Bug 117155 - !!br0ken!! mysteriously appears in Spellcheck after some steps
Summary: !!br0ken!! mysteriously appears in Spellcheck after some steps
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Linguistic (show other bugs)
Version:
(earliest affected)
6.1.0.0.alpha0+
Hardware: All All
: medium minor
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: haveBacktrace
Depends on:
Blocks:
 
Reported: 2018-04-22 12:03 UTC by Telesto
Modified: 2019-09-16 12:24 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:


Attachments
bt with debug symbols (5.47 KB, text/plain)
2019-03-10 13:33 UTC, Julien Nabet
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2018-04-22 12:03:14 UTC
Description:
!!br0ken!! mysteriously appears in Spellcheck after some steps (follow up of bug 116725)

Steps to Reproduce:
1. Language English USA (or something else)
2. Type: Hollo
3. F7
4. Manual correction in "Not in dictionary" field to say: "Hollo3"
5. Press correct
6. Remove the "3" again 
7. Press correct for the second time -> !!br0ken!!

Actual Results:  
!!br0ken!!

Expected Results:
Probably not? 


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 6.1.0.0.alpha0+
Build ID: 2ed7c02478968852d7d39c2c4677f2ecf3441bc7
CPU threads: 4; OS: Windows 6.3; UI render: default; 
TinderBox: Win-x86@42, Branch:master, Time: 2018-04-22_01:00:56
Locale: nl-NL (nl_NL); Calc: CL


User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Comment 1 Buovjaga 2018-04-23 12:22:50 UTC
Repro.

Arch Linux 64-bit
Version: 6.1.0.0.alpha0+
Build ID: 14184060bd2249a492ea44d36463914c421e6ce5
CPU threads: 8; OS: Linux 4.16; UI render: default; VCL: kde4; 
Locale: fi-FI (fi_FI.UTF-8); Calc: group
Built on April 23rd 2018
Comment 2 Buovjaga 2018-05-29 10:41:10 UTC
I tried with a dbgutil build and it crashed with step 7:

warn:ucb.ucp.gio:13187:13187:ucb/source/ucp/gio/gio_content.cxx:392: ignoring GError "Toiminto ei ole tuettu" for <>
warn:xmloff:13187:13187:xmloff/source/core/xmlerror.cxx:169: An error or a warning has occurred during XML import/export!
Error-Id: 0x4002000d
    Flags: 4 SEVERE
    Class: 2 FORMAT
    Number: d
Parameters:
    0: office:blue
Exception-Message: Root element unknown
Position:
    Public Identifier: 
    System Identifier: BlockList.xml
    Row, Column: 1,114

warn:legacy.osl:13187:13187:sw/source/uibase/dialog/SwSpellDialogChildWindow.cxx:435: ApplyChangedSentence in initial call or after resume
soffice.bin: /home/user/libreoffice/sal/rtl/strtmpl.cxx:1399: void rtl_uString_newFromSubString(rtl_uString**, const rtl_uString*, sal_Int32, sal_Int32): Väite ”false” ei pidä paikkaansa.
warn:legacy.tools:13187:13187:vcl/unx/generic/gdi/salbmp.cxx:130: Unsupported BitCount!
warn:vcl:13187:13187:vcl/source/window/dialog.cxx:864: Dialog::StartExecuteModal() - Parent not visible
Comment 3 Noel Grandin 2018-05-29 10:47:08 UTC
reproducing with buovjaga assistance, I get the stack trace:

