Bug 126094 - CRASH closing LibreOffice while progress bar dialog is displayed
Summary: CRASH closing LibreOffice while progress bar dialog is displayed
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Calc (show other bugs)
Version:
(earliest affected)
Inherited From OOo
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: Crash
  Show dependency treegraph
 
Reported: 2019-06-25 17:07 UTC by Xisco Faulí
Modified: 2023-05-30 14:34 UTC (History)
11 users (show)

See Also:
Crash report or crash signature: ["SbiRuntime::Step()","Task::Stop()"]


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Xisco Faulí 2019-06-25 17:07:35 UTC
Steps to reproduce:
1. Open attachment 119742 [details] from bug 95173
2. Click on 'Run progress bar macro using Basic script"
3. Close LibreOffice while the dialog is being displayed

-> Crash

Reproduced in

Version: 6.4.0.0.alpha0+
Build ID: 52800731baf9fcb88e54d60de5585640c8f97f7b
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: x11; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded
Comment 1 Xisco Faulí 2019-06-25 17:09:22 UTC
Reproduced in

Version: 5.2.0.0.alpha0+
Build ID: 3ca42d8d51174010d5e8a32b96e9b4c0b3730a53
Threads 4; Ver: 4.15; Render: default; 

Version: 5.0.0.0.alpha1+
Build ID: 0db96caf0fcce09b87621c11b584a6d81cc7df86
Locale: ca-ES (ca_ES.UTF-8)

it needs to be bisected with 5.1 repo...
Comment 2 MM 2019-06-25 17:52:48 UTC
Confirmed on windows 7 x64 with Version: 6.2.4.2 (x64)
Build ID: 2412653d852ce75f65fbfa83fb7e7b669a126d64
CPU threads: 3; OS: Windows 6.1; UI render: default; VCL: win

crashreport.libreoffice.org/stats/crash_details/4c7140d6-4a0b-4b8d-b095-128f9056b58d
Comment 3 raal 2019-06-25 19:05:39 UTC
This seems to have begun at the below commit.
Adding Cc: to Stephan Bergmann; Could you possibly take a look at this one? Thanks
 08651de22b303d690721e3b41424582db16d1937 is the first bad commit
commit 08651de22b303d690721e3b41424582db16d1937
Author: Norbert Thiebaud <nthiebaud@gmail.com>
Date:   Sat Jul 18 07:45:54 2015 -0700

    source 09c5a9d41e03b3137ce47b9f9419290525458337
author	Stephan Bergmann <sbergman@redhat.com>	2015-06-15 14:22:08 +0200
committer	Stephan Bergmann <sbergman@redhat.com>	2015-06-15 17:35:33 +0200
commit 09c5a9d41e03b3137ce47b9f9419290525458337 (patch)
tree bebd5c9672e2e67ebf89bb6f8405444cd52f9940
parent 14aa5c58b8529f81c6ca12a18cbb77f63e27ba62 (diff)
Revert "std::list for Scheduler"
Comment 4 Stephan Bergmann 2019-06-27 08:02:10 UTC
(In reply to raal from comment #3)

please cite the URL of the git repo you were using for bibisection
Comment 5 Stephan Bergmann 2019-06-27 13:20:11 UTC
Following instructions from comment 0 on Linux under valgrind gives

