Description: Using the Groupedbar Compact interface and creating a Master Document from the file menu, LibreOffice crashes when the new document is saved. Steps to Reproduce: 1. Select the "Groupedbar Compact" layout from the menu "View|User Interface" 2. Open a new Writer document 3. Write something and select "File|Create Master Document", assign a name and save Actual Results: LibreOffice closes unexpectedly and starts document recovery. The following output is shown from the terminal: (soffice:12): GLib-GObject-CRITICAL **: 04:52:59.202: g_object_unref: assertion 'G_IS_OBJECT (object)' failed Expected Results: LibreOffice saves the document correctly, showing the Master Document interface Reproducible: Always User Profile Reset: Yes OpenGL enabled: Yes Additional Info: Version: 6.2.4.2 Build ID: 2412653d852ce75f65fbfa83fb7e7b669a126d64 CPU threads: 2; OS: Linux 5.1; UI render: default; VCL: gtk3; Flatpak Locale: es-CL (es_CL.UTF-8); UI-Language: en-US Calc: threaded * In Safe Mode, LibreOffice saves the document successfully and the Master Document interface is displayed, however, the document recovery starts but when clicking on accept button, LibreOffice closes unexpectedly. * If you activate the Menubar and select "File|Send|Create Master Document", asign a name and save, it seems to work, however NotebookBar disappears and when you verify the directory, no document has been saved
Through trial and error, I realized that what differentiates my profile from the safe mode is to use the sidebar on the left side instead of the right side. That accentuates the crash.
Confirmed in: Version: 6.4.0.0.alpha0+ Build ID: f75c2b04785aa05cff3bcd52689feb7400a14e8e CPU threads: 4; OS: Linux 4.4; UI render: default; VCL: gtk3; TinderBox: Linux-rpm_deb-x86_64@86-TDF, Branch:master, Time: 2019-06-15_11:49:26 Locale: tr-TR (tr_TR.UTF-8); UI-Language: en-US Calc: threaded
Regression introduced by: https://cgit.freedesktop.org/libreoffice/core/commit/?id=38bef03742c94376a974f84693ff2e48693e6839 author Caolán McNamara <caolanm@redhat.com> 2018-10-01 13:10:10 +0100 committer Caolán McNamara <caolanm@redhat.com> 2018-10-01 18:06:21 +0200 commit 38bef03742c94376a974f84693ff2e48693e6839 (patch) tree adeaffac0b7707f4d08463bef12cb024b2a62102 parent 75a48e37b260c145297261d0e0ab5720894404f1 (diff) pass menuitem ident around directly, instead of deriving from itemid Bisected with: bibisect-linux64-6.2 Adding Cc: to Caolán McNamara
don't think it was really working before that just maybe less likely to crash immediately
Caolán McNamara committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/+/0e79841b4f16ea71b019f298e7887c3c74efeb7e%5E%21 tdf#126054 uses after free when menubutton and menu torn down during execution It will be available in 6.4.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-6-3": https://git.libreoffice.org/core/+/40dfeb8d1e0828ff1f9f7d50e2ff894d45cce9b4%5E%21 tdf#126054 uses after free when menubutton and menu torn down during execution It will be available in 6.3.0.1. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-6-2": https://git.libreoffice.org/core/+/a4f67bce94b080062edf8cd5ba7113d5e384d63d%5E%21 tdf#126054 uses after free when menubutton and menu torn down during execution It will be available in 6.2.6. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Verified in Version: 6.4.0.0.alpha0+ Build ID: fe855eda54faf6196ad9dea12d8dc090b6d6c1da CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US Calc: threaded @Caolán, thanks for the quick fix!!