(gdb) bt 25
#0  0x00002aaaaaefd428 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
#1  0x00002aaaaaeff02a in __GI_abort () at abort.c:89
#2  0x00002aaaaaef5bd7 in __assert_fail_base (fmt=<optimized out>, assertion=assertion@entry=0x2aaaaab67c68 "false", file=file@entry=0x2aaaaab6ad2d "/home/noel/libo/sal/rtl/strtmpl.cxx", 
    line=line@entry=1399, function=function@entry=0x2aaaaab6d9ea "void rtl_uString_newFromSubString(rtl_uString **, const rtl_uString *, sal_Int32, sal_Int32)") at assert.c:92
#3  0x00002aaaaaef5c82 in __GI___assert_fail (assertion=0x2aaaaab67c68 "false", file=0x2aaaaab6ad2d "/home/noel/libo/sal/rtl/strtmpl.cxx", line=1399, 
    function=0x2aaaaab6d9ea "void rtl_uString_newFromSubString(rtl_uString **, const rtl_uString *, sal_Int32, sal_Int32)") at assert.c:101
#4  0x00002aaaaab2b357 in rtl_uString_newFromSubString (ppThis=0x7ffffffef870, pFrom=0x18697c0, beginIndex=0, count=6) at /home/noel/libo/sal/rtl/strtmpl.cxx:1399
#5  0x00002aaab33f45cb in rtl::OUString::copy (this=0x2c290d0, beginIndex=0, count=6) at /home/noel/libo/include/rtl/ustring.hxx:2214
#6  0x00002aaab3752c65 in TextEngine::GetText (this=0x2c28430, rSel=..., aSeparator=LINEEND_LF) at /home/noel/libo/vcl/source/edit/texteng.cxx:418
#7  0x00002aaaf2bc8847 in svx::SentenceEditWindow_Impl::GetErrorText (this=0x2c25bc0) at /home/noel/libo/cui/source/dialogs/SpellDialog.cxx:1703
#8  0x00002aaaf2bc8ae4 in svx::SpellDialog::getReplacementString (this=0x2bfce10) at /home/noel/libo/cui/source/dialogs/SpellDialog.cxx:526
#9  0x00002aaaf2bc8f30 in svx::SpellDialog::ChangeHdl (this=0x2bfce10) at /home/noel/libo/cui/source/dialogs/SpellDialog.cxx:553
#10 0x00002aaaf2bc4058 in svx::SpellDialog::LinkStubChangeHdl (instance=0x2bfce10, data=0x2c2de60) at /home/noel/libo/cui/source/dialogs/SpellDialog.cxx:544
#11 0x00002aaab3659388 in Link<Button*, void>::Call (this=0x2c2e0a0, data=0x2c2de60) at /home/noel/libo/include/tools/link.hxx:84
#12 0x00002aaab365483c in Button::Click()::$_0::operator()() const (this=0x7ffffffefd08) at /home/noel/libo/vcl/source/control/button.cxx:123
#13 0x00002aaab36546dd in std::_Function_handler<void (), Button::Click()::$_0>::_M_invoke(std::_Any_data const&) (__functor=...)
    at /usr/lib/gcc/x86_64-linux-gnu/5.4.0/../../../../include/c++/5.4.0/functional:1871
#14 0x00002aaab36703ee in std::function<void ()>::operator()() const (this=0x7ffffffefd08) at /usr/lib/gcc/x86_64-linux-gnu/5.4.0/../../../../include/c++/5.4.0/functional:2267
#15 0x00002aaab366ddc1 in Control::ImplCallEventListenersAndHandler(VclEventId, std::function<void ()> const&) (this=0x2c2de60, nEvent=VclEventId::ButtonClick, callHandler=...)
    at /home/noel/libo/vcl/source/control/ctrl.cxx:312
#16 0x00002aaab363cec8 in Button::Click (this=0x2c2de60) at /home/noel/libo/vcl/source/control/button.cxx:123
#17 0x00002aaab36438ef in PushButton::Tracking (this=0x2c2de60, rTEvt=...) at /home/noel/libo/vcl/source/control/button.cxx:1273
#18 0x00002aaab35e8e3d in vcl::Window::EndTracking (this=0x2c2de60, nFlags=TrackingEventFlags::NONE) at /home/noel/libo/vcl/source/window/window2.cxx:365
#19 0x00002aaab3628dcd in ImplHandleMouseEvent (xWindow=..., nSVEvent=MouseNotifyEvent::MOUSEBUTTONUP, bMouseLeave=false, nX=594, nY=245, nMsgTime=335672645, nCode=1, 
    nMode=(MouseEventModifiers::SIMPLECLICK | MouseEventModifiers::SELECT)) at /home/noel/libo/vcl/source/window/winproc.cxx:705
#20 0x00002aaab3631f0e in ImplHandleSalMouseButtonUp (pWindow=0x2bfce10, pEvent=0x7fffffff13b8) at /home/noel/libo/vcl/source/window/winproc.cxx:1994
#21 0x00002aaab362c3c9 in ImplWindowFrameProc (_pWindow=0x2bfce10, nEvent=SalEvent::MouseButtonUp, pEvent=0x7fffffff13b8) at /home/noel/libo/vcl/source/window/winproc.cxx:2330
#22 0x00002aaac2ba4fb5 in SalFrame::CallCallback (this=0x2c00550, nEvent=SalEvent::MouseButtonUp, pEvent=0x7fffffff13b8) at /home/noel/libo/vcl/inc/salframe.hxx:279
Comment 4 Telesto 2018-05-29 11:32:05 UTC
Some comments about the assert: bug 116725 comment 7
Comment 5 Julien Nabet 2019-03-08 15:21:05 UTC
On Win10 + master sources updated today + enable-dbgutil, I could reproduce this and noticed this:
warn:legacy.osl:83840:93216:vcl/source/edit/textdoc.cxx:530: PaM: Index out of range
warn:vcl:83840:93216:vcl/source/edit/texteng.cxx:539: ImpDeleteText(2): bad Index

I wanted to use Windbg64 but LO aborted, so no stacktrace.
Comment 6 Julien Nabet 2019-03-08 15:25:20 UTC
(In reply to Julien Nabet from comment #5)
> On Win10 + master sources updated today + enable-dbgutil, I could reproduce
> ...

Argh, more precisely, I didn't reproduce this but had an assert.
I suppose both are related.
Comment 7 Julien Nabet 2019-03-10 13:33:09 UTC
Created attachment 149859 [details]
bt with debug symbols

On pc Debian x86-64 with master sources updated today, I had an assert.
This one is related to the crash since we got:
1376	    if ( count < 0 || beginIndex < 0 || beginIndex + count > pFrom->length )
1377	    {
1378	        assert(false); // fail fast at least in debug builds
1379	        IMPL_RTL_STRINGNAME( newFromLiteral )( ppThis, "!!br0ken!!", 10, 0 );
1380	        return;
1381	    }
Comment 8 okdf@johnfreed.com 2019-08-28 11:13:25 UTC
This appears to have been fixed with the fixing of bug 116725. Closing.