Bug 85185

Summary: COLOR PICKER: Selecting a custom color crashes LibO
Product: LibreOffice Reporter: Yousuf Philips (jay) (retired) <philipz85>
Component: LibreOfficeAssignee: Matthew Francis <fdbugs>
Status: RESOLVED FIXED    
Severity: normal CC: barta, fdbugs
Priority: medium    
Version: 4.4.0.0.alpha0+ Master   
Hardware: Other   
OS: All   
Whiteboard: BSA target:4.4.0
Crash report or crash signature: Regression By:
Bug Depends on:    
Bug Blocks: 85184    
Attachments: linux backtrace
linux backtrace (2)

Description Yousuf Philips (jay) (retired) 2014-10-18 21:29:55 UTC 
Created attachment 108043 [details]
linux backtrace

Steps:
1) Open Writer
2) Click on the font color drop down
3) Click the color picker button at the bottom of the drop down
4) Select some random color
5) Press OK button
6) Crash

Version: 4.4.0.0.alpha0+
Build ID: 3b6ee58652d99accd610425264114d1d5b3330df
TinderBox: Linux-rpm_deb-x86@45-TDF, Branch:master, Time: 2014-10-15_21:41:26
Comment 1 tommy27 2014-10-19 06:13:16 UTC 
no crash under Win7x64 with  4.4.0.0.alpha0+
Build ID: 3e2bd1e4022e25b77bcc8eba5e02c1adc57008a1
TinderBox: Win-x86@42, Branch:master, Time: 2014-10-16_01:04:13

is the crash specific to the font color picker or does it happen with highlighting and backgrond color pickers as well?
Comment 2 Matthew Francis 2014-10-19 07:50:02 UTC 
Confirmed on 4.4 master on Linux and OSX

-> NEW
Comment 3 Matthew Francis 2014-10-19 07:53:58 UTC 
Created attachment 108053 [details]
linux backtrace (2)

More detailed backtrace from gdb - appears to show a corrupt string in an argument going some way back up the stack
Comment 4 Matthew Francis 2014-10-19 08:27:50 UTC 
In the middle of PaletteManager::PopupColorPicker(...), while control wanders off to the popup through aColorDialog.Execute(), the SvxColorWindow_Impl from which the call is made is destroyed, and along with it the OUString that was passed-by-reference as "const OUString& aCommand"