Bug 124739 - Crash in SwTextNode::SplitContentNode(SwPosition const &,std::function<void > const *)
Summary: Crash in SwTextNode::SplitContentNode(SwPosition const &,std::function<void >...
Status: RESOLVED DUPLICATE of bug 124721
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
6.3.0.0.alpha0+
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-04-14 19:36 UTC by Xisco Faulí
Modified: 2019-04-16 13:55 UTC (History)
3 users (show)

See Also:
Crash report or crash signature: ["SwTextNode::SplitContentNode(SwPosition const &,std::function<void > const *)"]

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Xisco Faulí 2019-04-14 19:36:19 UTC 
Steps to reproduce:
1. Open attachment 94647 [details] from bug 75440
2. Select all
3. Copy
4. Paste 2 times
5. Undo 2 times

-> Crash

Reproduced in

Version: 6.3.0.0.alpha0+
Build ID: 3b518953a8141b0d5043c2f3996a92956fdc3a47
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded
Comment 2 Xisco Faulí 2019-04-14 22:16:14 UTC 
Same signature crash with attachment 46861 [details] from bug 37315
Comment 3 Michael Stahl (allotropia) 2019-04-16 10:29:59 UTC 
this is the same as 124721 - at-char fly anchored in last node gets duplicated on Undo, 3 additional nodes offset everything else:

[  14]  0x971ce20           StartNode , 
[  15]   0x971aa40            GrfNode , 
[  16]  0x971cde0             EndNode , 

libreoffice-6-1/sw/source/core/txtnode/thints.cxx:1266: bool SwTextNode::InsertHint(SwTextAttr*, SetAttrMode): Assertion `!pAttr->GetEnd() || (*pAttr->GetEnd() <= Len())' failed.

not a regression from sw_redlinehide.

*** This bug has been marked as a duplicate of bug 124721 ***