Bug 134025 - Crash mergedlo!basegfx::B2DPolyPolygon::B2DPolyPolygon (see comment 5)
Summary: Crash mergedlo!basegfx::B2DPolyPolygon::B2DPolyPolygon (see comment 5)
Status: RESOLVED WORKSFORME
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
6.3.0.0.alpha0+
Hardware: All All
: low critical
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: Crash
  Show dependency treegraph
 
Reported: 2020-06-16 08:45 UTC by Telesto
Modified: 2020-08-30 11:37 UTC (History)
3 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2020-06-16 08:45:28 UTC
Description:
Crash mergedlo!basegfx::B2DPolyPolygon::B2DPolyPolygon

Steps to Reproduce:
1. Open the attached file attachment 143995 [details] (bug 119125)
2. Press CTRL+A in Cell A1 (so table gets only selected)
3. CTRL+C
4. CTRL+N
5. CTRL+V
6. CTRL+A
7. CTRL+V -> Crash

Actual Results:
Crash

Expected Results:
No crash


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 7.1.0.0.alpha0+ (x64)
Build ID: a35c18aeff3b1d8f270db7e094850fb8ba1ab84a
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL
Comment 1 Telesto 2020-06-16 08:46:10 UTC
Not in
Version: 6.4.0.0.beta1+ (x64)
Build ID: 20be5cd0bdc57d812bf34a2debfe48caa51de881
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: default; VCL: win; 
Locale: nl-NL (nl_NL); UI-Language: en-US
Calc: CL
Comment 2 Xisco Faulí 2020-06-16 10:07:24 UTC
Not reproducible in

Version: 7.1.0.0.alpha0+
Build ID: 11d21b3c1f7754b5d13ae9ea88da562ec74366ff
CPU threads: 4; OS: Linux 4.19; UI render: default; VCL: gtk3
Locale: en-US (en_US.UTF-8); UI: en-US
Calc: threaded

Please attach a screencast
Comment 3 Telesto 2020-06-16 10:18:51 UTC
Sorry, bit unpredictable.. new attempt
1. Open the attached file attachment 143995 [details] (bug 119125)
2. Press CTRL+A in Cell A1 (so table gets only selected)
3. CTRL+C
4. CTRL+N
5. CTRL+V
6. CTRL+A
7. CTRL+V -> Crashes here sometimes
8. CTRL+Z
9. CTRL+Z
10. CTRL+SHIFT+RTF paste -> crashed here sometimes
11. Undo+Z -> Crashed here
Comment 4 Buovjaga 2020-06-17 16:12:28 UTC
(In reply to Telesto from comment #3)
> Sorry, bit unpredictable.. new attempt
> 1. Open the attached file attachment 143995 [details] (bug 119125)
> 2. Press CTRL+A in Cell A1 (so table gets only selected)
> 3. CTRL+C
> 4. CTRL+N
> 5. CTRL+V
> 6. CTRL+A
> 7. CTRL+V -> Crashes here sometimes
> 8. CTRL+Z
> 9. CTRL+Z
> 10. CTRL+SHIFT+RTF paste -> crashed here sometimes
> 11. Undo+Z -> Crashed here

No repro

Version: 7.1.0.0.alpha0+ (x64)
Build ID: 33a720ab802491f15b247e09755cd36205b6f435
CPU threads: 4; OS: Windows 10.0 Build 18362; UI render: Skia/Raster; VCL: win
Locale: fi-FI (fi_FI); UI: en-US
Calc: threaded

Arch Linux 64-bit
Version: 7.1.0.0.alpha0+
Build ID: ad0351b84926075297fb74abbe9b31a0455782af
CPU threads: 8; OS: Linux 5.7; UI render: default; VCL: kf5
Locale: fi-FI (fi_FI.UTF-8); UI: en-US
Calc: threaded
Built on 17 June 2020
Comment 5 Telesto 2020-06-20 19:51:22 UTC
Still a Crash

