Launchpad has imported 38 comments from the remote bug at
https://bugs.documentfoundation.org/show_bug.cgi?id=108619.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2017-06-18T14:20:40+00:00 Xv3247 wrote:

Created attachment 134111
starting backtrace with scalc

I started scalc V6.0.0.0alpha1 with backtrace
and it crashed
its not always reproduced

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/0

------------------------------------------------------------------------
On 2017-06-27T12:54:57+00:00 Beluga wrote:

René Engelhard pointed to something similar:
https://buildd.debian.org/status/fetch.php?pkg=libreoffice&arch=i386&ver=1%3A5.3.4-1&stamp=1498442560&raw=0)

#0 0xead28975 in _expand_stack_to(unsigned char*) () from
/usr/lib/jvm/java-8-openjdk-i386/jre/lib/i386/server/libjvm.so

He commented:
"Linux's stack clash fixes break Java (and thus whenever LO tries to use Java)"

Not sure, if related.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/27

------------------------------------------------------------------------
On 2017-06-27T13:01:59+00:00 Michael-stahl wrote:

the JVM regularly receives SIGSEGV especially during startup,
and that is annoying but not a problem at all.

if Calc does indeed crash, that must be a later SIGSEGV that is
not handled by the JVM.

please attach a backtrace of the last SIGSEGV i.e. the one
that is in LO code and isn't handled by JVM.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/28

------------------------------------------------------------------------
On 2017-06-27T14:42:31+00:00 Xv3247 wrote:

thanks for the info and i have tested with openjdk7 and no crashes anymore
second i fond that it loaded the file faster than with openjdk8

thanks again

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/29

------------------------------------------------------------------------
On 2017-06-27T15:30:59+00:00 Xv3247 wrote:

Sorry is spoke to soon
crashes with openjdk7 i have backtrace and strace logs

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/30

------------------------------------------------------------------------
On 2017-06-27T15:32:07+00:00 Xv3247 wrote:

Created attachment 134315
bactrace for openjdk7

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/31

------------------------------------------------------------------------
On 2017-06-27T15:33:16+00:00 Xv3247 wrote:

Created attachment 134316
strace for openjdk

wil test without java in advance options

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/32

------------------------------------------------------------------------
On 2017-06-27T15:42:06+00:00 Xv3247 wrote:

i have downloaded the 5.3.4.2 and there are is no crash
now i don't now anymore

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/33

------------------------------------------------------------------------
On 2017-07-05T15:53:22+00:00 Olivier Tilloy wrote:

That specific crash has been reported both on debian
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865303) and ubuntu
(https://launchpad.net/bugs/1702165). It started happening with a recent
linux kernel update related to stack clash fixes (see
https://launchpad.net/bugs/1699772). Subsequent kernel updates appear to
have fixed all userspace apps affected by that crash, except for
libreoffice on x86, which is still crashing. Libreoffice on x86-64 is
fine.

I can reliably reproduce the crash in an Ubuntu 17.04 x86 virtual
machine by ensuring that java is enabled in libreoffice's advanced
options (using the openjdk-8 package), launching base and creating a new
database.

A full backtrace with debug symbols is available there:
https://launchpadlibrarian.net/326892034/libreoffice-base-zesty-full-
backtrace.txt.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/44

------------------------------------------------------------------------
On 2017-07-05T15:54:47+00:00 Olivier Tilloy wrote:

Created attachment 134497
full backtrace with debug symbols of base crashing at database creation

Attaching the full backtrace I mentioned above.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/45

------------------------------------------------------------------------
On 2017-07-05T17:40:58+00:00 Norbert wrote:

Created attachment 134499
backtrace for LibreOffice Writer 5.2.7.2 on Debian Stretch x86

