124647 – CRASH: after undoing deletion ( steps in comment 5 )

Bug 124647 - CRASH: after undoing deletion ( steps in comment 5 )

Summary: CRASH: after undoing deletion ( steps in comment 5 )

Status:	NEW

Alias:	None

Product:	LibreOffice
Classification:	Unclassified
Component:	Writer (show other bugs)
Version: (earliest affected)	Inherited From OOo
Hardware:	All All

Importance:	medium critical
Assignee:	Not Assigned

URL:
Whiteboard:
Keywords:

Duplicates (1):	125906 (view as bug list)
Depends on:
Blocks:	Undo-Redo Crash
	Show dependency tree / graph

Reported:	2019-04-10 09:51 UTC by Xisco Faulí
Modified:	2024-03-20 05:28 UTC (History)
CC List:	6 users (show)

See Also:	https://crashreport.libreoffice.org/stats/signature/SwHistoryBookmark::SetInDoc(SwDoc%20*,bool) 118392 159683
Crash report or crash signature:	["SwHistoryBookmark::SetInDoc(SwDoc ,bool)","SwHistoryBookmark::SetInDoc(SwDoc, bool)","SwHistoryBookmark::SetInDoc","SwNodeIndex::operator=(SwNode const &)","swlo.dll","libstdc++.so.6"]

Attachments
gdb (deleted) 2019-04-10 10:03 UTC, Xisco Faulí	Details
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Xisco Faulí 2019-04-10 09:51:08 UTC Comment hidden (obsolete)

Steps to reproduce:
1. Open attachment 143131 [details] from bug 118392
2. Select all
3. Undo

Reproduced in

Version: 6.3.0.0.alpha0+
Build ID: 040a54d89e8ca33171e86647ced8dc58efd85fbe
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded

Comment 1 Xisco Faulí 2019-04-10 09:52:43 UTC

Reproduced back to

Version: 6.3.0.0.alpha0+
Build ID: 040a54d89e8ca33171e86647ced8dc58efd85fbe
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded

Comment 2 Xisco Faulí 2019-04-10 10:03:49 UTC

Created attachment 150653 [details]
gdb

Comment 3 Dieter 2019-04-10 10:06:10 UTC

Steps not really clear to me. After selecting all I can't undo. Selecting all => delete all => undo => no crash

Version: 6.3.0.0.alpha0+ (x64)
Build ID: 421e6fc3cd2e6fe37afbef341e2d0ad7b8edde37
CPU threads: 4; OS: Windows 10.0; UI render: default; VCL: win; 
TinderBox: Win-x86_64@42, Branch:master, Time: 2019-04-07_01:12:58
Locale: en-US (de_DE); UI-Language: en-US
Calc: threaded

Comment 4 Xisco Faulí 2019-04-10 10:13:34 UTC

The content of attachment 150653 [details] has been deleted for the following reason:

wrong upgrade

Comment 5 Xisco Faulí 2019-04-11 09:04:18 UTC

Steps to reproduce:
1. Open attachment 143131 [details] from bug 118392
2. Select all
3. Delete
4. Undo

Reproduced in

Version: 6.3.0.0.alpha0+
Build ID: 040a54d89e8ca33171e86647ced8dc58efd85fbe
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded

Comment 6 Aron Budea 2019-04-12 04:23:20 UTC

Confirmed using LO 6.2.2.2 / Windows 7, though my crash reports aren't very informative:
https://crashreport.libreoffice.org/stats/crash_details/90011791-0927-487b-a0b1-89df25ee5a9f

Comment 7 Xisco Faulí 2019-06-14 10:43:41 UTC

*** Bug 125906 has been marked as a duplicate of this bug. ***

Comment 8 Xisco Faulí 2019-07-29 15:32:47 UTC

Still reproducible in

Version: 6.4.0.0.alpha0+
Build ID: 0d36b32755ac662299e6a8165e9fa57311b74a2f
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded

@Michael Stahl, I thought you might be interested in this issue..

Comment 9 QA Administrators 2022-05-17 03:31:19 UTC Comment hidden (obsolete)

Dear Xisco Faulí,

To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year.

There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present.

If you have time, please do the following:

Test to see if the bug is still present with the latest version of LibreOffice from https://www.libreoffice.org/download/

If the bug is present, please leave a comment that includes the information from Help - About LibreOffice.

If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a comment that includes the information from Help - About LibreOffice.

