Bug 119308

Summary: CRASH: EDITING: Fatal Error "HoriOrient" when add Text field to copied shape
Product: LibreOffice Reporter: Rainer Bielefeld Retired <LibreOffice>
Component: WriterAssignee: Not Assigned <libreoffice-bugs>
Status: RESOLVED FIXED    
Severity: major CC: Armin.Le.Grand, LibreOffice, serval2412, telesto, xiscofauli
Priority: high Keywords: bibisected, regression, wantBacktrace
Version: 6.1.0.3 release   
Hardware: All   
OS: All   
Whiteboard:
Crash report or crash signature: Regression By:
Bug Depends on:    
Bug Blocks: 116979    
Attachments: Screenshot of error message

Description Rainer Bielefeld Retired 2018-08-16 05:56:01 UTC 
Created attachment 144223 [details]
Screenshot of error message

Steps how to reproduce with Version: 6.1.0.3 (x64)
Build-ID: efb621ed25068d70781dc026f7e9c5187a4decd1
CPU-Threads: 4; BS: Windows 6.1; UI-Render: GL; 
Gebietsschema: de-DE (de_DE); Calc: group threaded, Colibre Theme:

1. From Start Center open new Draw Document
2. From Drawings Toolbar Insert Smiley shape
3. 'Rightclick -> Copy (Smiley)
4. Menu 'File -> New -> Writer Document
5. 'Rightclick into document -> Paste'
6. 'Rightclick Smiley -> Insert Text Field'
    CRASH                                                                  đŸ˜„

a) Crash only happens for shape copied from DRAW (or Calc), not for the same
   shape type directly inserted into writer document
Comment 1 Rainer Bielefeld Retired 2018-08-16 05:57:14 UTC 
b) Error Message: "LibreOffice 6.1 Fatal Error - HoriOrient"
Comment 2 Rainer Bielefeld Retired 2018-08-16 05:59:05 UTC 
c) Not a problem with Version: 6.0.5.2 (x64)
Comment 3 Xisco FaulĂ­ 2018-08-16 07:34:17 UTC 
Reproduced in

Version: 6.2.0.0.alpha0+
Build ID: 1af7f19224f18e5025352339648db659575eae33
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); Calc: threaded
Comment 4 Xisco FaulĂ­ 2018-08-16 07:37:10 UTC 
This worked correctly up to https://cgit.freedesktop.org/libreoffice/core/commit/?id=dfefe448c41921f2f1e54d3f69b8b9e89031d055 when it started to crash copying the smiley to writer. The crash got fixed in https://cgit.freedesktop.org/libreoffice/core/commit/?id=91b0d2122bdee361bf5412a42d48ff051159cbf2 and the problem is already reproduced at this point...
Most likely, related to SOSAW080.

Adding Cc: to Armin Le Grand
Comment 5 Julien Nabet 2018-08-16 09:09:13 UTC 
Will give it a try when come back to home to retrieve a bt with symbols.
Comment 6 Julien Nabet 2018-08-16 19:25:33 UTC 
On pc Debian x86-64 with LO Debian package 6.1.0.3, I could reproduce this.
With master sources updated today (9202597373f745b7b83dde1396636e1e619e4e81), I don't reproduce the crash.
Following Xisco's comment, it would mean that the fix could be in the very short range:
https://cgit.freedesktop.org/libreoffice/core/log/?qt=range&q=1af7f19224f18e5025352339648db659575eae33..9202597373f745b7b83dde1396636e1e619e4e81 ?
Comment 7 Xisco FaulĂ­ 2018-08-16 20:23:05 UTC 
Sorry, my comment in comment 3 is incorrect. it fails to paste the image to writer due to bug 118883
This issue is fixed either by https://cgit.freedesktop.org/libreoffice/core/commit/?id=4b4942224b550235da228655677b5c068a053254 or https://cgit.freedesktop.org/libreoffice/core/commit/?id=726d7e7b8b50dca9914329dbfd9491f7c8961f68

I don't know how easy/hard it's to backport it to 6-1.

Armin??