https://bugs.winehq.org/show_bug.cgi?id=51640
Bug ID: 51640 Summary: LibreOffice 7.2.0 crashes while browsing directories Product: Wine Version: 6.15 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: aros@gmx.com Distribution: ---
Steps to reproduce:
1) wine soffice.exe 2) File -> Open 3) Start opening directories -> Crash
Unhandled exception: page fault on read access to 0x0000000c in 32-bit code (0x7a63c050). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7a63c050 ESP:00e5dec0 EBP:00e5df28 EFLAGS:00010246( R- -- I Z- -P- ) EAX:05f17fd0 EBX:05f17fa0 ECX:05f17fd0 EDX:00000002 ESI:05f17fbc EDI:00000000 Stack dump: 0x00e5dec0: 00000000 00e5dee0 00e5df34 0c792937 0x00e5ded0: 0024f77c 0c79291b 00e5df28 7a661d1f 0x00e5dee0: 000100a0 05ef931c 05ef9300 05ef9394 0x00e5def0: 0c792959 00000000 2afabd3a 00e5df68 0x00e5df00: 00270ec0 05ef9300 000003e8 00000000 0x00e5df10: 00e5df50 00e5e06c 00e5df34 0000006b Backtrace: =>0 0x7a63c050 in comdlg32 (+0xc050) (0x00e5df28) 1 0x0c79377b EntryPoint+0xffffffff() in fps (0x00e5df74) 2 0x0c791ef6 EntryPoint+0xffffffff() in fps (0x00e5e02c) 3 0x0c78a020 EntryPoint+0xffffffff() in fps (0x00e5e088) 4 0x10f06d0f EntryPoint+0xffffffff() in mergedlo (0x00e5e170) 5 0x10f02c8b EntryPoint+0xffffffff() in mergedlo (0x00e5e194) 6 0x0c78b0a1 EntryPoint+0xffffffff() in fps (0x00e5e1d8) 7 0x0c78b3cc EntryPoint+0xffffffff() in fps (0x00e5e268) 8 0x0c78ad1f EntryPoint+0xffffffff() in fps (0x00e5e278) 9 0x7a66352f (0x00e5e2e8) 10 0x7d479187 in shell32 (+0x29186) (0x00e5e338) 11 0x7d4ebaeb in shell32 (+0x9baea) (0x00e5e388) 12 0x7d4ec81d in shell32 (+0x9c81c) (0x00e5e4f8) 13 0x7d4ed3cd in shell32 (+0x9d3cc) (0x00e5e598) 14 0x7e48977c in user32 (+0xb977b) (0x00e5e5d8) 15 0x7e489f63 in user32 (+0xb9f62) (0x00e5e638) 16 0x7e48c276 in user32 (+0xbc275) (0x00e5e688) 17 0x7e43bc18 in user32 (+0x6bc17) (0x00e5e6f8) 18 0x7e441181 in user32 (+0x71180) (0x00e5e778) 19 0x7e4413e1 in user32 (+0x713e0) (0x00e5e7b8) 20 0x7a5341f8 (0x00e5e7f8) 21 0x7a5401c7 (0x00e5e9c8) 22 0x7a540e1a (0x00e5ea68) 23 0x7a541247 (0x00e5eb28) 24 0x7a5432ad (0x00e5eba8) 25 0x7a547b99 (0x00e5ec98) 26 0x7a54c083 (0x00e5ed68) 27 0x7e48977c in user32 (+0xb977b) (0x00e5eda8) 28 0x7e489f63 in user32 (+0xb9f62) (0x00e5ee08) 29 0x7e48c276 in user32 (+0xbc275) (0x00e5ee58) 30 0x7e444ae1 in user32 (+0x74ae0) (0x00e5ef08) 31 0x7e408f4b in user32 (+0x38f4a) (0x00e5f068) 32 0x7e4099a0 in user32 (+0x3999f) (0x00e5f0e8) 33 0x7e409bf0 in user32 (+0x39bef) (0x00e5f128) 34 0x7a6595e7 (0x00e5f178) 35 0x7a6581f8 (0x00e5f1a8) 36 0x0c7941e5 EntryPoint+0xffffffff() in fps (0x00e5f488) 37 0x0c791ee9 EntryPoint+0xffffffff() in fps (0x00e5f540) 38 0x0c787da4 EntryPoint+0xffffffff() in fps (0x00e5f5a0) 39 0x10f03d2f EntryPoint+0xffffffff() in mergedlo (0x00e5f5d4) 40 0x10f0244c EntryPoint+0xffffffff() in mergedlo (0x00e5f648) 41 0x10efe35a EntryPoint+0xffffffff() in mergedlo (0x00e5f6a8) 42 0x10dfb97b EntryPoint+0xffffffff() in mergedlo (0x00e5f82c) 43 0x10df747e EntryPoint+0xffffffff() in mergedlo (0x00e5f838) 44 0x10e77823 EntryPoint+0xffffffff() in mergedlo (0x00e5f880) 45 0x10e7af11 EntryPoint+0xffffffff() in mergedlo (0x00e5f8b8) 46 0x10e7c041 EntryPoint+0xffffffff() in mergedlo (0x00e5f8d4) 47 0x1104daa4 EntryPoint+0xffffffff() in mergedlo (0x00e5f8f8) 48 0x11e252ef EntryPoint+0xffffffff() in mergedlo (0x00e5f988) 49 0x12290e85 EntryPoint+0xffffffff() in mergedlo (0x00e5f99c) 50 0x0598ab3e EntryPoint+0xffffffff() in vclplug_winlo (0x00e5fa8c) 51 0x0598b22d EntryPoint+0xffffffff() in vclplug_winlo (0x00e5fad8) 52 0x7e48977c in user32 (+0xb977b) (0x00e5fb08) 53 0x7e489f63 in user32 (+0xb9f62) (0x00e5fb68) 54 0x7e48c276 in user32 (+0xbc275) (0x00e5fbb8) 55 0x7e444ae1 in user32 (+0x74ae0) (0x00e5fc68) 56 0x059233f7 EntryPoint+0xffffffff() in vclplug_winlo (0x00e5fcb8) 57 0x05923230 EntryPoint+0xffffffff() in vclplug_winlo (0x00e5fce8) 58 0x12150bcf EntryPoint+0xffffffff() in mergedlo (0x00e5fd20) 59 0x110e7037 EntryPoint+0xffffffff() in mergedlo (0x00e5fe30) 60 0x1215f0bf EntryPoint+0xffffffff() in mergedlo (0x00e5fe5c) 61 0x111052a1 EntryPoint+0xffffffff() in mergedlo (0x00e5fedc) 62 0x00401049 EntryPoint+0xffffffff() in soffice.bin (0x00e5fee8) 63 0x00401241 EntryPoint+0xffffffff() in soffice.bin (0x00e5ff30) 64 0x7b652320 in kernel32 (+0x3231f) (0x00e5ff48) 65 0x7bc7ebd7 (0x00e5ff5c) 66 0x7bc7f2c2 (0x00e5ffec) 0x7a63c050: movl 0x0000000c,%eax Modules: Module Address Debug info Name (139 modules) PE 110000- 118000 Deferred clewlo PE 230000- 287000 Deferred cppu3 PE 290000- 312000 Deferred sal3 PE 320000- 32f000 Deferred salhelper3msc PE 330000- 35a000 Deferred reglo PE 360000- 383000 Deferred storelo PE 390000- 3a6000 Deferred xmlreaderlo PE 3b0000- 3f2000 Deferred i18nlangtag PE 400000- 4c6000 Export soffice.bin PE e80000- 105c000 Deferred clucene PE 1060000- 115a000 Deferred cppuhelper3msc PE 1160000- 11ff000 Deferred unoidllo PE 1200000- 1305000 Deferred epoxy PE 1310000- 13be000 Deferred gpgmepp PE 13c0000- 1573000 Deferred icuuc69 PE 1580000- 30d9000 Deferred icudt69 PE 30e0000- 31f4000 Deferred libxml2 PE 3200000- 3211000 Deferred jvmaccesslo PE 3220000- 3255000 Deferred jvmfwklo PE 3260000- 33e3000 Deferred orcus PE 33f0000- 347f000 Deferred orcus-parser PE 3480000- 3a08000 Deferred pdfiumlo PE 3a10000- 3a7d000 Deferred lcms2 PE 3a80000- 3ab5000 Deferred raptor2 PE 3ac0000- 3ae4000 Deferred librdf PE 3af0000- 3b4c000 Deferred rasqal PE 3b50000- 4213000 Deferred skialo PE 4220000- 427a000 Deferred libcurl PE 4280000- 452b000 Deferred icuin69 PE 4530000- 4544000 Deferred libexslt PE 4550000- 4581000 Deferred libxslt PE 4590000- 466b000 Deferred nss3 PE 4670000- 4693000 Deferred nssutil3 PE 46a0000- 46a9000 Deferred plc4 PE 46b0000- 46dd000 Deferred nspr4 PE 46e0000- 46e7000 Deferred plds4 PE 5910000- 5ad0000 Export vclplug_winlo PE 5af0000- 5b0e000 Deferred msci_uno PE 5b20000- 5b49000 Deferred localedata_en PE 5db0000- 5e0c000 Deferred updchklo PE 5e10000- 5e21000 Deferred storagefdlo PE 6140000- 6167000 Deferred loglo PE 61a0000- 6207000 Deferred expwraplo PE 6220000- 6244000 Deferred stocserviceslo PE 6260000- 62b3000 Deferred analysislo PE 62c0000- 6300000 Deferred introspectionlo PE 6300000- 6319000 Deferred datelo PE 6550000- 6586000 Deferred reflectionlo PE 6590000- 65ad000 Deferred pricinglo PE 65b0000- 65c2000 Deferred wininetbe1lo PE 6600000- 66c6000 Deferred xmlsecurity PE 84a0000- 84e7000 Deferred xsec_xmlsec PE 84f0000- 8518000 Deferred libxmlsec-mscng PE 8520000- 856a000 Deferred libxmlsec PE 8570000- 8616000 Deferred ucpchelp1 PE 8630000- 86d0000 Deferred oleautobridgelo PE c1a0000- c740000 Deferred scfiltlo PE c780000- c7b2000 Export fps PE d500000- e586000 Deferred sclo PE e590000- ea22000 Deferred ooxlo PE 10000000-13ef3000 Export mergedlo PE 7a4e0000-7a521000 Deferred comctl32 PE 7a630000-7a646000 Export comdlg32 PE 7a6d0000-7a6da000 Deferred actxprxy PE 7a840000-7a844000 Deferred opengl32 PE 7a950000-7a954000 Deferred explorerframe PE 7a980000-7a983000 Deferred dhcpcsvc PE 7a990000-7a993000 Deferred ncrypt PE 7b020000-7b027000 Deferred kernelbase PE 7b590000-7b596000 Deferred wininet PE 7b620000-7b684000 Export kernel32 PE 7b8f0000-7b8f4000 Deferred uxtheme PE 7b930000-7b936000 Deferred winspool PE 7b970000-7b973000 Deferred dwrite PE 7ba00000-7ba04000 Deferred dxgi PE 7ba40000-7ba44000 Deferred d2d1 PE 7bc20000-7bc24000 Deferred ntdll PE 7bcd0000-7bcd3000 Deferred opencl PE 7bd10000-7bd14000 Deferred d3d10core PE 7bd20000-7bd24000 Deferred d3d10_1 PE 7bdf0000-7bdf4000 Deferred winex11 PE 7c4a0000-7c4a4000 Deferred psapi PE 7c4b0000-7c4b3000 Deferred api-ms-win-core-localization-l1-2-1 PE 7c4d0000-7c4d3000 Deferred api-ms-win-core-fibers-l1-1-1 PE 7c4e0000-7c4e3000 Deferred api-ms-win-core-synch-l1-2-0 PE 7c500000-7c504000 Deferred imm32 PE 7c930000-7c96d000 Deferred concrt140 PE 7ca80000-7ca84000 Deferred msvcr120 PE 7cb80000-7cb83000 Deferred netapi32 PE 7cbd0000-7cbd4000 Deferred gdiplus PE 7ccb0000-7ccb4000 Deferred wined3d PE 7ce50000-7ce54000 Deferred d3d9 PE 7ce90000-7ce94000 Deferred msacm32 PE 7cee0000-7cee7000 Deferred oleaut32 PE 7d010000-7d013000 Deferred api-ms-win-crt-multibyte-l1-1-0 PE 7d030000-7d03f000 Deferred winmm PE 7d090000-7d093000 Deferred normaliz PE 7d0a0000-7d0a5000 Deferred jsproxy PE 7d0c0000-7d0c6000 Deferred winhttp PE 7d120000-7d124000 Deferred bcrypt PE 7d170000-7d178000 Deferred crypt32 PE 7d210000-7d213000 Deferred usp10 PE 7d230000-7d233000 Deferred fontsub PE 7d240000-7d243000 Deferred api-ms-win-crt-locale-l1-1-0 PE 7d270000-7d273000 Deferred nsi PE 7d2a0000-7d2a4000 Deferred dnsapi PE 7d2d0000-7d2d4000 Deferred iphlpapi PE 7d300000-7d304000 Deferred wsock32 PE 7d330000-7d336000 Deferred ws2_32 PE 7d360000-7d363000 Deferred wer PE 7d380000-7d383000 Deferred shcore PE 