This problem was discovered in LibreOffice Writer 5.2.7.2 on Debian Stretch 
(see for example my backtrace at 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865303#220 ) or in attachment.
In brief:
#0  0xa904a975 in _expand_stack_to(address) (bottom=0xbf805fff <error: Cannot 
access memory at address 0xbf805fff>, bottom@entry=0xbf805000 <error: Cannot 
access memory at address 0xbf805000>)
    at ./src/hotspot/src/os/linux/vm/os_linux.cpp:673
        sp = 0xbfffcc88 "\r"
        size = 8350857
        p = 0xbf805fe0 <error: Cannot access memory at address 0xbf805fe0>
#1  0xa904d184 in os::Linux::manually_expand_stack(JavaThread*, unsigned char*) 
(t=0x8106c800, addr=0xbf805000 <error: Cannot access memory at address 
0xbf805000>) at ./src/hotspot/src/os/linux/vm/os_linux.cpp:686
        mask_all = {__val = {2147483647, 4294967294, 4294967295 <repeats 30 
times>}}
        old_sigset = 
            {__val = {0, 0, 3221212536, 3221212568, 2829768134, 96, 3221212536, 
2835641696, 3017451961, 2164710288, 2164710288, 2839724032, 2835430804, 
2164710320, 2837838588, 63, 2835430768, 2839724032, 2164717328, 3221212616, 
2835654623, 2164710288, 0, 2837838588, 1, 180, 3221212616, 2835654507, 
2839724032, 2164717328, 2164717328, 3221212648}}
        t = 0x8106c800
        addr = 0xbf805000 <error: Cannot access memory at address 0xbf805000>


I do not know how many users use Java in Writer, but it is enabled by default 
and Writer silently crashes.
It's critical bug!

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/46

------------------------------------------------------------------------
On 2017-07-05T19:52:40+00:00 Norbert wrote:

Created attachment 134502
backtrace for LibreOffice Base 5.2.7.2 on Debian Stretch x86

Base in Debian Stretch x86 is affected too (see https://bugs.debian.org
/cgi-bin/bugreport.cgi?bug=865303#225 ).

I ran "gdb --args /usr/lib/libreoffice/program/soffice.bin --base",
'run', in Database Wizard selected 'Create a new database', 'Embedded
database:' -> 'HSQLDB Embedded', click 'Next', click 'Finish', save
database file in /tmp/db.odb.

Backtrace in brief:
#0  0xa24e7975 in _expand_stack_to(address) (bottom=0xbf805fff <error: Cannot 
access memory at address 0xbf805fff>, bottom@entry=0xbf805000 <error: Cannot 
access memory at address 0xbf805000>)
    at ./src/hotspot/src/os/linux/vm/os_linux.cpp:673
        sp = 0xbfffc6c8 "\r"
        size = 8349385
        p = 0xbf805fe0 <error: Cannot access memory at address 0xbf805fe0>
#1  0xa24ea184 in os::Linux::manually_expand_stack(JavaThread*, unsigned char*) 
(t=0x8112d800, addr=0xbf805000 <error: Cannot access memory at address 
0xbf805000>) at ./src/hotspot/src/os/linux/vm/os_linux.cpp:686
        mask_all = {__val = {2147483647, 4294967294, 4294967295 <repeats 30 
times>}}
        old_sigset = 
            {__val = {0, 0, 3221211064, 3221211096, 2717164998, 96, 3221211064, 
2723038560, 3017451961, 2165500688, 2165500688, 2727120896, 2722827668, 
2165500720, 2725235452, 63, 2722827632, 2727120896, 2165500504, 3221211144, 
2723051487, 2165500688, 0, 2725235452, 1, 180, 3221211144, 2723051371, 
2727120896, 2165500504, 2165500504, 3221211176}}
        t = 0x8112d800
        addr = 0xbf805000 <error: Cannot access memory at address 0xbf805000>

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/47

------------------------------------------------------------------------
On 2017-07-05T21:32:10+00:00 Norbert wrote:

LibreOffice Base 5.3.1.2 on Ubuntu 17.04 x86 is affected too. I can't
get backtrace here.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/49

------------------------------------------------------------------------
On 2017-07-05T21:38:49+00:00 Norbert wrote:

Created attachment 134504
backtrace for LibreOffice Writer 5.1.6.2 on Ubuntu 16.04 LTS x86

LibreOffice Base 5.1.6.2 on Ubuntu 16.04 LTS x86 is affected too. 
See attached backtrace (jfw_plugin_startJavaVirtualMachine is mentioned here).

