https://bugs.documentfoundation.org/show_bug.cgi?id=166837

            Bug ID: 166837
           Summary: Calc crashed after calculating descriptive statistics
                    and then closing
           Product: LibreOffice
           Version: 25.2.3.2 release
          Hardware: All
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Calc
          Assignee: [email protected]
          Reporter: [email protected]

I opened a speadsheet of ods format I had previously created in Libreoffice
Calc 25.2.3.2 in Plasma 6.3.5 on Wayland in a Fedora 42 KDE Plasma
installation. I clicked on the header of a column with numeric data to select
it. I clicked on the Data menu in the menu bar, then on Statistics and
Descriptive Statistics. I selected a cell to the right of the data for the
Results to field, then I clicked OK. I saved the file. I closed Calc. A crash
notification was shown from abrt. Calc crashed with the following trace which
might indicate it happened when an object related to the clipboard was being
destroyed.

(gdb) bt
#0  __pthread_kill_implementation (threadid=<optimized out>,
signo=signo@entry=6, no_tid=no_tid@entry=0)
    at pthread_kill.c:44
#1  0x00007f543265a1e3 in __pthread_kill_internal (threadid=<optimized out>,
signo=6) at pthread_kill.c:89
#2  0x00007f5432600afe in __GI_raise (sig=sig@entry=6) at
../sysdeps/posix/raise.c:26
#3  0x00007f54325e86d0 in __GI_abort () at abort.c:73
#4  0x00007f54322091b6 in __gnu_cxx::__verbose_terminate_handler ()
    at ../../../../libstdc++-v3/libsupc++/vterminate.cc:95
#5  0x00007f543221e95c in __cxxabiv1::__terminate (handler=<optimized out>)
    at ../../../../libstdc++-v3/libsupc++/eh_terminate.cc:48
#6  0x00007f5432208c2d in __cxa_call_terminate (ue_header_in=0x555801b6c1c0)
    at ../../../../libstdc++-v3/libsupc++/eh_call.cc:56
#7  0x00007f543221e1d1 in __cxxabiv1::__gxx_personality_v0
    (version=<optimized out>, actions=6, exception_class=5138137972254386944,
ue_header=0x555801b6c1c0, context=0x7ffef76069a0) at
../../../../libstdc++-v3/libsupc++/eh_personality.cc:692
#8  0x00007f54324bd3cb in _Unwind_RaiseException_Phase2
    (exc=exc@entry=0x555801b6c1c0, context=context@entry=0x7ffef76069a0,
frames_p=frames_p@entry=0x7ffef76068a8)
    at ../../../libgcc/unwind.inc:64
#9  0x00007f54324bdeca in _Unwind_Resume (exc=exc@entry=0x555801b6c1c0) at
../../../libgcc/unwind.inc:242
#10 0x00007f542ea3df46 in
cppu::WeakImplHelper<com::sun::star::datatransfer::XTransferable2,
com::sun::star::datatransfer::clipboard::XClipboardOwner,
com::sun::star::datatransfer::dnd::XDragSourceListener>::~WeakImplHelper
    (this=<optimized out>, this=<optimized out>)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/include/cppuhelper/implbase.hxx:102
#11 TransferableHelper::~TransferableHelper (this=0x5558048bece0,
this=<optimized out>)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/source/treelist/transfer.cxx:316
#12 0x00007f53c35171c5 in ScSelectionTransferObj::~ScSelectionTransferObj
(this=0x5558048bece0, this=<optimized out>)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/sc/source/ui/app/seltrans.cxx:163
#13 0x00007f541b34196d in non-virtual thunk to QtClipboard::~QtClipboard() ()
--Type <RET> for more, q to quit, c to continue without paging--c
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/inc/qt6/../qt5/QtClipboard.hxx:30
#14 0x00007f541b36f476 in
com::sun::star::uno::Reference<com::sun::star::uno::XInterface>::~Reference
    (this=0x5558048d6ce0, this=<optimized out>)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/include/com/sun/star/uno/Reference.hxx:114
#15 std::pair<rtl::OUString const,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface> >::~pair
    (this=0x5558048d6cd8, this=<optimized out>) at
/usr/include/c++/15/bits/stl_pair.h:302
#16 std::destroy_at<std::pair<rtl::OUString const,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface> > >