> ==22424== Invalid read of size 8
> ==22424==    at 0x6BFDC15: std::__uniq_ptr_impl<BasicDLL::Impl, std::default_delete<BasicDLL::Impl> >::_M_ptr() const (/usr/lib/gcc/x86_64-redhat-linux/9/../../../../include/c++/9/bits/unique_ptr.h:154)
> ==22424==    by 0x6BFDBD4: std::unique_ptr<BasicDLL::Impl, std::default_delete<BasicDLL::Impl> >::get() const (/usr/lib/gcc/x86_64-redhat-linux/9/../../../../include/c++/9/bits/unique_ptr.h:358)
> ==22424==    by 0x6BFD4F4: std::unique_ptr<BasicDLL::Impl, std::default_delete<BasicDLL::Impl> >::operator->() const (/usr/lib/gcc/x86_64-redhat-linux/9/../../../../include/c++/9/bits/unique_ptr.h:352)
> ==22424==    by 0x6BFD37F: GetSbxData_Impl() (/basic/source/runtime/basrdll.cxx:112)
> ==22424==    by 0x6C3DA88: SbxBase::GetError() (/basic/source/sbx/sbxbase.cxx:96)
> ==22424==    by 0x6BE3AD4: SbiRuntime::Step() (/basic/source/runtime/runtime.cxx:785)
> ==22424==    by 0x6B2A8CC: SbModule::Run(SbMethod*) (/basic/source/classes/sbxmod.cxx:1111)
> ==22424==    by 0x6B29C3D: SbModule::Notify(SfxBroadcaster&, SfxHint const&) (/basic/source/classes/sbxmod.cxx:777)
> ==22424==    by 0x7E62626: SfxBroadcaster::Broadcast(SfxHint const&) (/svl/source/notify/SfxBroadcaster.cxx:49)
> ==22424==    by 0x6B30B64: SbMethod::Broadcast(SfxHintId) (/basic/source/classes/sbxmod.cxx:2071)
> ==22424==    by 0x6C68235: SbxValue::Get(SbxValues&) const (/basic/source/sbx/sbxvalue.cxx:284)
> ==22424==    by 0x6B260D2: SbMethod::Call(SbxValue*, SbxVariable*) (/basic/source/classes/sbxmod.cxx:2027)
> ==22424==    by 0x533DA6EB: basprov::BasicScriptImpl::invoke(com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&) (/scripting/source/basprov/basscript.cxx:231)
> ==22424==    by 0x533DAEDC: non-virtual thunk to basprov::BasicScriptImpl::invoke(com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&) (/scripting/source/basprov/basscript.cxx:0)
> ==22424==    by 0x77F401F: SfxObjectShell::CallXScript(com::sun::star::uno::Reference<com::sun::star::uno::XInterface> const&, rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Any&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&, bool, com::sun::star::uno::Any const*) (/sfx2/source/doc/objmisc.cxx:1404)
> ==22424==    by 0x77F46DB: SfxObjectShell::CallXScript(rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Any&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&, bool, com::sun::star::uno::Any const*) (/sfx2/source/doc/objmisc.cxx:1435)
> ==22424==    by 0x2ED56816: FuSelection::MouseButtonDown(MouseEvent const&) (/sc/source/ui/drawfunc/fusel.cxx:188)
> ==22424==    by 0x2F248A42: ScGridWindow::DrawMouseButtonDown(MouseEvent const&) (/sc/source/ui/view/gridwin3.cxx:63)
> ==22424==    by 0x2F20E15F: ScGridWindow::HandleMouseButtonDown(MouseEvent const&, ScGridWindow::MouseEventState&) (/sc/source/ui/view/gridwin.cxx:1705)
> ==22424==    by 0x2F20D1C8: ScGridWindow::MouseButtonDown(MouseEvent const&) (/sc/source/ui/view/gridwin.cxx:1403)
> ==22424==    by 0xC18E376: ImplHandleMouseEvent(VclPtr<vcl::Window> const&, MouseNotifyEvent, bool, long, long, unsigned long, unsigned short, MouseEventModifiers) (/vcl/source/window/winproc.cxx:697)
> ==22424==    by 0xC19261F: ImplHandleSalMouseButtonDown(vcl::Window*, SalMouseEvent const*) (/vcl/source/window/winproc.cxx:2017)
> ==22424==    by 0xC191310: ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) (/vcl/source/window/winproc.cxx:2351)
