Bug 122081 - Crash in SwFrame::FindFootnoteBossFrame(bool)
Summary: Crash in SwFrame::FindFootnoteBossFrame(bool)
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
5.4.1.2 release
Hardware: All All
: medium normal
Assignee: Caolán McNamara
URL:
Whiteboard: target:7.6.0 target:7.5.5
Keywords:
Depends on:
Blocks: Crash
  Show dependency treegraph
 
Reported: 2018-12-13 17:05 UTC by Xisco Faulí
Modified: 2023-06-02 09:30 UTC (History)
6 users (show)

See Also:
Crash report or crash signature: ["SwFrame::FindFootnoteBossFrame(bool)"]


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Xisco Faulí 2018-12-13 17:05:28 UTC
This is a follow-up bug of bug 101821 based on this comment: https://bugs.documentfoundation.org/show_bug.cgi?id=101821#c38

Steps I found to reproduce it reliable:
1. Open attachment 127161 [details] from bug 101821
2. Ctrl + End
3. Ctrl + Start
4. Go to page 29
5. Scroll down a bit
-> Crash

another way I found:
1. Open attachment 127161 [details] from bug 101821
2. Press F5
3. Try to delete all bookmarks
-> at some point it crashes as well

Reproduced in

Versión: 6.1.3.2
Id. de compilación: 86daf60bf00efa86ad547e59e09d6bb77c699acb
Subprocs. CPU: 1; SO: Windows 6.1; Repres. IU: predet.; 
Configuración regional: es-ES (es_ES); Calc: group threaded

and

Version: 6.3.0.0.alpha0+
Build ID: e98bcfcc3cdad46620e3d59119b0ac262db88054
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded
Comment 1 Xisco Faulí 2018-12-13 17:09:50 UTC
@Michael Stahl, Since you fixed bug 101821, I thought you could be interested in this issue...
Comment 2 Durgapriyanka 2018-12-13 17:54:24 UTC
Thank you for reporting the bug. I can confirm that the bug is present in

Version: 6.3.0.0.alpha0+
Build ID: 3c964980da07892a02d5ac721d80558c459532d0
CPU threads: 2; OS: Windows 6.1; UI render: default; VCL: win; 
TinderBox: Win-x86@42, Branch:master, Time: 2018-12-12_02:07:45
Locale: en-US (en_US); UI-Language: en-US
Calc: threaded
Comment 3 Telesto 2020-01-03 21:38:13 UTC
Repro
Version: 6.5.0.0.alpha0+ (x64)
Build ID: 42a1a1c6b91907f81e15066ffab219411f18c4db
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: GL; VCL: win; 
Locale: nl-NL (nl_NL); UI-Language: en-US
Calc: CL
Comment 4 Pénzes Dávid 2021-12-20 13:47:50 UTC
Repro

Version: 7.2.4.1 (x64) / LibreOffice Community
Build ID: 27d75539669ac387bb498e35313b970b7fe9c4f9
CPU threads: 4; OS: Windows 10.0 Build 19043; UI render: Skia/Raster; VCL: win
Locale: hu-HU (hu_HU); UI: hu-HU
Calc: threaded

Crash:
https://crashreport.libreoffice.org/stats/crash_details/fef8d364-f2b4-4805-a260-0a013a7bc5f4
Comment 5 Pénzes Dávid 2022-01-06 11:10:16 UTC
Repro

Version: 7.2.5.2 (x64) / LibreOffice Community
Build ID: 499f9727c189e6ef3471021d6132d4c694f357e5
CPU threads: 8; OS: Windows 10.0 Build 19044; UI render: Skia/Raster; VCL: win
Locale: hu-HU (hu_HU); UI: hu-HU
Calc: threaded

Crash link:
https://crashreport.libreoffice.org/stats/crash_details/f6bc8f08-b16f-4ad8-9053-8a39e095d7c7
Comment 6 Pénzes Dávid 2022-03-29 06:19:39 UTC
Repro

Version: 7.2.6.2 (x64) / LibreOffice Community
Build ID: b0ec3a565991f7569a5a7f5d24fed7f52653d754
CPU threads: 8; OS: Windows 10.0 Build 19044; UI render: Skia/Raster; VCL: win
Locale: hu-HU (hu_HU); UI: hu-HU
Calc: threaded
Comment 7 Commit Notification 2023-06-01 22:35:04 UTC
Caolán McNamara committed a patch related to this issue.
It has been pushed to "master":

https://git.libreoffice.org/core/commit/389a8d52d9961f89c0b2847b30ee1ca59a8fdc80

Related: tdf#122081 null-deref of SwFootnoteFrame

It will be available in 7.6.0.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.
Comment 8 Caolán McNamara 2023-06-02 09:01:07 UTC
I was able to reproduce the crash via the first set of steps above and the above fixed it for me so I'll risk claiming that this is fixed in trunk. A backport to 7-5 in gerrit.
Comment 9 Commit Notification 2023-06-02 09:30:01 UTC
Caolán McNamara committed a patch related to this issue.
It has been pushed to "libreoffice-7-5":

https://git.libreoffice.org/core/commit/445698dca110520673c89138b80e822a5d8086b5

Related: tdf#122081 null-deref of SwFootnoteFrame

It will be available in 7.5.5.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.