GNOME Bugzilla – Bug 497477
CHITEST crash
Last modified: 2007-11-30 16:36:57 UTC
Steps to reproduce: 1. Open http://launchpadlibrarian.net/10442371/alto.gnumeric 2. Click on cell H129 3. Try to delete the cell. Stack trace: GNU gdb 6.6-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i486-linux-gnu"... Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". (gdb) handle SIG33 pass nostop noprint Signal Stop Print Pass to program Description SIG33 No No Yes Real-time event 33 (gdb) set pagination 0 (gdb) run Starting program: /usr/bin/gnumeric [Thread debugging using libthread_db enabled] [New Thread -1225222480 (LWP 4222)] ** (/usr/bin/gnumeric:4222): WARNING **: Using default value '1' Reading file:///home/famille/Desktop/alto.gnumeric Program received signal SIGSEGV, Segmentation fault.
+ Trace 178203
Thread NaN (LWP 4222)
Thread 1 (Thread -1225222480 (LWP 4222))
The program is running. Exit anyway? (y or n) Other information: This was reported on Launchpad: https://bugs.launchpad.net/ubuntu/+source/gnumeric/+bug/114644 by: https://bugs.launchpad.net/~alioth87-online Reported when using 1.7.8, original stack trace: http://launchpadlibrarian.net/7634213/%3Cfdopen%3E Threadstacktrace: http://launchpadlibrarian.net/7634214/%3Cfdopen%3E I could reproduce with 1.7.11 and produced the stack trace I copied here.
Can reproduce. Here's my stack trace:
+ Trace 178226
The crashing line is plugins/fn-stat/functions.c:1496 p2.current_cell = p1.columns->data; where p1.columns == NULL p1 = {columns = 0x0, column = 0x883ec90, col = 0, row = 4, cols = 1, rows = 5}
That code needs life support. This problem has been fixed in the development version. The fix will be available in the next major software release. Thank you for your bug report.
Thanks !
Could you please provide the final patch for this ? Is it safe to apply it on gnumeric 1.7.11 source ? Thanks.
The first here is the stop-gap fix. The next two actually make the function sane. http://svn.gnome.org/viewvc/gnumeric/trunk/plugins/fn-stat/functions.c?r1=16019&r2=16158 http://svn.gnome.org/viewvc/gnumeric/trunk/plugins/fn-stat/functions.c?r1=16160&r2=16163 http://svn.gnome.org/viewvc/gnumeric/trunk/plugins/fn-stat/functions.c?r1=16163&r2=16165
Thank you.