7d3b0000-7d3b4000 Deferred shlwapi PE 7d410000-7d413000 Deferred userenv PE 7d450000-7dcbf000 Export shell32 PE 7ddd0000-7ddd3000 Deferred combase PE 7de50000-7de78000 Deferred ole32 PE 7dfc0000-7dfc4000 Deferred gdi32 PE 7e270000-7e274000 Deferred rpcrt4 PE 7e300000-7e304000 Deferred version PE 7e320000-7e324000 Deferred setupapi PE 7e3d0000-7e4aa000 Export user32 PE 7e5f0000-7e5f4000 Deferred mpr PE 7e620000-7e624000 Deferred dbghelp PE 7e6b0000-7e6b4000 Deferred msvcrt PE 7e770000-7e773000 Deferred sechost PE 7e7c0000-7e7c4000 Deferred advapi32 PE 7e810000-7e813000 Deferred api-ms-win-crt-utility-l1-1-0 PE 7e820000-7e823000 Deferred api-ms-win-crt-environment-l1-1-0 PE 7e890000-7e8fd000 Deferred msvcp140 PE 7e9c0000-7e9c4000 Deferred ucrtbase PE 7eae0000-7eae3000 Deferred api-ms-win-crt-time-l1-1-0 PE 7eb00000-7eb03000 Deferred api-ms-win-crt-filesystem-l1-1-0 PE 7eb10000-7eb13000 Deferred api-ms-win-crt-string-l1-1-0 PE 7eb20000-7eb23000 Deferred api-ms-win-crt-stdio-l1-1-0 PE 7eb40000-7eb43000 Deferred api-ms-win-crt-convert-l1-1-0 PE 7eb50000-7eb53000 Deferred api-ms-win-crt-math-l1-1-0 PE 7eb70000-7eb73000 Deferred api-ms-win-crt-heap-l1-1-0 PE 7eb80000-7eb83000 Deferred api-ms-win-crt-runtime-l1-1-0 PE 7eba0000-7ebb4000 Deferred vcruntime140 Threads: process tid prio (all id:s are in hex) 00000038 services.exe 0000003c 0 00000040 0 0000004c 0 00000064 0 00000084 0 0000009c 0 000000d8 0 00000044 winedevice.exe 00000048 0 00000054 0 00000058 0 0000005c winedevice.exe 00000060 0 00000068 0 0000006c 0 00000070 0 00000074 0 00000078 0 0000007c plugplay.exe 00000080 0 00000088 0 0000008c 0 00000090 0 00000094 svchost.exe 00000098 0 000000a0 0 000000a4 0 000000b8 explorer.exe 000000bc 0 000000c4 0 000000c8 0 000000d0 rpcss.exe 000000d4 0 000000e0 0 000000e4 0 000000e8 0 000000ec 0 000000f0 0 00000124 0 0000010c (D) C:\Program Files\LibreOffice\program\soffice.bin 00000110 0 <== 0000011c 0 00000120 0 00000128 0 00000130 0 00000144 0 00000148 0 00000170 0 0000017c 0 System information: Wine build: wine-6.15 Platform: i386 Version: Windows 7 Host system: Linux Host version: 5.13.10-az2
sha256sum LibreOffice_7.2.0_Win_x86.msi e3d5ff07a7e2aa0a8775c1ca303618d645ecce1496a1c179c232e38caa691cae LibreOffice_7.2.0_Win_x86.msi
https://bugs.winehq.org/show_bug.cgi?id=51640
Artem S. Tashkinov aros@gmx.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, source
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #1 from Artem S. Tashkinov aros@gmx.com --- Directories have to be open using the mouse double-click. When using the keyboard it's all seemingly fine.
https://bugs.winehq.org/show_bug.cgi?id=51640
Bernhard Übelacker bernhardu@mailbox.org changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |bernhardu@mailbox.org
--- Comment #2 from Bernhard Übelacker bernhardu@mailbox.org --- Hello Artem, in future bug reports please create an attachement for backtraces and logs.