2. Press CTRL+A in Cell A1 (so table gets only selected)
3. CTRL+C
4. CTRL+N
5. CTRL+V
6. CTRL+Z
7. CTRL+SHIFT+V -> RTF Paste

Version: 7.1.0.0.alpha0+ (x64)
Build ID: 43c60ce1ac7629a1462e927e6ff937469f58f743
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL
Comment 6 Buovjaga 2020-06-20 21:21:21 UTC
(In reply to Telesto from comment #5)
> Still a Crash
> 
> 2. Press CTRL+A in Cell A1 (so table gets only selected)
> 3. CTRL+C
> 4. CTRL+N
> 5. CTRL+V
> 6. CTRL+Z
> 7. CTRL+SHIFT+V -> RTF Paste
> 
> Version: 7.1.0.0.alpha0+ (x64)
> Build ID: 43c60ce1ac7629a1462e927e6ff937469f58f743
> CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
> Locale: nl-NL (nl_NL); UI: en-US
> Calc: CL

Ok, I repro with this on Linux and Windows. However, it seems to be unreliable and thus a bibisect attempt yielded a bogus result for me. Even choosing the right repo seemed to be a lost cause. It looks like it goes back to 6.2, but not sure.
Comment 7 Buovjaga 2020-06-21 06:42:41 UTC
Somewhat telling is that I just now tried twice to take a backtrace of the crash, but I was unable to make it crash.
Comment 8 Telesto 2020-06-21 08:07:45 UTC
(In reply to Buovjaga from comment #7)
> Somewhat telling is that I just now tried twice to take a backtrace of the
> crash, but I was unable to make it crash.

I'm already happy someone could reproduce :-).
Comment 9 Telesto 2020-06-22 04:19:38 UTC
@Noel
I remember some discussion - or i think i did - about sporadic crashes on Jenskins related to B2DPolyPolygon?
Comment 10 Noel Grandin 2020-06-22 07:22:51 UTC
I get a (hard to reproduce) crash, but it's not anywhere near B2DPolyPolygon, it's some kind of writer layout issue.

Sorry, no idea about that

#0  0x00007fffd22f6b7c in SwModify::Add(SwClient*) (this=0x7686cc0, pDepend=0x7ffffffe5b40) at sw/source/core/attr/calbck.cxx:247
#1  0x00007fffd22faea7 in SwClient::SwClient(SwModify*) (this=0x7ffffffe5b40, pToRegisterIn=0x7686cc0) at sw/inc/calbck.hxx:399
#2  0x00007fffd22fa09b in sw::ListenerEntry::ListenerEntry(SwClient*, SwModify*) (this=0x7ffffffe5b40, pTellHim=0x7ffffffe5d98, pDepend=0x7686cc0) at sw/inc/calbck.hxx:249
#3  0x00007fffd22f7935 in sw::WriterMultiListener::StartListening(SwModify*) (this=0x7ffffffe5db8, pDepend=0x7686cc0) at sw/source/core/attr/calbck.cxx:338
#4  0x00007fffd2578720 in SwEndNoteInfo::SwEndNoteInfo(SwEndNoteInfo const&) (this=0x7ffffffe5d98, rInfo=...) at sw/source/core/doc/docftn.cxx:89
#5  0x00007fffd2579524 in SwFootnoteInfo::SwFootnoteInfo(SwFootnoteInfo const&) (this=0x7ffffffe5d98, rInfo=...) at sw/source/core/doc/docftn.cxx:272
#6  0x00007fffd3241495 in SwXFootnoteProperties::setPropertyValue(rtl::OUString const&, com::sun::star::uno::Any const&) (this=0x785a9c0, rPropertyName="StartAt", aValue=uno::Any("short": 0)) at sw/source/core/unocore/unosett.cxx:316
#7  0x00007fffa206e120 in writerfilter::dmapper::DomainMapper::sprmWithProps(writerfilter::Sprm&, tools::SvRef<writerfilter::dmapper::PropertyMap> const&) (this=0x78e07a0, rSprm=..., rContext=...) at writerfilter/source/dmapper/DomainMapper.cxx:2358
#8  0x00007fffa20648f0 in writerfilter::dmapper::DomainMapper::lcl_sprm(writerfilter::Sprm&) (this=0x78e07a0, rSprm=...) at writerfilter/source/dmapper/DomainMapper.cxx:1240
#9  0x00007fffa219b02c in writerfilter::LoggedProperties::sprm(writerfilter::Sprm&) (this=0x78e07a0, rSprm=...) at writerfilter/source/dmapper/LoggedResources.cxx:360
#10 0x00007fffa200a8a8 in writerfilter::rtftok::RTFReferenceProperties::resolve(writerfilter::Properties&) (this=0x785a750, rHandler=...) at writerfilter/source/rtftok/rtfreferenceproperties.cxx:34
#11 0x00007fffa2249b4e in writerfilter::dmapper::resolveSprmProps(writerfilter::Properties&, writerfilter::Sprm&) (rHandler=..., rSprm=...) at writerfilter/source/dmapper/util.cxx:66
#12 0x00007fffa206b1e9 in writerfilter::dmapper::DomainMapper::sprmWithProps(writerfilter::Sprm&, tools::SvRef<writerfilter::dmapper::PropertyMap> const&) (this=0x78e07a0, rSprm=..., rContext=...) at writerfilter/source/dmapper/DomainMapper.cxx:2019
#13 0x00007fffa20648f0 in writerfilter::dmapper::DomainMapper::lcl_sprm(writerfilter::Sprm&) (this=0x78e07a0, rSprm=...) at writerfilter/source/dmapper/DomainMapper.cxx:1240
#14 0x00007fffa219b02c in writerfilter::LoggedProperties::sprm(writerfilter::Sprm&) (this=0x78e07a0, rSprm=...) at writerfilter/source/dmapper/LoggedResources.cxx:360
#15 0x00007fffa200a8a8 in writerfilter::rtftok::RTFReferenceProperties::resolve(writerfilter::Properties&) (this=0x785a6b0, rHandler=...) at writerfilter/source/rtftok/rtfreferenceproperties.cxx:34
#16 0x00007fffa207881b in writerfilter::dmapper::DomainMapper::lcl_props(tools::SvRef<writerfilter::Reference<writerfilter::Properties> >) (this=0x78e07a0, ref=...) at writerfilter/source/dmapper/DomainMapper.cxx:3586
#17 0x00007fffa219a21b in writerfilter::LoggedStream::props(tools::SvRef<writerfilter::Reference<writerfilter::Properties> >) (this=0x78e07f8, ref=...) at writerfilter/source/dmapper/LoggedResources.cxx:250
#18 0x00007fffa1fbe960 in writerfilter::rtftok::RTFDocumentImpl::replayBuffer(std::__debug::deque<std::tuple<writerfilter::rtftok::RTFBufferTypes, tools::SvRef<writerfilter::rtftok::RTFValue>, tools::SvRef<writerfilter::rtftok::TableRowBuffer> >, std::allocator<std::tuple<writerfilter::rtftok::RTFBufferTypes, tools::SvRef<writerfilter::rtftok::RTFValue>, tools::SvRef<writerfilter::rtftok::TableRowBuffer> > > >&, writerfilter::rtftok::RTFSprms*, writerfilter::rtftok::RTFSprms const*) (this=0x793dd70, rBuffer=std::__debug::deque with 11 elements = {...}, pSprms=0x68fe420, pAttributes=0x6d3c950) at writerfilter/source/rtftok/rtfdocumentimpl.cxx:1632
#19 0x00007fffa1fbe58f in writerfilter::rtftok::RTFDocumentImpl::replayRowBuffer(std::__debug::deque<std::tuple<writerfilter::rtftok::RTFBufferTypes, tools::SvRef<writerfilter::rtftok::RTFValue>, tools::SvRef<writerfilter::rtftok::TableRowBuffer> >, std::allocator<std::tuple<writerfilter::rtftok::RTFBufferTypes, tools::SvRef<writerfilter::rtftok::RTFValue>, tools::SvRef<writerfilter::rtftok::TableRowBuffer> > > >&, std::__debug::deque<writerfilter::rtftok::RTFSprms, std::allocator<writerfilter::rtftok::RTFSprms> >&, std::__debug::deque<writerfilter::rtftok::RTFSprms, std::allocator<writerfilter::rtftok::RTFSprms> >&, int) (this=0x793dd70, rBuffer=std::__debug::deque with 11 elements = {...}, rCellsSrpms=std::__debug::deque with 2 elements = {...}, rCellsAttributes=std::__debug::deque with 2 elements = {...}, nCells=2) at writerfilter/source/rtftok/rtfdocumentimpl.cxx:1608
#20 0x00007fffa1f8a2a3 in writerfilter::rtftok::RTFDocumentImpl::dispatchSymbol(writerfilter::rtftok::RTFKeyword) (this=0x793dd70, nKeyword=writerfilter::rtftok::RTF_ROW) at writerfilter/source/rtftok/rtfdispatchsymbol.cxx:300
#21 0x00007fffa203c792 in writerfilter::rtftok::RTFTokenizer::dispatchKeyword(rtl::OString const&, bool, int) (this=0x68fc9d0, rKeyword="row", bParam=false, nParam=0) at writerfilter/source/rtftok/rtftokenizer.cxx:299
#22 0x00007fffa203c0a0 in writerfilter::rtftok::RTFTokenizer::resolveKeyword() (this=0x68fc9d0) at writerfilter/source/rtftok/rtftokenizer.cxx:246
#23 0x00007fffa203b7d6 in writerfilter::rtftok::RTFTokenizer::resolveParse() (this=0x68fc9d0) at writerfilter/source/rtftok/rtftokenizer.cxx:126
#24 0x00007fffa1fb5886 in writerfilter::rtftok::RTFDocumentImpl::resolve(writerfilter::Stream&) (this=0x793dd70, rMapper=...) at writerfilter/source/rtftok/rtfdocumentimpl.cxx:807
#25 0x00007fffa224b1cc in (anonymous namespace)::RtfFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x76f0570, rDescriptor=uno::Sequence of length 3 = {...}) at writerfilter/source/filter/RtfFilter.cxx:163
#26 0x00007fffa321c37a in (anonymous namespace)::SwRTFReader::Read(SwDoc&, rtl::OUString const&, SwPaM&, rtl::OUString const&) (this=0x48af690, rDoc=..., rPam=SwPaM = {...}) at sw/source/filter/rtf/swparrtf.cxx:104
#27 0x00007fffd337db3b in SwReader::Read(Reader const&) (this=0x7ffffffee788, rOptions=...) at sw/source/filter/basflt/shellio.cxx:191
