 0x1fae484} bSuccessful = 1 '\001'
Adding cmc
Our target will be to fix this for OOo1.1.4
accepted
hbrinkm->mmaher: This diff ------->8--------------- diff -r1.87.66.4 ww8par2.cxx 2390c2390,2391 < pIo->mpRedlineStack->closeall(*pIo->pPaM->GetPoint()); --- > if (pIo->mpRedlineStack) > pIo->mpRedlineStack->closeall(*pIo->pPaM->GetPoint()); ------->8--------------- fixed the crash since pIo->mpRedlineStack was NULL. Do you think that is enough?
mmaher->hbrinkm: Yes I think that patch will prevent the crash. There are bigger issues around table handling but not related to this bug
fixed
reopen for reassign
ready for QA
SBA: Set to fixed.
SBA: Verified in CWS sw7pp4.
SBA: OK with patch based on 645m51. Closed.