The given LibreOffice version can be downloaded in this link: https://downloadarchive.documentfoundation.org/libreoffice/old/7.2.0.4/win/x...
It looks like LibreOffice tries to remove items from a comdlg32 itemdlg, which is already empty.
Submitted following patch, which avoids the crash in LibreOffice: https://www.winehq.org/pipermail/wine-devel/2021-December/202984.html
https://bugs.winehq.org/show_bug.cgi?id=51640
Roman Pišl rpisl@seznam.cz changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |rpisl@seznam.cz
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #3 from Roman Pišl rpisl@seznam.cz --- (In reply to Bernhard Übelacker from comment #2) ...
Submitted following patch, which avoids the crash in LibreOffice: https://www.winehq.org/pipermail/wine-devel/2021-December/202984.html
Any chance that the posted simple fix makes it into 7.0?
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #4 from Bernhard Übelacker bernhardu@mailbox.org --- (In reply to Roman Pišl from comment #3)
Any chance that the posted simple fix makes it into 7.0?
I fear it got not yet considered because the testbot run timed out.
For this timeout I sent another patch to work around the timeout, but unfortunately this patch is still waiting for review: https://source.winehq.org/patches/data/222000
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #5 from Roman Pišl rpisl@seznam.cz ---
I fear it got not yet considered because the testbot run timed out.
That's unfortunate. What about splitting it and sending just the trivial fix? It can't break anything, can it?
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #6 from Bernhard Übelacker bernhardu@mailbox.org --- (In reply to Roman Pišl from comment #5)
I fear it got not yet considered because the testbot run timed out.
That's unfortunate. What about splitting it and sending just the trivial fix? It can't break anything, can it?
Even an empty patch times out, therefore I don't think splitting will help. https://testbot.winehq.org/JobDetails.pl?Key=105072
And I am never sure when to consider resending a patch ...
https://bugs.winehq.org/show_bug.cgi?id=51640
Ken Sharp imwellcushtymelike@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- URL| |https://downloadarchive.doc | |umentfoundation.org/libreof | |fice/old/7.2.0.4/win/x86/Li | |breOffice_7.2.0.4_Win_x86.m | |si
--- Comment #7 from Ken Sharp imwellcushtymelike@gmail.com --- With version 7.2.0.1 and Wine 7.9 I'm seeing a hang instead of a crash as soon as the dialog box opens. Hard to tell if it's the same issue as there is no console logs.
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #8 from Bernhard Übelacker bernhardu@mailbox.org --- I noticed with git of today a hang too, but just a few seconds, then dialog reacts again, and after another directory change the crash still happens.
I submitted a merge request: https://gitlab.winehq.org/wine/wine/-/merge_requests/2966
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #9 from Bernhard Übelacker bernhardu@mailbox.org --- Patch got committed: https://gitlab.winehq.org/wine/wine/-/commit/345ca7e061061e5511af85a45931350...
@Artem, could you recheck with current git or next release and resolve this bug as fixed?
https://bugs.winehq.org/show_bug.cgi?id=51640
--- Comment #10 from Artem S. Tashkinov aros@gmx.com --- (In reply to Bernhard Übelacker from comment #9)
Patch got committed: https://gitlab.winehq.org/wine/wine/-/commit/ 345ca7e061061e5511af85a45931350acb3764d7
@Artem, could you recheck with current git or next release and resolve this bug as fixed?
Will recheck once Wine with this patch has been released.
https://bugs.winehq.org/show_bug.cgi?id=51640
Artem S. Tashkinov aros@gmx.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|UNCONFIRMED |RESOLVED
--- Comment #11 from Artem S. Tashkinov aros@gmx.com --- (In reply to Bernhard Übelacker from comment #9)
Patch got committed: https://gitlab.winehq.org/wine/wine/-/commit/ 345ca7e061061e5511af85a45931350acb3764d7
@Artem, could you recheck with current git or next release and resolve this bug as fixed?
Confirming fixed in Wine 8.10.
https://bugs.winehq.org/show_bug.cgi?id=51640
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #12 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 8.11.
https://bugs.winehq.org/show_bug.cgi?id=51640
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mstefani@winehq.org Fixed by SHA1| |345ca7e061061e5511af85a4593 | |1350acb3764d7
https://bugs.winehq.org/show_bug.cgi?id=51640
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |8.0.x