Issue 60390 - WW8: crash exporting document with "hidden" table row
Summary: WW8: crash exporting document with "hidden" table row
Alias: None
Product: Writer
Classification: Application
Component: save-export (show other issues)
Version: OOo 2.0.1
Hardware: PC All
: P2 Trivial with 1 vote (vote)
Target Milestone: ---
Assignee: michael.ruess
QA Contact: issues@sw
Keywords: crash, oooqa
: 65793 75149 (view as issue list)
Depends on:
Reported: 2006-01-12 00:42 UTC by vonkad
Modified: 2013-08-07 14:42 UTC (History)
4 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---

the file that generates the segfault (124.50 KB, application/msword)
2006-01-12 00:43 UTC, vonkad
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description vonkad 2006-01-12 00:42:01 UTC
OO Writer 2.0.1 crashes when you open the attached M$ Word document,
add something and try to save it as M$ .doc. Saves ok when saving as 
I use the Czech version of OO 2.0.1 downloaded from
Comment 1 vonkad 2006-01-12 00:43:20 UTC
Created attachment 33123 [details]
the file that generates the segfault
Comment 2 michael.ruess 2006-01-12 14:46:19 UTC
MRU->FLR: happens only on Linux. Open attached document ans save as .doc. Will
crash Writer. 
Document contains an OLE object, maybe problem is there...
Comment 3 michael.ruess 2006-01-12 14:53:47 UTC
Corrected target.
Comment 4 Mathias_Bauer 2006-03-09 15:16:08 UTC
I don't think that this problem is related to OLE, it's more a table problem:

	sw680mi.dll!OutWW8_SwTblNode(Writer & rWrt={...}, SwTableNode & rNode={...}) 
Line 2336 + 0xd	C++
 	sw680mi.dll!SwWW8Writer::WriteText()  Line 1880 + 0x10	C++
 	sw680mi.dll!SwWW8Writer::WriteMainText()  Line 1931	C++
 	sw680mi.dll!SwWW8Writer::StoreDoc1()  Line 2082	C++
 	sw680mi.dll!SwWW8Writer::StoreDoc()  Line 2399	C++
 	sw680mi.dll!SwWW8Writer::WriteStorage()  Line 2544 + 0x8	C++
 	sw680mi.dll!StgWriter::Write()  + 0x8c	C++
 	sw680mi.dll!Writer::Write()  + 0x50	C++
 	sw680mi.dll!Writer::Write()  + 0x1d	C++
 	sw680mi.dll!SwWriter::Write()  + 0x345	C++
 	sw680mi.dll!SwDocShell::ConvertTo(SfxMedium & rMedium={...})  Line 905

The code that crashes:

for( nBox = 0, nRealBox = 0; nRealBox < nWWColMax; ++nBox)
                if( nBox && pBoxArr[ nBox-1 ] == pBoxArr[ nBox ] )
                const SwFrmFmt& rFmt = *pBoxArr[ nBox ]->GetBox()->GetFrmFmt(); 

because pBoxArr[ nBox ] is NULL (this is true for 5 of the 4 boxes in the
array!). There are several other places in the code that have the same problem.
Comment 5 pavel 2006-05-23 07:11:43 UTC
mba: so who should fix this?

Add "crash" keyword, retarget.
Comment 6 Mathias_Bauer 2006-07-10 11:59:59 UTC
I take this over for the moment
Comment 7 Mathias_Bauer 2006-07-11 13:47:39 UTC
Frank, please have a look. The Word export code seems to have some problems with
the table. I get a lot of assertions in a NonPro build before Writer crashes.
Comment 8 frank.meies 2006-07-14 09:28:51 UTC
FME: Crashes also on Win32, but only in read-only mode. The first table has two
rows which have only hidden content. In read-only mode, the hidden content is
not shown, resulting in a line height of 0, which lets the ww8 filter choke.
Comment 9 frank.meies 2006-07-14 10:37:31 UTC
FME: Changed summary.

FME: Workaround: Enable "View - Nonprinting characters" before exporting to *.doc.

FME: Proposed fix is to change lcl_CalcMinCellHeight in a way that is returns at
least 1. For safety reasons, I suggest to set the target to 2.x and commit the
fix immediately after 2.0.4 has been released.
Comment 10 Rainer Bielefeld 2006-07-24 06:45:12 UTC
I checked with "2.0.2  German version WIN XP: [680m5(Build9011)]", OOo crashed
when I tried to save final_report.doc with WORD95 format.

I created a crash report, the ID of the error report is rxmtb6.
Comment 11 Rainer Bielefeld 2006-07-24 06:46:52 UTC
The crash also happens when I try to save as WORD2000 from "2.0.2  German
version WIN XP: [680m5(Build9011)]"
Comment 12 Rainer Bielefeld 2006-07-24 07:05:48 UTC
Mo crash using "1.1.4 (German) WIN XP: [645m52 (Build 8824)]"
Comment 13 frank.meies 2007-02-01 10:36:49 UTC
Comment 14 Mathias_Bauer 2007-02-01 10:39:17 UTC
*** Issue 65793 has been marked as a duplicate of this issue. ***
Comment 15 frank.meies 2007-03-06 10:36:18 UTC
*** Issue 75149 has been marked as a duplicate of this issue. ***
Comment 16 frank.meies 2007-03-26 11:29:58 UTC
Fixed in cws swqbf93, swtable.*, swnewtable.cxx, wrtswtbl.cxx.
Comment 17 frank.meies 2007-04-24 13:54:48 UTC
FME: Ready for QA.
Comment 18 frank.meies 2007-04-24 13:59:25 UTC
FME: Ready for QA.
Comment 19 frank.meies 2007-04-24 14:03:36 UTC
Comment 20 michael.ruess 2007-05-16 12:29:35 UTC
Verified fix in CWS swqbf93.
Comment 21 michael.ruess 2007-06-21 15:46:13 UTC
Checked in680m214.