This bug was filed from the crash reporting server and is br-17143bf4-0204-406e-861e-4884e962d48b.
LO crashes upon closing an odt document. This is a small document (8 pages) which contains however a lot of math formulas (Objects). There was no apparent problem with this file before closing.
A copy of this file could aferwards be opened w/o problem and be saved.
I suspect LO not to accept too many formulas in a document, since I already had similar problems several years ago (with the French LO version at that time, which I could resolve by re-installing the English version).
Thank you for reporting the bug. Please attach a sample document, as this makes it easier for us to verify the bug.
I have set the bug's status to 'NEEDINFO'. Please change it back to 'UNCONFIRMED' once the requested document is provided.
(Please note that the attachment will be public, remove any sensitive information before attaching it.
See https://wiki.documentfoundation.org/QA/FAQ#How_can_I_eliminate_confidential_data_from_a_sample_document.3F for help on how to do so.)
BTW, on which version do you reproduce the problem ?
Created attachment 131745 [details]
Copy of file when crashed Writer upon closing
My LO version= 184.108.40.206
The crash occured only once with this file; can't be repeated.
To me, it seems like a duplicate of bug 104830 and you shouldn't be able to reproduce it in 220.127.116.11 now. Probably you reproduced it in 5.2.4
In order to reproduce the crash in 5.2.4 you needed to copy something into the clipboard and then close LibreOffice...
Closing as RESOLVED DUPLICATED.
Please, reopen it if you see the crash again.
*** This bug has been marked as a duplicate of bug 104830 ***
no duplicate of bug 104830, crash report states 18.104.22.168
backtrace shows similarities to crash report for bug 105941 / bug 85651
both backtraces lead to an ancient hack introduced in 2002
this crash happens on SwFormatDrop
crash from bug 105941 / bug 85651 on SwFormatCharFormat
thank you for investigating it.
Do you think of any way we can trigger the crash?
I was unaware of a crash until I restarted LO and got a crash report. I closed LO 22.214.171.124 last night on a single document of less than two pages, and I put the laptop to sleep (possibly "hibernate") overnight. The crash document had only ordinary text in a 3-column table of 3x31 cells. When I started LO this morning, the crash reporter sent me here. I have not reproduced the crash. Copying or cutting text to the clipboard, with with or without modification of the document, and either closing LO or closing the document first and then quitting LO, does not reproduce it.
(In reply to Xisco Faulí from comment #5)
> Do you think of any way we can trigger the crash?
sadly no, the code from bug 85651, comment 4 looks like a reproducer but I don't have the tools for that.
An other approach would be to remove said hack and see if we still leak like the comment claimed 15 years ago. sadly the bug report in the commit line is lost too.
removing the lines, writer still worked as expected and unit test passed.
A patch has been pushed to https://cgit.freedesktop.org/libreoffice/core/commit/?id=6d51bb3d54ac52e4870bd00a21fce3a3b1c5010b
However, it hasn't been communicated...
Jochen Nitschke committed a patch related to this issue.
It has been pushed to "libreoffice-5-3":
tdf#106424 fix crash in SfxItemPool::Put
It will be available in 5.3.4.
The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
Affected users are encouraged to test the fix and report feedback.
Following Jochen's patch, let's put this one to FIXED
F. Toulmay: don't hesitate to reopen this tracker if you still reproduce this with future 5.3.4