Apache OpenOffice (AOO) Bugzilla – Issue 55411
Crash choosing symbols from Selection pallette with accessibility on
Last modified: 2013-08-07 14:55:16 UTC
1. On a GNOME system, turn the desktop accessibility flag on 2. Open a new Formula 3. From the Unary/Binary Operators collection in the Selection window, choose "A+B" 4. From the Functions collection in the Selection window, choose "sin" (which would put a "Sin()" in for "A" in the forumula you are creating). OOo will now crash. I first discovered this trying to drive the Selection with GOK's Toolbar function, but found that I don't even need to have any assistive technology running; just having the desktop accessibility flag turned on is enough. The system I found this bug on is running JDS 3 build 40. Sorry, I forget the technique for determining the build number of SO/OOo...
Reassigned to ES.
Other way to reproduce it: - insert any function - click at the end of the line - press left cursor key -> crash ES->OBR: I sent a crash report with title "i55411" and my e-mail address is showing in the reprot DB. ES->Peter: OOo version -> "Help - About OOo" press Ctrl, hold it and S, D, T.
people always forget the keywords... ;-)
The stack is as follows: 0 0x40c64f64 0x1df64 libuno_sal.so.3 <procpath> 1 0x40c6586e 0x1e86e libuno_sal.so.3 <procpath> 2 0xffffe420 null 3 0x41bccce9 0x28ce9 libc.so.6 abort+0x129 /lib/tls/ 4 0x4612c515 0x256515 libjvm.so /usr/java/jre1.5.0_03/lib/i386/client/ 5 0x461b4c54 0x2dec54 libjvm.so /usr/java/jre1.5.0_03/lib/i386/client/ 6 0x46130982 0x25a982 libjvm.so JVM_handle_linux_signal+0x222 /usr/java/jre1.5.0_03/lib/i386/client/ 7 0x4612e0b4 0x2580b4 libjvm.so /usr/java/jre1.5.0_03/lib/i386/client/ 8 0xffffe440 null 9 0x5023736e 0x3436e libsm680li.so <procpath> 10 0x4108b74f 0x29474f libsvx680li.so <procpath> 11 0x4106370e 0x26c70e libsvx680li.so <procpath> 12 0x41081fdf 0x28afdf libsvx680li.so <procpath> 13 0x41070311 0x279311 libsvx680li.so _ZN8EditView12PostKeyEventERK8KeyEvent+0x1d <procpath> 14 0x5027a83c 0x7783c libsm680li.so <procpath> 15 0x4022279b 0x20a79b libvcl680li.so <procpath> 16 0x40224f51 0x20cf51 libvcl680li.so <procpath> 17 0x42e716c0 0x196c0 libvclplug_gtk680li.so <procpath> 18 0x42e72cd1 0x1acd1 libvclplug_gtk680li.so <procpath> 19 0x42f9d334 0x119334 libgtk-x11-2.0.so.0 /usr/lib/ 20 0x43230dab 0x8dab libgobject-2.0.so.0 g_closure_invoke+0x10b /usr/lib/ 21 0x43241f6b 0x19f6b libgobject-2.0.so.0 /usr/lib/ 22 0x432433bc 0x1b3bc libgobject-2.0.so.0 g_signal_emit_valist+0x69c /usr/lib/ 23 0x43243992 0x1b992 libgobject-2.0.so.0 g_signal_emit+0x32 /usr/lib/ 24 0x430957f4 0x2117f4 libgtk-x11-2.0.so.0 /usr/lib/ 25 0x42f95931 0x111931 libgtk-x11-2.0.so.0 gtk_propagate_event+0x201 /usr/lib/ 26 0x42f96d21 0x112d21 libgtk-x11-2.0.so.0 gtk_main_do_event+0x371 /usr/lib/ 27 0x4318bfe2 0x3ffe2 libgdk-x11-2.0.so.0 /usr/lib/ 28 0x4328f187 0x24187 libglib-2.0.so.0 g_main_context_dispatch+0x1d7 /usr/lib/ 29 0x432918c7 0x268c7 libglib-2.0.so.0 /usr/lib/ 30 0x432919c3 0x269c3 libglib-2.0.so.0 g_main_context_iteration+0x63 /usr/lib/ 31 0x42e62fc4 0xafc4 libvclplug_gtk680li.so <procpath> 32 0x4333364f 0x4864f libvclplug_gen680li.so _ZN14X11SalInstance5YieldEh+0x27 <procpath> 33 0x4009836a 0x8036a libvcl680li.so _ZN11Application5YieldEv+0x52 <procpath> 34 0x400983ad 0x803ad libvcl680li.so _ZN11Application7ExecuteEv+0x2d <procpath> 35 0x8067dfb 0x1fdfb soffice.bin _ZN7desktop7Desktop4MainEv+0x21a9 <procpath> 36 0x4009d253 0x85253 libvcl680li.so _Z6SVMainv+0x4d <procpath> 37 0x805e47b 0x1647b soffice.bin sal_main+0x47 <procpath> 38 0x41bb9260 0x15260 libc.so.6 __libc_start_main+0xe0 /lib/tls/ 39 0x805e361 0x16361 soffice.bin _ZN6Window11RequestHelpERK9HelpEvent+0x39 <procpath> The stack levels 0-7 are Unix signal handling code in the JVM and libuno_sal, so the crash actually seems to happen in libsm680li.so.
.
Fixed in CWS os68. Files changed: - starmath/source/accessibility.cxx
. re-open issue and reassign to es@openoffice.org
reassign to es@openoffice.org
reset resolution to FIXED
Fixed but failed in patch set. Full install is ok. re-open issue and reassign to tl@openoffice.org
reassign to tl@openoffice.org
OS->ES: As you can see on the stack the new crash is a different one <errormail:Stack type="Linux"> pos="0" ip="0x40c6ff04" rel="0x1df04" name="libuno_sal.so.3" pos="1" ip="0x40c7080e" rel="0x1e80e" name="libuno_sal.so.3" pos="2" ip="0xffffe420"/> pos="3" ip="0x41bddce9" rel="0x28ce9" name="libc.so.6" pos="4" ip="0x41b5dad1" rel="0xa8ad1" name="libstdc++.so.6" pos="5" ip="0x41b5b505" rel="0xa6505" name="libstdc++.so.6" pos="6" ip="0x41b5b542" rel="0xa6542" name="libstdc++.so.6" pos="7" ip="0x41b5b6d2" rel="0xa66d2" name="libstdc++.so.6" pos="8" ip="0x4f892b24" rel="0x755b24" name="libsw680li.so" re-open issue and reassign to es@openoffice.org
Waiting for issue 57366 to verify.
Works after resinc. Verified!
Ok in src680m140