> ==22424==    by 0x21042844: SalFrame::CallCallback(SalEvent, void const*) const (/vcl/inc/salframe.hxx:299)
> ==22424==    by 0x2102D936: GtkSalFrame::CallCallbackExc(SalEvent, void const*) const (/vcl/unx/gtk3/gtk3gtkframe.cxx:4346)
> ==22424==    by 0x21031D6D: GtkSalFrame::signalButton(_GtkWidget*, _GdkEventButton*, void*) (/vcl/unx/gtk3/gtk3gtkframe.cxx:2577)
> ==22424==    by 0x215BE8FA: _gtk_marshal_BOOLEAN__BOXED (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkmarshalers.c:83)
> ==22424==    by 0x1223E741: g_closure_invoke (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../gobject/gclosure.c:810)
> ==22424==    by 0x122524F3: signal_emit_unlocked_R (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../gobject/gsignal.c:3635)
> ==22424==    by 0x1225A9C0: g_signal_emit_valist (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../gobject/gsignal.c:3401)
> ==22424==    by 0x1225B972: g_signal_emit (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../gobject/gsignal.c:3447)
> ==22424==    by 0x2156AD12: gtk_widget_event_internal (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkwidget.c:7744)
> ==22424==    by 0x2156AD12: gtk_widget_event_internal (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkwidget.c:7613)
> ==22424==    by 0x21426F57: propagate_event_up (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkmain.c:2582)
> ==22424==    by 0x21426F57: propagate_event (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkmain.c:2685)
> ==22424==    by 0x2142916A: gtk_main_do_event (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkmain.c:1915)
> ==22424==    by 0x2142916A: gtk_main_do_event (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gtk/gtkmain.c:1685)
> ==22424==    by 0x21925EC8: _gdk_event_emit (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gdk/gdkevents.c:73)
> ==22424==    by 0x21957C35: gdk_event_source_dispatch (/usr/src/debug/gtk3-3.24.8-1.fc30.x86_64/gdk/x11/gdkeventsource.c:367)
> ==22424==    by 0x122D6EDC: g_main_dispatch (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3189)
> ==22424==    by 0x122D6EDC: g_main_context_dispatch (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3854)
> ==22424==    by 0x122D726F: g_main_context_iterate.isra.0 (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3927)
> ==22424==    by 0x122D7312: g_main_context_iteration (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3988)
> ==22424==    by 0x20F0AA42: GtkSalData::Yield(bool, bool) (/vcl/unx/gtk3/gtk3gtkdata.cxx:528)
> ==22424==    by 0x20F0FE41: GtkInstance::DoYield(bool, bool) (/vcl/unx/gtk3/../gtk/gtkinst.cxx:404)
> ==22424==    by 0xC8EA618: ImplYield(bool, bool) (/vcl/source/app/svapp.cxx:457)
> ==22424==    by 0xC8EA3CF: Application::Yield() (/vcl/source/app/svapp.cxx:521)
> ==22424==    by 0xC8EA362: Application::Execute() (/vcl/source/app/svapp.cxx:438)
> ==22424==    by 0x4A2676E: desktop::Desktop::Main() (/desktop/source/app/app.cxx:1620)
> ==22424==    by 0xC90B5A3: ImplSVMain() (/vcl/source/app/svmain.cxx:202)
> ==22424==    by 0xC90CE28: SVMain() (/vcl/source/app/svmain.cxx:236)
> ==22424==    by 0x4A9B1D7: soffice_main (/desktop/source/app/sofficemain.cxx:170)
> ==22424==    by 0x20117C: sal_main (/desktop/source/app/main.c:48)
> ==22424==    by 0x201156: main (/desktop/source/app/main.c:47)
> ==22424==  Address 0x138ee700 is 0 bytes inside a block of size 8 free'd