    (__location=0x5558048d6cd8) at /usr/include/c++/15/bits/stl_construct.h:88
#17
std::allocator_traits<std::allocator<std::__detail::_Hash_node<std::pair<rtl::OUString
const, com::sun::star::uno::Reference<com::sun::star::uno::XInterface> >, true>
> >::destroy<std::pair<rtl::OUString const,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface> > >
(__a=<optimized out>, __p=0x5558048d6cd8)
    at /usr/include/c++/15/bits/alloc_traits.h:698
#18
std::__detail::_Hashtable_alloc<std::allocator<std::__detail::_Hash_node<std::pair<rtl::OUString
const, com::sun::star::uno::Reference<com::sun::star::uno::XInterface> >, true>
> >::_M_deallocate_node
    (this=<optimized out>, __n=0x5558048d6cd0) at
/usr/include/c++/15/bits/hashtable_policy.h:1572
#19
std::__detail::_Hashtable_alloc<std::allocator<std::__detail::_Hash_node<std::pair<rtl::OUString
const, com::sun::star::uno::Reference<com::sun::star::uno::XInterface> >, true>
> >::_M_deallocate_nodes
    (this=0x5557ff7f25c0, __n=0x5558011d89f0) at
/usr/include/c++/15/bits/hashtable_policy.h:1594
#20 std::_Hashtable<rtl::OUString, std::pair<rtl::OUString const,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface> >,
std::allocator<std::pair<rtl::OUString const,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface> > >,
std::__detail::_Select1st, std::equal_to<rtl::OUString>,
std::hash<rtl::OUString>, std::__detail::_Mod_range_hashing,
std::__detail::_Default_ranged_hash, std::__detail::_Prime_rehash_policy,
std::__detail::_Hashtable_traits<true, false, true> >::~_Hashtable
(this=0x5557ff7f25c0, this=<optimized out>) at
/usr/include/c++/15/bits/hashtable.h:1852
#21 0x00007f541b3741e6 in std::unordered_map<rtl::OUString,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface>,
std::hash<rtl::OUString>, std::equal_to<rtl::OUString>,
std::allocator<std::pair<rtl::OUString const,
com::sun::star::uno::Reference<com::sun::star::uno::XInterface> > >
>::~unordered_map (this=0x5557ff7f25c0, this=<optimized out>)
    at /usr/include/c++/15/bits/unordered_map.h:112
#22 QtInstance::~QtInstance (this=0x5557ff7f24e0, this=<optimized out>)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/qt6/../qt5/QtInstance.cxx:312
#23 0x00007f54327eb047 in non-virtual thunk to KFSalInstance::~KFSalInstance()
()
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/unx/kf6/../kf5/KFSalInstance.hxx:24
#24 0x00007f542eec5c3a in DestroySalInstance (pInst=0x5557ff7f24f0)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/source/app/salplug.cxx:361
#25 DeInitVCL () at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/source/app/svmain.cxx:627
#26 0x00007f542eec6a21 in ImplSVMain ()
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/source/app/svmain.cxx:239
#27 0x00007f542eec6c19 in SVMain () at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/vcl/source/app/svmain.cxx:246
#28 0x00007f5432853bec in soffice_main ()
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/desktop/source/app/sofficemain.cxx:121
#29 0x00005557faa00406 in sal_main () at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/desktop/source/app/main.c:51
#30 main (argc=<optimized out>, argv=<optimized out>)
    at
/usr/src/debug/libreoffice-25.2.3.2-1.fc42.x86_64/desktop/source/app/main.c:49

I saw this type of crash again after calculating descriptive statistics for
another column/variable with numeric data, saving, then closing. I reproduced
the problem with a new blank spreadsheet file by clicking on the column A
header, calculating descriptive statistics, saving, then closing. This problem
didn't happen unless I followed the steps above. The system is using Qt 6.9.0
and KF 6.14.0.

Version: 25.2.3.2 (X86_64)
Build ID: 520(Build:2)
CPU threads: 4; OS: Linux 6.14; UI render: default; VCL: kf6 (cairo+wayland)
Locale: en-CA (en_CA.UTF-8); UI: en-US
Calc: threaded

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to