Bug 731455

Created attachment 462984 [details]
Testcase

User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1

During problems developing a libreoffice plugin with ure it turned out that my program was correct but libreoffice was crashing for no good reason. I was trying to connect to LO over a uno socket which worked with LO 3.2/3.3. See also here: http://lists.freedesktop.org/archives/libreoffice/2011-November/020889.html

Here the backtrace:
-------------------------------8<---------------------------
QPixmap: It is not safe to use pixmaps outside the GUI thread
QPixmap: It is not safe to use pixmaps outside the GUI thread
QPixmap: It is not safe to use pixmaps outside the GUI thread

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffda7fd700 (LWP 18110)]
qt_toX11Pixmap (pixmap=...) at image/qpixmap_x11.cpp:98
98      image/qpixmap_x11.cpp: Datei oder Verzeichnis nicht gefunden.
        in image/qpixmap_x11.cpp
(gdb) bt
#0  qt_toX11Pixmap (pixmap=...) at image/qpixmap_x11.cpp:98
#1  0x00007fffeb647a40 in QX11PaintEngine::drawPixmap (this=<optimized out>, r=<optimized out>, px=<optimized out>, _sr=<optimized out>)
    at painting/qpaintengine_x11.cpp:1918
#2  0x00007fffeb583bf5 in QPaintEngine::drawImage (this=0x1df9fb0, r=..., image=..., sr=<optimized out>, flags=<optimized out>)
    at painting/qpaintengine.cpp:624
#3  0x00007fffeb64bc72 in QX11PaintEngine::drawImage (this=0x1df9fb0, r=..., image=..., sr=..., flags=...)
    at painting/qpaintengine_x11.cpp:1903
#4  0x00007fffeb59dc1e in QPainter::drawImage (this=0x7fffda7f98b0, targetRect=..., image=..., sourceRect=..., flags=...)
    at painting/qpainter.cpp:5720
#5  0x00007fffed747914 in ?? () from /usr/lib64/libreoffice/basis3.4/program/libvclplug_kde4lx.so
#6  0x00007ffff39d4667 in SalGraphics::DrawNativeControl(unsigned int, unsigned int, Rectangle const&, unsigned int, ImplControlValue const&, rtl::OUString const&, OutputDevice const*) () from /usr/lib64/libreoffice/program/../basis-link/program/libvcllx.so
#7  0x00007ffff3947e7e in OutputDevice::DrawNativeControl(unsigned int, unsigned int, Rectangle const&, unsigned int, ImplControlValue const&, rtl::OUString) () from /usr/lib64/libreoffice/program/../basis-link/program/libvcllx.so
#8  0x00007ffff3945d5b in OutputDevice::Erase() () from /usr/lib64/libreoffice/program/../basis-link/program/libvcllx.so
#9  0x00007ffff3a8fae2 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libvcllx.so
#10 0x00007ffff3a8fd13 in Window::Update() () from /usr/lib64/libreoffice/program/../basis-link/program/libvcllx.so
#11 0x00007ffff3a62025 in StatusBar::SetProgressValue(unsigned short) ()
   from /usr/lib64/libreoffice/program/../basis-link/program/libvcllx.so
#12 0x00007fffdda90d54 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libfwklx.so
#13 0x00007fffdda9e270 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libfwklx.so
#14 0x00007fffdd954e81 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libfwklx.so
#15 0x00007fffdd951475 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libfwklx.so
#16 0x00007fffd8363378 in ProgressBarHelper::SetValue(int) () from /usr/lib64/libreoffice/program/../basis-link/program/libxolx.so
#17 0x00007fffd842e127 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libxolx.so
#18 0x00007fffd8434e4b in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libxolx.so
#19 0x00007fffd843ac74 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/libxolx.so
#20 0x00007fffd8396328 in SvXMLImport::startElement(rtl::OUString const&, com::sun::star::uno::Reference<com::sun::star::xml::sax::XAttributeList> const&) () from /usr/lib64/libreoffice/program/../basis-link/program/libxolx.so
#21 0x00007fffd80455f0 in ?? () from /usr/lib64/libreoffice/program/../basis-link/program/sax.uno.so
#22 0x00007fffe6debaf6 in ?? () from /lib64/libexpat.so.1
---Type <return> to continue, or q <return> to quit---q


Reproducible: Sometimes

Steps to Reproduce:
1. set env var URE_MORE_TYPES to /usr/lib64/libreoffice/basis-link/program/offapi.rdb
2. Compile the attached testcase (CMake based, you need libreoffice-sdk)
3. start soffice in a separate console and attach with gdb: /usr/lib64/libreoffice/program/soffice.bin -quickstart -nodefault -norestore -invisible -accept="socket,host=localhost,port=2083;urp;StarOffice.ServiceManager"
4. start the testcase: ./ooo-test /path/to/a/document.odf
5. gdb should give you a similar backtrace like the one described above

Actual Results:  
LibreOffice crashes

Expected Results:  
No crash anymore :)