> ==22424==    at 0x483A0D6: operator delete(void*, unsigned long) (/builddir/build/BUILD/valgrind-3.15.0/coregrind/m_replacemalloc/vg_replace_malloc.c:595)
> ==22424==    by 0x72F0084: SfxApplication::~SfxApplication() (/sfx2/source/appl/app.cxx:231)
> ==22424==    by 0x72F014B: SfxApplication::~SfxApplication() (/sfx2/source/appl/app.cxx:211)
> ==22424==    by 0x7313109: SfxTerminateListener_Impl::notifyTermination(com::sun::star::lang::EventObject const&) (/sfx2/source/appl/appinit.cxx:118)
> ==22424==    by 0x28CE34C2: framework::Desktop::terminate() (/framework/source/services/desktop.cxx:364)
> ==22424==    by 0x28BC47F6: framework::CloseDispatcher::implts_terminateApplication() (/framework/source/dispatch/closedispatcher.cxx:544)
> ==22424==    by 0x28BC3A20: framework::CloseDispatcher::impl_asyncCallback(LinkParamNone*) (/framework/source/dispatch/closedispatcher.cxx:398)
> ==22424==    by 0x28BC21BF: framework::CloseDispatcher::LinkStubimpl_asyncCallback(void*, LinkParamNone*) (/framework/source/dispatch/closedispatcher.cxx:246)
> ==22424==    by 0xC281537: Link<LinkParamNone*, void>::Call(LinkParamNone*) const (/include/tools/link.hxx:112)
> ==22424==    by 0xC83EB7A: vcl::EventPoster::DoEvent_Impl(void*) (/vcl/source/helper/evntpost.cxx:52)
> ==22424==    by 0xC83EB2F: vcl::EventPoster::LinkStubDoEvent_Impl(void*, void*) (/vcl/source/helper/evntpost.cxx:48)
> ==22424==    by 0xC197FB7: Link<void*, void>::Call(void*) const (/include/tools/link.hxx:112)
> ==22424==    by 0xC19512D: ImplHandleUserEvent(ImplSVEvent*) (/vcl/source/window/winproc.cxx:1964)
> ==22424==    by 0xC191E52: ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) (/vcl/source/window/winproc.cxx:2517)
> ==22424==    by 0xCAEF164: SalFrame::CallCallback(SalEvent, void const*) const (/vcl/inc/salframe.hxx:299)
> ==22424==    by 0xCB0D12E: SalGenericDisplay::ProcessEvent(SalUserEventList::SalUserEvent) (/vcl/unx/generic/app/gendisp.cxx:67)
> ==22424==    by 0xC85048D: SalUserEventList::DispatchUserEvents(bool) (/vcl/source/app/salusereventlist.cxx:109)
> ==22424==    by 0xCB0D078: SalGenericDisplay::DispatchInternalEvent(bool) (/vcl/unx/generic/app/gendisp.cxx:52)
> ==22424==    by 0x20F0BD80: call_userEventFn(void*) (/vcl/unx/gtk3/gtk3gtkdata.cxx:853)
> ==22424==    by 0x122D37DA: g_idle_dispatch (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:5627)
> ==22424==    by 0x122D6EDC: g_main_dispatch (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3189)
> ==22424==    by 0x122D6EDC: g_main_context_dispatch (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3854)
> ==22424==    by 0x122D726F: g_main_context_iterate.isra.0 (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3927)
> ==22424==    by 0x122D7312: g_main_context_iteration (/usr/src/debug/glib2-2.60.4-1.fc30.x86_64/x86_64-redhat-linux-gnu/../glib/gmain.c:3988)
> ==22424==    by 0x20F0AA42: GtkSalData::Yield(bool, bool) (/vcl/unx/gtk3/gtk3gtkdata.cxx:528)
> ==22424==    by 0x20F0FE41: GtkInstance::DoYield(bool, bool) (/vcl/unx/gtk3/../gtk/gtkinst.cxx:404)
> ==22424==    by 0xC8EA618: ImplYield(bool, bool) (/vcl/source/app/svapp.cxx:457)
> ==22424==    by 0xC8EA3CF: Application::Yield() (/vcl/source/app/svapp.cxx:521)
> ==22424==    by 0x6C1B85D: Wait_Impl(bool, SbxArray&) (/basic/source/runtime/methods1.cxx:589)
> ==22424==    by 0x6C1B8E2: SbRtl_Wait(StarBASIC*, SbxArray&, bool) (/basic/source/runtime/methods1.cxx:596)
> ==22424==    by 0x6BD36DF: SbiStdObject::Notify(SfxBroadcaster&, SfxHint const&) (/basic/source/runtime/stdobj.cxx:862)
> ==22424==    by 0x7E62626: SfxBroadcaster::Broadcast(SfxHint const&) (/svl/source/notify/SfxBroadcaster.cxx:49)
> ==22424==    by 0x6C6F6C8: SbxVariable::Broadcast(SfxHintId) (/basic/source/sbx/sbxvar.cxx:183)
> ==22424==    by 0x6C67684: SbxValue::SbxValue(SbxValue const&) (/basic/source/sbx/sbxvalue.cxx:62)
> ==22424==    by 0x6C6E1E9: SbxVariable::SbxVariable(SbxVariable const&) (/basic/source/sbx/sbxvar.cxx:67)
> ==22424==    by 0x6C5D1E2: SbxMethod::SbxMethod(SbxMethod const&) (/basic/source/sbx/sbxobj.cxx:838)
> ==22424==    by 0x6BEB24C: SbiRuntime::FindElement(SbxObject*, unsigned int, unsigned int, ErrCode, bool, bool) (/basic/source/runtime/runtime.cxx:3507)
> ==22424==    by 0x6BDE8BB: SbiRuntime::StepRTL(unsigned int, unsigned int) (/basic/source/runtime/runtime.cxx:3919)
> ==22424==    by 0x6BE3AA0: SbiRuntime::Step() (/basic/source/runtime/runtime.cxx:778)
> ==22424==    by 0x6B2A8CC: SbModule::Run(SbMethod*) (/basic/source/classes/sbxmod.cxx:1111)
> ==22424==    by 0x6B29C3D: SbModule::Notify(SfxBroadcaster&, SfxHint const&) (/basic/source/classes/sbxmod.cxx:777)
> ==22424==    by 0x7E62626: SfxBroadcaster::Broadcast(SfxHint const&) (/svl/source/notify/SfxBroadcaster.cxx:49)
> ==22424==    by 0x6B30B64: SbMethod::Broadcast(SfxHintId) (/basic/source/classes/sbxmod.cxx:2071)
> ==22424==    by 0x6C68235: SbxValue::Get(SbxValues&) const (/basic/source/sbx/sbxvalue.cxx:284)
> ==22424==    by 0x6B260D2: SbMethod::Call(SbxValue*, SbxVariable*) (/basic/source/classes/sbxmod.cxx:2027)
> ==22424==    by 0x533DA6EB: basprov::BasicScriptImpl::invoke(com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&) (/scripting/source/basprov/basscript.cxx:231)
> ==22424==    by 0x533DAEDC: non-virtual thunk to basprov::BasicScriptImpl::invoke(com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&) (/scripting/source/basprov/basscript.cxx:0)
> ==22424==    by 0x77F401F: SfxObjectShell::CallXScript(com::sun::star::uno::Reference<com::sun::star::uno::XInterface> const&, rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Any&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&, bool, com::sun::star::uno::Any const*) (/sfx2/source/doc/objmisc.cxx:1404)
> ==22424==    by 0x77F46DB: SfxObjectShell::CallXScript(rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&, com::sun::star::uno::Any&, com::sun::star::uno::Sequence<short>&, com::sun::star::uno::Sequence<com::sun::star::uno::Any>&, bool, com::sun::star::uno::Any const*) (/sfx2/source/doc/objmisc.cxx:1435)
> ==22424==    by 0x2ED56816: FuSelection::MouseButtonDown(MouseEvent const&) (/sc/source/ui/drawfunc/fusel.cxx:188)
> ==22424==    by 0x2F248A42: ScGridWindow::DrawMouseButtonDown(MouseEvent const&) (/sc/source/ui/view/gridwin3.cxx:63)
> ==22424==  Block was alloc'd at
> ==22424==    at 0x4838E86: operator new(unsigned long) (/builddir/build/BUILD/valgrind-3.15.0/coregrind/m_replacemalloc/vg_replace_malloc.c:344)
> ==22424==    by 0x72EFB67: SfxApplication::SfxApplication() (/sfx2/source/appl/app.cxx:201)
> ==22424==    by 0x72EF2E5: SfxApplication::GetOrCreate() (/sfx2/source/appl/app.cxx:143)
> ==22424==    by 0x78DBBA0: (anonymous namespace)::SfxGlobalEvents_Impl::SfxGlobalEvents_Impl(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (/sfx2/source/notify/globalevents.cxx:147)