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/51

------------------------------------------------------------------------
On 2017-07-05T21:49:16+00:00 Norbert wrote:

It seems that bug may be fixed soon in kernel (see 
https://lkml.org/lkml/2017/7/3/1008 ), not in LibreOffice.
I'm sorry for the noise.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/52

------------------------------------------------------------------------
On 2017-07-10T12:25:49+00:00 Xiscofauli wrote:

(In reply to Norbert X from comment #14)
> It seems that bug may be fixed soon in kernel (see
> https://lkml.org/lkml/2017/7/3/1008 ), not in LibreOffice.
> I'm sorry for the noise.

Thank your very much for investigating it.
I guess we can close this as RESOLVED NOTOURBUG

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/54

------------------------------------------------------------------------
On 2017-07-24T02:49:50+00:00 Luke wrote:

There are 2 workarounds for this issue:

Add kernel parameter stack_guard_gap=1

Or

Start Libreoffice, click on Tools, click on options and under Libreoffice 
section click on Advanced.
And instead of changing parameteres, considering I don't use java in 
Libreoffice, I've simply deselected "Use a Java runtime environment".

from: https://bbs.archlinux.org/viewtopic.php?id=227597

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/59

------------------------------------------------------------------------
On 2017-07-25T14:52:56+00:00 Cloph-0 wrote:

pointers to the openjdk code / showing why only 32bit is affected

https://www.mail-archive.com/linux-
ker...@vger.kernel.org/msg1437925.html

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/60

------------------------------------------------------------------------
On 2017-07-28T11:52:07+00:00 Michael-stahl wrote:

*** Bug 109327 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/66

------------------------------------------------------------------------
On 2017-07-31T11:54:44+00:00 Iplaw67-h wrote:

*** Bug 108854 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/68

------------------------------------------------------------------------
On 2017-07-31T11:54:52+00:00 Iplaw67-h wrote:

*** Bug 109101 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/69

------------------------------------------------------------------------
On 2017-08-03T08:19:49+00:00 Iplaw67-h wrote:

*** Bug 110748 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/70

------------------------------------------------------------------------
On 2017-08-16T11:34:28+00:00 Michael-stahl wrote:

*** Bug 109014 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/72

------------------------------------------------------------------------
On 2017-09-13T08:34:12+00:00 Iplaw67-h wrote:

*** Bug 112357 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/75

------------------------------------------------------------------------
On 2017-09-19T07:40:09+00:00 Iplaw67-h wrote:

*** Bug 112479 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/76

------------------------------------------------------------------------
On 2017-09-23T16:23:01+00:00 Luke wrote:

The build time manifestation of this bug is a
CppunitTest_dbaccess_hsqldb_test or CppunitTest_dbaccess_RowSetClones
test failure. For details see:

http://nabble.documentfoundation.org/CppunitTest-dbaccess-hsqldb-test-
CppunitTest-dbaccess-RowSetClones-Failing-after-System-Update-
td4218769.html

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/78

------------------------------------------------------------------------
On 2017-10-08T10:17:39+00:00 Xiscofauli wrote:

*** Bug 112930 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/80

------------------------------------------------------------------------
On 2017-10-29T20:19:49+00:00 julien2412 wrote:

*** Bug 113491 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/83

------------------------------------------------------------------------
On 2017-11-17T18:55:53+00:00 Beluga wrote:

*** Bug 113904 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/84

------------------------------------------------------------------------
On 2017-12-25T16:52:05+00:00 Mikekaganski wrote:

*** Bug 114689 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/85

------------------------------------------------------------------------
On 2018-01-07T20:13:46+00:00 Mikekaganski wrote:

*** Bug 114898 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/86

------------------------------------------------------------------------
On 2018-01-10T10:13:13+00:00 Xiscofauli wrote:

*** Bug 114639 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/87

------------------------------------------------------------------------
On 2018-01-10T10:15:56+00:00 Xiscofauli wrote:

*** Bug 114638 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/88

------------------------------------------------------------------------
On 2018-01-12T12:50:13+00:00 Aron Budea wrote:

*** Bug 114977 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/89

------------------------------------------------------------------------
On 2018-01-12T13:04:15+00:00 Jan-Peter Rühmann wrote:

Why then every other Java Programm not showing errors?
LibreOffice is the only one.
Thanks,

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/90

------------------------------------------------------------------------
On 2018-02-11T20:06:59+00:00 julien2412 wrote:

*** Bug 115631 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/99

------------------------------------------------------------------------
On 2018-02-13T11:57:42+00:00 Xiscofauli wrote:

*** Bug 115222 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/100

------------------------------------------------------------------------
On 2018-07-18T21:39:21+00:00 Xiscofauli wrote:

*** Bug 118677 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699772/comments/122

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1699772

Title:
  linux-image-4.13.0-12-generic, linux-image-4.10.0-24-generic, linux-
  image-4.8.0-56-generic, linux-image-4.4.0-81-generic, linux-
  image-3.13.0-121-generic | Regression: many user-space apps crashing

Status in LibreOffice:
  Won't Fix
Status in linux package in Ubuntu:
  Incomplete
Status in linux source package in Xenial:
  Incomplete
Status in linux source package in Artful:
  Won't Fix
Status in linux source package in Bionic:
  Incomplete
Status in linux package in Debian:
  Fix Released

Bug description:
  Distribution: Ubuntu 16.04 x64 (Flavour: KDE Neon User Edition 5.10)

  linux-image-4.4.0-81-generic appears to contain a regression, probably
  related to the CVE-2017-1000364 fix backport / patch.

  Using this kernel, the Oracle Java browser plugin always crashes
  during stack-related actions on initialization. This means, the plugin
  completely stopped working.

  
  It works perfectly fine in linux-image-4.4.0-79-generic (vurlerable to 
CVE-2017-1000364) as well as linux-image-4.11.6-041106-generic, which also 
contains a fix for CVE-2017-1000364.


  uname -a:

  > Linux Zweiblum 4.4.0-81-generic #104-Ubuntu SMP Wed Jun 14 08:17:06
  UTC 2017 x86_64 x86_64 x86_64 GNU/Linux


  I tested Oracle Java 1.8 u131 as well as 1.6 u64 in Firefox 51.0.1 as
  well as Iceweasel / Firefox/3.5.16 in a chroot.

  Using linux-image-4.4.0-81-generic it crashes in all combinations
  while with both other kernels it works.

  
  I was not able to obtain any detailed crash information from Firefox 51.0.1, 
but Iceweasel 3.5.16 crashed completely, allowing me to obtain a stack trace 
which shows the relation to stack operations performed by the plugin, even 
without proper debug symbols:

  
  > (gdb) bt full
  > #0  0x00007fa06d805307 in _expand_stack_to(unsigned char*) () from 
/opt/java-8-oracle/jre/lib/amd64/server/libjvm.so
  > No symbol table info available.
  > #1  0x00007fa06d8053ae in os::Linux::manually_expand_stack(JavaThread*, 
unsigned char*) ()
  >    from /opt/java-8-oracle/jre/lib/amd64/server/libjvm.so
  > No symbol table info available.
  > #2  0x00007fa06d80cf0b in JVM_handle_linux_signal () from 
/opt/java-8-oracle/jre/lib/amd64/server/libjvm.so
  > No symbol table info available.
  > #3  0x00007fa06d802e13 in signalHandler(int, siginfo*, void*) () from 
/opt/java-8-oracle/jre/lib/amd64/server/libjvm.so
  > No symbol table info available.
  > #4  <signal handler called>

  
  I first assumed a bug in the Java plugin, but it works fine in Linux 4.11.6.

  
  The crash will be triggered by any applet, for example the test applet at:

  * https://java.com/en/download/installed8.jsp

  
  I'm running the Ubuntu 16.04 based KDE Neon distribution which somehow 
apparently does not allow me to use apport to report this bug:

  > $ LANG= apport-cli linux-image-4.4.0-81-generic
  > 
  > *** Collecting problem information
  > 
  > The collected information can be sent to the developers to improve the
  > application. This might take a few minutes.
  > .........
  > 
  > *** Problem in linux-image-4.4.0-81-generic
  > 
  > The problem cannot be reported:
  > 
  > This is not an official KDE package. Please remove any third party package 
and try again.

  If someone can tell me how to get apport working for this package, I
  can use it to collect additional information, but (unfortunately?) the
  problem should be fairly easy to reproduce...

To manage notifications about this bug go to:
https://bugs.launchpad.net/df-libreoffice/+bug/1699772/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to