Apache OpenOffice (AOO) Bugzilla – Issue 93298
Calc 2.4.1 crashes when loading a .sxc file saved by Calc 3.0 beta2
Last modified: 2013-08-07 15:14:44 UTC
Phenomenon: Calc 2.x crashes when locading a .sxc file prepared with OOo 3.0 beta2, which has a cell located in AMJ1 meaning cell position (1024, 1). Reproduction: 1. /opt/openoffice.org2.4/program/soffice timetable-tossy.sxc soffice terminates with a message [1] printed in the terminal emulator. Comparison among versions: An attempt of loading a bugdoc timetable-tossy.sxc results: - 2.4.1 Linux terminates with [1]. - 2.3.0 Linux terminates with [1]. - 2.4.1 Windows shows a dialog with [2], but does not terminate. - 2.3.0 Windows shows a dialog with [2], but does not terminate. [1] terminate called after throwing an instance of 'com::sun::star::lang::IndexOutOfBoundsException' [2] "An unknown error has occurred." [3] "The data could not be loaded completely because the maximum number of columns per sheet was exceeded." [4] terminate called after throwing an instance of 'std::bad_alloc' what(): St9bad_alloc Comparison to the similar issue 87128: An attempt of loading the bugdoc attached in the issue 87128 results: - 2.4.1 Linux shows a dialog with [3] and then terminates with [4]. - 2.3.0 Linux terminates with [4]. - 2.4.1 Windows shows a dialog with [3] and then open it, truncated as designed. - 2.3.0 Windows terminates. Comparison to the similar situation: An attempt of loading bugdoc_with_a_border_in_a_cell_AMJ1.sxc results: - 2.4.1 Linux terminates with [4]. - 2.3.0 Linux terminates with [4]. - 2.4.1 Windows open it, truncated as designed, but no waning message. - 2.3.0 Windows terminates, and falls into an infinite recovery loop. References: - http://oooug.jp/faq/index.php?faq/4/1139 (Japanese) reported by tossy - Issue 87128
Created attachment 56120 [details] A bugdoc, spreading over a cell range A1:AMJ1, prepared with OOo3.0 beta2
Created attachment 56121 [details] A bugdoc, empty cells decorated with borders, spreading over a cell range A1:AMJ1, prepared with OOo3.0 beta2 Linux
This behavior can be also observed with OOO300_m4. 1. Open i93298_timetable-tossy.sxc attached in this issue with OOO300_m4. 2. File - Save As 3. File type: ODF Spreadsheet (.ods) 4. Name it and press a button [Save]. 5. Open it with OOo 2.4.1. Results: 2.4.1 crashes.
Simple way of reproduction: 1. Start OpenOffice.org 3.0 Calc (or its release candidate). 2. Fill a cell A1 with some texts. 3. Click '1' on the row header to select the entire row. 4. Apply 'Align center horizontally' to the selected cells. 5. Save the document in native file format, ODF. 6. Load it with OpenOffice.org 2.4.1 Result: OOo 2.4.1 crashes.
I couldn't reproduce the issue under Windows XP SP3 Jp, OOo 2.4.1 ja. Test file used: http://oooug.jp/faq/index.php?plugin=attach&refer=faq%2F4%2F1139&openfile=faq4_1139.sxc cf http://oooug.jp/faq/index.php?faq/4/1139
I also couldn't reproduce the issue under Windows OOo 2.4.1 / OOO 3.0 m7 en-us.
I can reproduce when attempting to open the attached document with OOo2.4.1 680m17 build 9310 Linux.
I'm able to confirm crash on SolarisSparc for SO 8 Update11
reassign and set 2.4.2 target.