> ==22424==    by 0x78DB9CE: (anonymous namespace)::Instance::Instance(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (/sfx2/source/notify/globalevents.cxx:410)
> ==22424==    by 0x78DB92D: rtl::StaticWithArg<(anonymous namespace)::Instance, com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext>, (anonymous namespace)::Singleton>::get(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (/include/rtl/instance.hxx:455)
> ==22424==    by 0x78DB819: com_sun_star_comp_sfx2_GlobalEventBroadcaster_get_implementation (/sfx2/source/notify/globalevents.cxx:429)
> ==22424==    by 0x6092A3C: std::_Function_handler<com::sun::star::uno::XInterface* (com::sun::star::uno::XComponentContext*, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&), com::sun::star::uno::XInterface* (*)(com::sun::star::uno::XComponentContext*, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&)>::_M_invoke(std::_Any_data const&, com::sun::star::uno::XComponentContext*&&, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&) (/usr/lib/gcc/x86_64-redhat-linux/9/../../../../include/c++/9/bits/std_function.h:285)
> ==22424==    by 0x6060708: std::function<com::sun::star::uno::XInterface* (com::sun::star::uno::XComponentContext*, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&)>::operator()(com::sun::star::uno::XComponentContext*, com::sun::star::uno::Sequence<com::sun::star::uno::Any> const&) const (/usr/lib/gcc/x86_64-redhat-linux/9/../../../../include/c++/9/bits/std_function.h:690)
> ==22424==    by 0x604B314: cppuhelper::ServiceManager::Data::Implementation::createInstance(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&, bool) (/cppuhelper/source/servicemanager.cxx:651)
> ==22424==    by 0x605B50C: (anonymous namespace)::SingletonFactory::createInstanceWithContext(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (/cppuhelper/source/servicemanager.cxx:516)
> ==22424==    by 0x605B5E4: non-virtual thunk to (anonymous namespace)::SingletonFactory::createInstanceWithContext(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (/cppuhelper/source/servicemanager.cxx:0)
> ==22424==    by 0x5FC0705: cppu::ComponentContext::lookupMap(rtl::OUString const&) (/cppuhelper/source/component_context.cxx:293)
> ==22424==    by 0x5FC1428: cppu::ComponentContext::getValueByName(rtl::OUString const&) (/cppuhelper/source/component_context.cxx:367)
> ==22424==    by 0x5FC1564: non-virtual thunk to cppu::ComponentContext::getValueByName(rtl::OUString const&) (/cppuhelper/source/component_context.cxx:0)
> ==22424==    by 0x4A31356: com::sun::star::frame::theGlobalEventBroadcaster::get(com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&) (/workdir/UnoApiHeadersTarget/offapi/normal/com/sun/star/frame/theGlobalEventBroadcaster.hpp:36)
> ==22424==    by 0x4A251FC: desktop::Desktop::Main() (/desktop/source/app/app.cxx:1429)
> ==22424==    by 0xC90B5A3: ImplSVMain() (/vcl/source/app/svmain.cxx:202)
> ==22424==    by 0xC90CE28: SVMain() (/vcl/source/app/svmain.cxx:236)
> ==22424==    by 0x4A9B1D7: soffice_main (/desktop/source/app/sofficemain.cxx:170)
> ==22424==    by 0x20117C: sal_main (/desktop/source/app/main.c:48)
> ==22424==    by 0x201156: main (/desktop/source/app/main.c:47)
> ==22424==
Comment 6 Stephan Bergmann 2019-06-28 07:19:57 UTC
Raal, please see comment 4.
Comment 7 QA Administrators 2019-12-26 03:25:24 UTC Comment hidden (obsolete)
Comment 8 Xisco Faulí 2019-12-26 08:39:58 UTC
Still reproducible in