Please DO NOT

Update the version field
Reply via email (please reply directly on the bug tracker)
Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not
appropriate in this case)

If you want to do more to help you can test to see if your issue is a REGRESSION. To do so:
1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) from https://downloadarchive.documentfoundation.org/libreoffice/old/

2. Test your bug
3. Leave a comment with your results.
4a. If the bug was present with 3.3 - set version to 'inherited from OOo';
4b. If the bug was not present in 3.3 - add 'regression' to keyword

Feel free to come ask questions or to say hello in our QA chat: https://web.libera.chat/?settings=#libreoffice-qa

Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-UntouchedBug

Comment 10 Tex2002ans 2024-02-10 12:16:59 UTC

Was able to get crash:

- https://crashreport.libreoffice.org/stats/crash_details/52603efc-e834-42c3-9e9e-57d22e5ffb81

using the test document in comment 5.

It wasn't *exactly* using the steps in comment 5, since I couldn't get it to crash with 1 "Select All"/Delete, but I did a few instead.

- - -

0. Open attachment 143131 [details].
1. Ctrl+A.
2. DELETE key.
3. Repeat Steps 1+2 until document is blank.
   - 3 times for me.
4. Ctrl+Z multiple times until CRASH.
   - 2 times for me.

- - -

CRASH was in:

Version: 24.2.0.3 (X86_64) / LibreOffice Community
Build ID: da48488a73ddd66ea24cf16bbc4f7b9c08e9bea1
CPU threads: 8; OS: Windows 10.0 Build 22631; UI render: Skia/Raster; VCL: win
Locale: en-US (en_US); UI: en-US
Calc: CL threaded

Comment 11 Stéphane Guillou (stragu) 2024-03-20 05:28:30 UTC

Reproduced as in comment 5 on Linux with LO 6.3, with signature "SwHistoryBookmark::SetInDoc": https://crashreport.libreoffice.org/stats/crash_details/df8f5281-b799-46bb-8a3e-84cecfa89408

Version: 6.3.0.4
Build ID: 057fc023c990d676a43019934386b85b21a9ee99
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3; 
Locale: en-AU (en_AU.UTF-8); UI-Language: en-US
Calc: CL

That signature was last seen in 7.1.7.2.

In 7.2, same steps lead to "SwHistoryBookmark::SetInDoc(SwDoc*, bool)" signature.
https://crashreport.libreoffice.org/stats/crash_details/7dfde548-8b20-42dd-ab71-7b0f6eaca9fb

Version: 7.2.0.4 / LibreOffice Community
Build ID: 9a9c6381e3f7a62afc1329bd359cc48accb6435b
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: CL

That signature was last seen in 7.6.5.2.

With 7.6.5.2 and 24.2.1.1, I get "libstdc++.so.6": https://crashreport.libreoffice.org/stats/crash_details/1010a85d-102f-43b8-b788-4687a8675154

Version: 24.2.1.2 (X86_64) / LibreOffice Community
Build ID: db4def46b0453cc22e2d0305797cf981b68ef5ac
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: CL threaded

If Ubuntu catches it, it reports "soffice.bin crashed with SIGSEGV in SwContentIndex::ChgValue()".

24.2 Backtrace from Apport:

#0  0x00007ae678282940 in SwContentIndex::ChgValue(SwContentIndex const&, int)
    () at /opt/libreoffice24.2/program/../program/libswlo.so
#1  0x00007ae6782ce19f in SwPosition::SwPosition(SwNode const&, o3tl::strong_int<int, Tag_SwNodeOffset>) ()
    at /opt/libreoffice24.2/program/../program/libswlo.so
#2  0x00007ae6782cff9f in SwPaM::SwPaM(SwNode const&, int, SwPaM*) ()
    at /opt/libreoffice24.2/program/../program/libswlo.so
#3  0x00007ae6786b723b in  ()
    at /opt/libreoffice24.2/program/../program/libswlo.so
#4  0x00007ae678779850 in  ()
    at /opt/libreoffice24.2/program/../program/libswlo.so
#5  0x00007ae6bbf08b68 in  () at /opt/libreoffice24.2/program/libmergedlo.so
#6  0x00007ae6bf12a20b in  () at /opt/libreoffice24.2/program/libuno_sal.so.3
#7  0x00007ae6ba094ac3 in start_thread (arg=<optimised out>)
    at ./nptl/pthread_create.c:442
#8  0x00007ae6ba126850 in clone3 ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Still crashing in recent trunk build:

Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 479b5bbe8ca2177ba7574e7aa2308b5d0de1895c
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: CL threaded