Steps to reproduce: 1. Open attachment 150599 [details] from bug 124602 2. Place cursor before 'Fakultät XXX Der Dekan' 3. Using the into key, move content until the line is on page 2 4. Undo everything holding Ctrl + Z -> Crash Reproduced in Version: 6.4.0.0.alpha1+ Build ID: fea5c10e222b10d83e0081dc1d1b2e678689d250 CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US Calc: threaded [Bug found by mass-uitesting]
Regression introduced by: https://cgit.freedesktop.org/libreoffice/core/commit/?id=61cf196631a2a846e0d3b8b83c0805cf4d1d14b2 author Miklos Vajna <vmiklos@collabora.com> 2019-10-25 17:40:02 +0200 committer Miklos Vajna <vmiklos@collabora.com> 2019-10-25 20:24:05 +0200 commit 61cf196631a2a846e0d3b8b83c0805cf4d1d14b2 (patch) tree c56b462e947b89821a1577553769f91861c022ce parent df9672b1fada6fc847bfa4c8a8f016fb2af6a7b5 (diff) sw ContinuousEndnotes: fix moving them to the previous page Bisected with: bibisect-linux64-6.4 Adding Cc: to Miklos Vajna
Created attachment 155745 [details] bt Windows (windbg) On Win10 with master sources updated today, I could reproduce this.
Miklos Vajna committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/0e0bad1a6a3affa2b3fd82cc3834ae03ea7bc1d5 tdf#128736 sw ContinuousEndnotes: fix use-after-free on text frame join It will be available in 6.5.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Miklos Vajna committed a patch related to this issue. It has been pushed to "libreoffice-6-4": https://git.libreoffice.org/core/commit/8dc47cf00f1b50dd50f2eb9557c6ff3501d55daf tdf#128736 sw ContinuousEndnotes: fix use-after-free on text frame join It will be available in 6.4.0.1. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Verified in Version: 6.4.0.0.beta1+ Build ID: c2097477e3a43d75c170a6f7a5daf5dcb2169329 CPU threads: 4; OS: Linux 4.15; UI render: default; VCL: gtk3; Locale: ca-ES (ca_ES.UTF-8); UI-Language: en-US Calc: threaded @Miklos, thanks for fixing this issue!!