Crashes also on Mac OSX. Crash reporter tells (just in case someone can use that information?): Thread 2 Crashed: 0 libSystem.B.dylib 0x95c59dbe __semwait_signal_nocancel + 10 1 libSystem.B.dylib 0x95c4bc87 usleep$NOCANCEL$UNIX2003 + 61 2 libSystem.B.dylib 0x95c6d434 __abort + 109 3 libSystem.B.dylib 0x95c6d490 _flockfile_debug_stub + 0 4 libstdc++.6.dylib 0x9018d005 0x90145000 + 294917 5 libstdc++.6.dylib 0x9018b10c __gxx_personality_v0 + 1108 6 libstdc++.6.dylib 0x9018b14b std::terminate() + 29 7 libstdc++.6.dylib 0x9018b261 __cxa_throw + 101 8 libsc680mxi.dylib 0x05f77c27 ScCellRangeObj::getCellRangeByPosition(long, long, long, long) + 207 9 libsc680mxi.dylib 0x05f7d384 ScCellRangeObj::getPropertySetInfo() + 7974 10 libsc680mxi.dylib 0x063934f7 ScViewOptions::ScViewOptions(ScViewOptions const&) + 1728587 11 libsc680mxi.dylib 0x06396410 ScViewOptions::ScViewOptions(ScViewOptions const&) + 1740644 12 libxo680mxi.dylib 0x058b2f04 SvXMLImport::endElement(rtl::OUString const&) + 72 13 libxof680mxi.dylib 0x07e56a96 0x7e38000 + 125590 14 libxof680mxi.dylib 0x07e5fb04 0x7e38000 + 162564 15 sax.uno.dylib 0x0441417e component_getFactory + 17606 16 sax.uno.dylib 0x0441cced component_getFactory + 53301 17 sax.uno.dylib 0x04418c99 component_getFactory + 36833 18 sax.uno.dylib 0x04418e46 component_getFactory + 37262 19 sax.uno.dylib 0x0441111e component_getFactory + 5222 20 sax.uno.dylib 0x0441244c component_getFactory + 10132 21 libsc680mxi.dylib 0x0635e901 ScViewOptions::ScViewOptions(ScViewOptions const&) + 1512533 22 libsc680mxi.dylib 0x06360183 ScViewOptions::ScViewOptions(ScViewOptions const&) + 1518807 23 libsc680mxi.dylib 0x05d6d4f3 ScDocShell::AfterXMLLoading(unsigned char) + 1313 24 libsc680mxi.dylib 0x05d6ee13 ScDocShell::Load(SfxMedium&) + 259 25 libsfx680mxi.dylib 0x013b38c7 SfxObjectShell::LoadOwnFormat(SfxMedium&) + 175 26 libsfx680mxi.dylib 0x013bf5e5 SfxObjectShell::DoLoad(SfxMedium*) + 5581 27 libsfx680mxi.dylib 0x01419025 SfxBaseModel::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) + 349 28 libsfx680mxi.dylib 0x01450fc9 SfxViewShell::TryContextMenuInterception(Menu&, Menu*&, com::sun::star::ui::ContextMenuExecuteEvent) + 33723 29 libfwk680mxi.dylib 0x0521fc71 component_writeInfo + 999531 30 libfwk680mxi.dylib 0x05220348 component_writeInfo + 1001282 31 libfwk680mxi.dylib 0x0522055d component_writeInfo + 1001815 32 libfwk680mxi.dylib 0x050eb225 0x50e6000 + 21029 33 soffice.bin 0x0002aae4 desktop::DispatchWatcher::executeDispatchRequests(_STL::vector<desktop::DispatchWatcher::DispatchRequest, _STL::allocator<desktop::DispatchWatcher::DispatchRequest> > const&) + 11104 34 soffice.bin 0x0001d81f desktop::OfficeIPCThread::ExecuteCmdLineRequests(desktop::ProcessDocumentsRequest&) + 325 35 soffice.bin 0x00011afa desktop::Desktop::OpenClients() + 4338 36 soffice.bin 0x00013548 desktop::Desktop::OpenClients_Impl(void*) + 68 37 libvcl680mxi.dylib 0x0058830c Window::GetPrimarySelection() + 21194 38 libvclplug_gen680mxi.dylib 0x02b5d654 SalDisplay::DispatchInternalEvent() + 150 39 libvclplug_gen680mxi.dylib 0x02b5d697 SalX11Display::Yield() + 19 40 libvclplug_gen680mxi.dylib 0x02b5bff5 SalDisplay::GetPointer(int) + 9583 41 libvclplug_gen680mxi.dylib 0x02b54270 SalXLib::Yield(bool, bool) + 1026 42 libvcl680mxi.dylib 0x003cc9c5 Application::Yield(bool) + 83 43 libvcl680mxi.dylib 0x003cca47 Application::Execute() + 63 44 soffice.bin 0x00016a53 desktop::Desktop::Main() + 5359 45 libvcl680mxi.dylib 0x003d21e1 InitVCL(com::sun::star::uno::Reference<com::sun::star::lang::XMultiServiceFactory> const&) + 1493 46 libvcl680mxi.dylib 0x003d22b8 SVMain() + 92 47 libuno_sal.dylib 0x00f0e24c osl_yieldThread + 550 48 libSystem.B.dylib 0x95ba96f5 _pthread_start + 321 49 libSystem.B.dylib 0x95ba95b2 thread_start + 34
In cws calcfix242: sc/source/filter/xml/xmlcelli.cxx 1.93.248.1.2.1 Note: this fix is for the second attached test case document, the first case was already fixed for OOo2.4.1
Reassigning to QA for verification. Note: There seems to be some confusion which release versions tend to crash and which don't. I also reversed first and second attachment in my previous comment, sorry for that. Let me clarify: Versions <= 2.4 should crash on all three documents, the two attached here and the one from issue 87128. Version 2.4.1 does not crash with the second attachment (i93298_bugdoc_with_a_border_in_a_cell_AMJ1.sxc) nor with the one from issue 87128, but does crash on the first attachment (i93298_timetable-tossy.sxc).
Seen ok in cws -> verified
Seen ok -> closed