Bug 108930 - Crash in: SfxItemPool::IsInRange(unsigned short)
Summary: Crash in: SfxItemPool::IsInRange(unsigned short)
Status: RESOLVED DUPLICATE of bug 108881
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
5.3.3.2 release
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-07-03 16:52 UTC by Telesto
Modified: 2017-07-04 10:21 UTC (History)
1 user (show)

See Also:
Crash report or crash signature: ["SfxItemPool::IsInRange(unsigned short)"]


Attachments
Example file (11.42 KB, application/x-vnd.oasis.opendocument.spreadsheet)
2017-07-03 16:52 UTC, Telesto
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2017-07-03 16:52:16 UTC
Created attachment 134461 [details]
Example file

This bug was filed from the crash reporting server and is br-a5012f31-7fd9-4a04-9c88-5a51502ef11a.
=========================================
Based on/similar to bug 108881

Steps to reproduce
1. Open the attached file
2. Cut the Ole Chart object
3. Close the Calc document (gray cross). No saving.
4. Open a new Writer document from start center
5. Paste the Ole object -> No effect
6. Click insert chart in the toolbar -> Crash with LibO 5.4.0.1 

When using LibO5.3.3.1
7. Close LibreOffice (red cross)
8. Kill the background process soffice.bin in the task manager
9. Run LibreOffice again -> Crash report
Comment 1 Xisco Faulí 2017-07-04 09:21:12 UTC
Reproduced in

Versión: 5.3.3.2
Id. de compilación: 3d9a8b4b4e538a85e0782bd6c2d430bafe583448
Subproc. CPU: 1; SO: Windows 6.1; Repr. de IU: predet.; Motor de trazado: HarfBuzz; 
Configuración regional: es-ES (es_ES); Calc: group

and in

Version: 6.0.0.0.alpha0+
Build ID: 7931ef2abbcef22de5cdddd26738e4dd8d1d8ca5
CPU threads: 4; OS: Linux 4.8; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); Calc: group

I found a systematic way to reproduce the crash:

1. Open the attached document
2. Cut the chart
3. Close the document without saving
4. Open the same document
5. Paste the chart
6. Crash
Comment 2 Xisco Faulí 2017-07-04 09:38:02 UTC

*** This bug has been marked as a duplicate of bug 108881 ***
Comment 3 Telesto 2017-07-04 09:58:08 UTC
@Xisco
The steps you're describing are exact the same as bug 108881. This crash is surely related to bug 108881. The only reason I reported both separately because the the different crash reports I get:

With these steps I get:
1. Open the attached document
2. Cut the chart
3. Close the document without saving
4. Open the same document
5. Paste the chart
6. Crash

(SfxItemPool::GetDefaultItem(unsigned short) -> http://crashreport.libreoffice.org/stats/crash_details/875de168-4b46-4cde-b11c-237b653e1752 

with this report I get
(SfxItemPool::IsInRange(unsigned short) 
crashreport.libreoffice.org/stats/crash_details/8d7e1c21-53e5-4bda-8fb2-f4f34dcd2acd 

The main difference is that Writer keeps working correctly. It doesn't crash after the paste. Which Calc does. Full steps to reproduce:
1. Open Writer
2. Add a chart
3. Copy the chart
4. Close Writer
5. Open Calc
6. Paste the Chart
7. Copy the chart again
8. Close Calc
9. Open a new Writer document and paste (working)
10. Close LibreOffice (soffice won't quite) -> and will lock the entire Windows clipboard 

The problem is generated by bug 108881 (in this case). But perhaps a fail-safe should be build in to avoid the crash? I expect that there are other cases in which this could happen. Pasting an broken ole object from a third party application for example, but that's only my logic.
Comment 4 Xisco Faulí 2017-07-04 10:21:41 UTC
Following my steps ( the same as in bug 108881 ), I get this crashreport: http://crashreport.libreoffice.org/stats/crash_details/5dcbfe7e-b281-4814-a462-35dae5b9dc85, That's why, I closed this as duplicated.