Version: 6.5.0.0.alpha0+
Build ID: 0322a41224a7264bbe03a068647ab093bcc88f90
CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; 
Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US
Calc: threaded
Comment 9 Xisco Faulí 2019-12-26 08:41:08 UTC
(In reply to Stephan Bergmann from comment #4)
> (In reply to raal from comment #3)
> 
> please cite the URL of the git repo you were using for bibisection

I believe it was https://bibisect.libreoffice.org/win32-5.1.git
Comment 10 Stephan Bergmann 2020-01-07 07:58:04 UTC
(In reply to raal from comment #3)
> This seems to have begun at the below commit.
> Adding Cc: to Stephan Bergmann; Could you possibly take a look at this one?
> Thanks
> 
> 08651de22b303d690721e3b41424582db16d1937 is the first bad commit
> commit 08651de22b303d690721e3b41424582db16d1937
> Author: Norbert Thiebaud <nthiebaud@gmail.com>
> Date:   Sat Jul 18 07:45:54 2015 -0700
> 
>     source 09c5a9d41e03b3137ce47b9f9419290525458337

That bibisect (apparently done with <https://bibisect.libreoffice.org/win32-5.1.git>, see comment 9) isn't too helpful.  What I get is:

(1) With the above

> commit 08651de22b303d690721e3b41424582db16d1937 (HEAD)
> Author: Norbert Thiebaud <nthiebaud@gmail.com>
> Date:   Sat Jul 18 07:45:54 2015 -0700
> 
>     source 09c5a9d41e03b3137ce47b9f9419290525458337
> 
>     source 09c5a9d41e03b3137ce47b9f9419290525458337

I indeed get a crash.

(2) With the immediately preceding

> commit 0afdd6db8b7b849be29beeadb4e96c070a51ed05 (HEAD)
> Author: Norbert Thiebaud <nthiebaud@gmail.com>
> Date:   Sat Jul 18 07:20:46 2015 -0700
> 
>     source 14aa5c58b8529f81c6ca12a18cbb77f63e27ba62
> 
>     source 14aa5c58b8529f81c6ca12a18cbb77f63e27ba62

I get LO to hang instead of terminating; I need to kill it manually.

(3) Winding all the way down to

> commit e1cc82d5a5ac5a6ffa51e1958088d7d50d277320 (HEAD)
> Author: Norbert Thiebaud <nthiebaud@gmail.com>
> Date:   Fri Jul 17 21:25:53 2015 -0700
> 
>     source 1289d3c42af66990a2c8e5a7a38e51b6cd51c7eb
> 
>     source 1289d3c42af66990a2c8e5a7a38e51b6cd51c7eb

(which is the commit <https://gerrit.libreoffice.org/plugins/gitiles/core/+/1289d3c42af66990a2c8e5a7a38e51b6cd51c7eb%5E!/> "std::list for Scheduler" that my commit in (1) reverted), I still get a hang.

(4) With the immediately preceding

> commit 11006b05b772b12d1d2979e0738986552bc209e0
> Author: Norbert Thiebaud <nthiebaud@gmail.com>
> Date:   Fri Jul 17 21:00:42 2015 -0700
> 
>     source beb8e2830dc9e1c771e196fcaf08cdfd6bf3dde3
> 
>     source beb8e2830dc9e1c771e196fcaf08cdfd6bf3dde3

I'm back at a crash.

So I'd argue that the crashing behavior is older than my <https://gerrit.libreoffice.org/plugins/gitiles/core/+/09c5a9d41e03b3137ce47b9f9419290525458337%5E!/> "Revert 'std::list for Scheduler'", and that the crash happened to be replaced by a hang by the (bogus anyway, see my commit's commit message) <https://gerrit.libreoffice.org/plugins/gitiles/core/+/1289d3c42af66990a2c8e5a7a38e51b6cd51c7eb%5E!/> "std::list for Scheduler".
Comment 11 dave j 2020-04-06 05:32:07 UTC
I have tested a predesigned nonmodal dialog (desktopasparent==false, dialog.execute() never called) under the following scenarios. All results apply to Calc and at least some to Writer (have not tested exhaustively under Writer)

called from button on sheet/doc - works
" standard toolbar - crashes
" custom toolbar - crashes
" document event - crashes
" accelerator key - crashes

I also note that even with a close listener on thiscomponent (to try to dispose the dialog), by the time notify() triggers, it's too late.

