Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-13271

LibreOffice writer crashes with invalid pointer passed to memcpy

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: 0.4.6
    • Component/s: NTCore
    • Labels:
      None

      Description

      Either on startup or when clicking a menu item, writer crashes with a backtrace such as

      kd> k
      ChildEBP RetAddr  
      00e3f11c 11d66d9a MSVCR120!memcpy+0x2a [f:\dd\vctools\crt\crtw32\string\i386\memcpy.asm @ 188]
      00e3f158 11d66983 mergedlo!WinSalBitmap::ImplCopyDIBOrDDB+0x4a [c:\cygwin64\home\buildslave\source\libo-core\vcl\win\gdi\salbmp.cxx @ 799]
      00e3f174 11b7c881 mergedlo!WinSalBitmap::Create+0x33 [c:\cygwin64\home\buildslave\source\libo-core\vcl\win\gdi\salbmp.cxx @ 572]
      00e3f180 11b3f3a9 mergedlo!ImpBitmap::ImplCreate+0x11 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\impbmp.cxx @ 57]
      00e3f1b0 11b478af mergedlo!Bitmap::ImplMakeUnique+0x99 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap.cxx @ 291]
      00e3f1e4 11b469ab mergedlo!BitmapInfoAccess::ImplCreate+0x6f [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bmpacc.cxx @ 60]
      00e3f238 11b46be3 mergedlo!BitmapInfoAccess::BitmapInfoAccess+0xbb [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bmpacc.cxx @ 35]
      00e3f260 11b3b706 mergedlo!BitmapWriteAccess::BitmapWriteAccess+0x33 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bmpacc.cxx @ 397]
      00e3f284 11b3402e mergedlo!Bitmap::AcquireWriteAccess+0x46 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap.cxx @ 349]
      00e3f2ec 11b313f5 mergedlo!Bitmap::ImplMakeGreyscales+0xfe [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap3.cxx @ 513]
      00e3f320 11b2b4cf mergedlo!Bitmap::Convert+0x205 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap3.cxx @ 345]
      00e3f348 17e62b4a mergedlo!AlphaMask::AlphaMask+0x4f [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\alpha.cxx @ 34]
      00e3f47c 17e60aa4 swlo!SwPageFrame::PaintBorderAndShadow+0xb6a [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\paintfrm.cxx @ 6160]
      00e3f67c 1813b538 swlo!SwRootFrame::Paint+0x964 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\paintfrm.cxx @ 3389]
      00e3f700 17bd5c14 swlo!SwViewShell::Paint+0x1f8 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\view\viewsh.cxx @ 1803]
      00e3f764 182aa8be swlo!SwCursorShell::Paint+0xb4 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\crsr\crsrsh.cxx @ 1275]
      00e3f794 119981de swlo!SwEditWin::Paint+0xce [c:\cygwin64\home\buildslave\source\libo-core\sw\source\uibase\docvw\edtwin2.cxx @ 476]
      00e3f7fc 11998dbb mergedlo!PaintHelper::DoPaint+0x1de [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 315]
      00e3f864 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x14b [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 612]
      00e3f8a8 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]
      00e3f90c 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]
      00e3f950 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]
      00e3f9b4 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]
      00e3f9f8 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]
      00e3fa5c 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]
      00e3faa0 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]
      00e3fb04 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]
      00e3fb48 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]
      00e3fbac 11998c50 mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]
      00e3fbd8 11998e99 mergedlo!vcl::Window::ImplCallOverlapPaint+0xa0 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 636]
      00e3fbf8 1199a76e mergedlo!vcl::Window::ImplHandlePaintHdl+0x99 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 668]
      00e3fc04 11c869ed mergedlo!vcl::Window::LinkStubImplHandlePaintHdl+0xe [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 645]
      00e3fc10 11c898f2 mergedlo!Idle::Invoke+0xd [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\idle.cxx @ 25]
      00e3fc24 11c9ee7d mergedlo!Scheduler::ProcessTaskScheduling+0x62 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\scheduler.cxx @ 177]
      00e3fc40 11c9c165 mergedlo!Application::Yield+0x6d [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 556]
      00e3fc70 10dd6ab6 mergedlo!Application::Execute+0x145 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 473]
      00e3fde4 11ca3813 mergedlo!desktop::Desktop::Main+0xd76 [c:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\app.cxx @ 1652]
      00e3fe0c 11ca3bd9 mergedlo!ImplSVMain+0x63 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 185]
      00e3fe18 10df2826 mergedlo!SVMain+0x29 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 224]
      00e3ff6c 0040101e mergedlo!soffice_main+0x116 [c:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\sofficemain.cxx @ 166]
      WARNING: Stack unwind information not available. Following frames may be wrong.
      00e3ffc0 7c773584 soffice+0x101e
      00e3fff0 00000000 KERNEL32!BaseProcessStartup+0x54 [c:\ros\reactos\reactos\dll\win32\kernel32\client\proc.c @ 478]
      

        Attachments

          Activity

            People

            • Assignee:
              ThFabba Thomas Faber
              Reporter:
              ThFabba Thomas Faber
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: