Bug 132075 - Crash OutlinerParaObject::OutlinerParaObject
Summary: Crash OutlinerParaObject::OutlinerParaObject
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Calc (show other bugs)
Version:
(earliest affected)
4.3.0.4 release
Hardware: All All
: medium major
Assignee: Not Assigned
URL:
Whiteboard: target:7.4.0
Keywords: haveBacktrace, notBibisectable, regression
Depends on:
Blocks: Calc-Comments Paste Crash
  Show dependency treegraph
 
Reported: 2020-04-12 21:40 UTC by Telesto
Modified: 2024-04-30 05:21 UTC (History)
7 users (show)

See Also:
Crash report or crash signature: ["ScPostIt::ScPostIt(ScDocument &,ScAddress const &,ScPostIt const &,unsigned long)","ScPostIt::CreateCaption","ScPostIt::CreateCaption(ScAddress const&, SdrCaptionObj const*)"]


Attachments
bt with debug symbols (15.07 KB, text/plain)
2020-04-13 15:19 UTC, Julien Nabet
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2020-04-12 21:40:03 UTC
Description:
Crash OutlinerParaObject::OutlinerParaObject

Steps to Reproduce:
1. Open Calc
2. Insert a caption with text
3. Copy the cell with caption (CTRL+C)
4. CTRL+Z
5. CTRL+V
6. CTRL+V (Accept to overwrite) -> Crash

Actual Results:
Crash

Expected Results:
No Crash


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 7.0.0.0.alpha0+ (x64)
Build ID: 95ec2e9b024ff12a3005777c902d7e0975460b1d
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: default; VCL: win; 
Locale: nl-NL (nl_NL); UI-Language: en-US
Calc: CL
Comment 1 Julien Nabet 2020-04-13 15:19:57 UTC
Created attachment 159537 [details]
bt with debug symbols

On pc Debian x86-64 with master sources updated today, I could reproduce this.

You meant "comment" instead of "caption" I suppose.
Comment 2 Julien Nabet 2020-04-13 15:20:58 UTC
I could reproduce this too with LO Debian package 6.4.2
Comment 3 Xisco Faulí 2020-04-15 13:43:13 UTC
it seems it's not a regression.
The crash is reproducible after https://cgit.freedesktop.org/libreoffice/core/commit/?id=05602710a047c58db0ceda88bedc291420990bc1, which basically reverts https://cgit.freedesktop.org/libreoffice/core/commit/?id=b6b1ded0a0539e7be1b5338de378a3276a6ff445

also reproduced in

Version: 5.2.0.0.alpha1+
Build ID: 5b168b3fa568e48e795234dc5fa454bf24c9805e
CPU Threads: 4; OS Version: Linux 4.8; UI Render: default; 
Locale: ca-ES (ca_ES.UTF-8)

@Luboš Luňák, I thought you might be interested in this issue
Comment 4 Xisco Faulí 2020-04-15 13:45:45 UTC
Also reproduced in

Version: 4.3.0.0.alpha1+
Build ID: c15927f20d4727c3b8de68497b6949e72f9e6e9e

but not in

Version 4.1.0.0.alpha0+ (Build ID: efca6f15609322f62a35619619a6d5fe5c9bd5a)
Comment 5 Telesto 2020-04-15 18:47:47 UTC
Same crash with bug 118707 file of (https://cgit.freedesktop.org/libreoffice/core/commit/?id=05602710a047c58db0ceda88bedc291420990bc1)

After a small dance with Cut/Paste/Cut/Paste/Undo/Paste (or something like that)
Comment 6 Telesto 2020-04-15 19:04:27 UTC
It's also crashing with bug 104967 document, after a (long) dance with undo/paste of the Kamera sheet
Comment 7 Buovjaga 2020-06-10 14:24:09 UTC
This appears in Linux 43max, but it has tons of commits, where undo crashes! Too much skipping to be bibisected.
Comment 8 QA Administrators 2022-06-11 03:29:13 UTC Comment hidden (obsolete)
Comment 9 Stéphane Guillou (stragu) 2024-04-30 04:01:22 UTC
I had to use these steps (note extra step 2b, without which it would not crash):

1. Open Calc
2. Insert a comment with text
2b. Click elsewhere in the sheet to deselect the cell with comment
3. Copy the cell with comment (CTRL + C)
4. CTRL+Z
5. CTRL+V
6. CTRL+V (Accept to overwrite) -> Crash

Repro in 6.3.0.4 and 7.0.0.3 with signature "ScPostIt::CreateCaption":
- https://crashreport.libreoffice.org/stats/crash_details/c8676532-12b1-4435-b085-1d0e73aa175a
- https://crashreport.libreoffice.org/stats/crash_details/496de9b8-bc7a-432c-9aab-4a742a0e6433

In 7.3.0.3 as well with "ScPostIt::CreateCaption(ScAddress const&, SdrCaptionObj const*)": https://crashreport.libreoffice.org/stats/crash_details/20b0f1cb-71dd-4c32-81a3-125b53605ab7

Resolved in 7.5.9, 7.6.6 and a recent daily build:

Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 2f5ab5b8e7bd7dd06e00153abb77a69e5d192dd2
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: CL threaded

In the linux-64-7.4 bibiset repo, I've bibisected the first build that doesn't crash to [37c0c21c8d03e151c19874bb2555b6a8e8a641de] which is László's 8c018910ae4d8701b1ce2a95727b9baed4016da3. I can't make sense of how it could be related, but I've tested a few times before and after the commit and it is consistent...

There might be a remaining series of steps that can lead to the same signature, as can be seen here for 7.4.0.3: https://crashreport.libreoffice.org/stats/crash_details/079e2698-db26-465e-a46d-0cee6c11ec47
...but I can't determine what it is, and we can close this report for the steps above.