It is interesting that no crash will occur if the Basic editor is also open.

-dave
Comment 12 dave j 2020-04-06 11:54:13 UTC
behavior occurs under

Version: 6.3.5.2 (x64)
Build ID: dd0751754f11728f69b42ee2af66670068624673
CPU threads: 2; OS: Windows 6.1; UI render: default; VCL: win; 
Locale: en-US (en_US); UI-Language: en-US
Calc: threaded

and

Version: 6.3.5.2
Build ID: 1:6.3.5~rc2-0ubuntu0.18.04.1~lo1
CPU threads: 4; OS: Linux 5.3; UI render: default; VCL: gtk3; 
Locale: en-US (en_US.UTF-8); UI-Language: en-US
Calc: threaded
Comment 13 Aron Budea 2020-04-06 13:21:54 UTC
Let's try with another round of bibisect, looking for a starting commit preceding beb8e2830dc9e1c771e196fcaf08cdfd6bf3dde3.
Comment 14 dave j 2020-04-29 11:21:27 UTC
another scenario under which the crash does not occur: run soffice from command line with macro arg, use macro to load dialog.

$ soffice "vnd.sun.star.script:LIBNAME.MODULENAME.SUBNAME?language=Basic&location=document" "MYDOC.ODS"
Comment 15 Buovjaga 2020-06-09 18:21:58 UTC
(In reply to Aron Budea from comment #13)
> Let's try with another round of bibisect, looking for a starting commit
> preceding beb8e2830dc9e1c771e196fcaf08cdfd6bf3dde3.

Crashes for me already with oldest in win32-5.1 and 5.0 - meaning that it shows an empty recovery window immediately after closing.

On the other hand, it does not crash with latest or oldest in Linux 50max repo.
Comment 16 QA Administrators 2022-06-10 03:33:28 UTC Comment hidden (obsolete)
Comment 17 Buovjaga 2022-06-10 07:18:28 UTC
Tested with stable and my debug build and it seems it only crashes with the debug build now.

Arch Linux 64-bit
Version: 7.4.0.0.alpha1+ / LibreOffice Community
Build ID: ff2b4bff61d2e1679bb525d754c960c48b81c495
CPU threads: 8; OS: Linux 5.17; UI render: default; VCL: kf5 (cairo+xcb)
Locale: fi-FI (fi_FI.UTF-8); UI: en-US
Calc: threaded
Built on 25 May 2022
Comment 18 Telesto 2022-06-10 09:02:27 UTC
Still crashing for with a non-debug build of +/- 3 weeks old
Version: 7.4.0.0.alpha0+ (x64) / LibreOffice Community
Build ID: cdf8e971d5d46df4bcab35a99c4254df9459213f
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: en-US (nl_NL); UI: en-GB
Calc: CL Jumbo

Only pressing red cross (right corner); no crash with file -> Exit
Comment 19 Stéphane Guillou (stragu) 2023-05-30 14:34:18 UTC
Crashes for me with non-debug builds:

- in 7.4 with Task::Stop() signature: https://crashreport.libreoffice.org/stats/crash_details/938813a7-3d64-4a30-a919-2cf133f3143c

Version: 7.4.7.2 / LibreOffice Community
Build ID: 723314e595e8007d3cf785c16538505a1c878ca5
CPU threads: 8; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: threaded

- Same signature on 7.5: https://crashreport.libreoffice.org/stats/crash_details/55464b15-a60a-41f5-88a9-c1f11ab18733

Version: 7.5.3.2 (X86_64) / LibreOffice Community
Build ID: 9f56dff12ba03b9acd7730a5a481eea045e468f3
CPU threads: 8; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: threaded

- Recent master build still crashes(gtk3, kf5 and gen VCLs):

Version: 7.6.0.0.alpha1+ (X86_64) / LibreOffice Community
Build ID: fc4f7db59152f606b6aa88cf32197700959d0f8b
CPU threads: 8; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: threaded

- OOo 3.3 already crashed on exit, so marking as inherited and removing the keywords.