#28 0x00007fffd36f37b5 in SwTransferable::PasteFileContent(TransferableDataHelper&, SwWrtShell&, SotClipboardFormatId, bool, bool) (rData=..., rSh=..., nFormat=SotClipboardFormatId::RTF, bMsg=true, bIgnoreComments=false) at sw/source/uibase/dochdl/swdtflvr.cxx:2099
#29 0x00007fffd36efb75 in SwTransferable::PasteData(TransferableDataHelper&, SwWrtShell&, unsigned char, SotExchangeActionFlags, SotClipboardFormatId, SotExchangeDest, bool, bool, Point const*, signed char, bool, RndStdIds, bool, SwPasteContext*, PasteTableType) (rData=..., rSh=..., nAction=1 '\001', nActionFlags=SotExchangeActionFlags::InsertTargetUrl, nFormat=SotClipboardFormatId::RTF, nDestination=SotExchangeDest::SWDOC_FREE_AREA, bIsPasteFormat=true, bIsDefault=false, pPt=0x0, nDropAction=0 '\000', bPasteSelection=false, nAnchorType=RndStdIds::FLY_AT_PARA, bIgnoreComments=false, pContext=0x0, ePasteTable=PasteTableType::PASTE_DEFAULT) at sw/source/uibase/dochdl/swdtflvr.cxx:1742
#30 0x00007fffd36fb605 in SwTransferable::PasteFormat(SwWrtShell&, TransferableDataHelper&, SotClipboardFormatId) (rSh=..., rData=..., nFormat=SotClipboardFormatId::RTF) at sw/source/uibase/dochdl/swdtflvr.cxx:3284
#31 0x00007fffd389c48a in SwBaseShell::ExecClpbrd(SfxRequest&)::$_0::operator()(int) const (this=0x6547f80, nResult=1) at sw/source/uibase/shells/basesh.cxx:406
#32 0x00007fffd389c3c1 in std::__invoke_impl<void, SwBaseShell::ExecClpbrd(SfxRequest&)::$_0&, int>(std::__invoke_other, SwBaseShell::ExecClpbrd(SfxRequest&)::$_0&, int&&) (__f=..., __args=@0x7ffffffeef34: 1) at /usr/lib/gcc/x86_64-redhat-linux/10/../../../../include/c++/10/bits/invoke.h:60
#33 0x00007fffd389c362 in std::__invoke_r<void, SwBaseShell::ExecClpbrd(SfxRequest&)::$_0&, int>(SwBaseShell::ExecClpbrd(SfxRequest&)::$_0&, int&&) (__fn=..., __args=@0x7ffffffeef34: 1) at /usr/lib/gcc/x86_64-redhat-linux/10/../../../../include/c++/10/bits/invoke.h:110
#34 0x00007fffd389c1b2 in std::_Function_handler<void (int), SwBaseShell::ExecClpbrd(SfxRequest&)::$_0>::_M_invoke(std::_Any_data const&, int&&) (__functor=..., __args=@0x7ffffffeef34: 1) at /usr/lib/gcc/x86_64-redhat-linux/10/../../../../include/c++/10/bits/std_function.h:291
#35 0x00007fffdaf30963 in std::function<void (int)>::operator()(int) const (this=0x7ffffffeefa8, __args=1) at /usr/lib/gcc/x86_64-redhat-linux/10/../../../../include/c++/10/bits/std_function.h:622
#36 0x00007fffdae9e133 in (anonymous namespace)::GtkInstanceDialog::asyncresponse(int) (this=0x78524e0, ret=-5) at vcl/unx/gtk3/gtk3gtkinst.cxx:6752
#37 0x00007fffdae9de97 in (anonymous namespace)::GtkInstanceDialog::signalAsyncResponse(_GtkWidget*, int, void*) (ret=-5, widget=0x78524e0) at vcl/unx/gtk3/gtk3gtkinst.cxx:4337
#38 0x00007fffea113d50 in g_cclosure_marshal_VOID__BOOLEANv () at /lib64/libgobject-2.0.so.0
#39 0x00007fffea111ae6 in _g_closure_invoke_va () at /lib64/libgobject-2.0.so.0
#40 0x00007fffea12a6e9 in g_signal_emit_valist () at /lib64/libgobject-2.0.so.0
#41 0x00007fffea12ac63 in g_signal_emit () at /lib64/libgobject-2.0.so.0
#42 0x00007fffea11188a in g_closure_invoke () at /lib64/libgobject-2.0.so.0
#43 0x00007fffea124423 in signal_emit_unlocked_R.isra.0 () at /lib64/libgobject-2.0.so.0
Comment 11 Telesto 2020-07-27 15:53:22 UTC
This one isn't that important :-). I assume it crashed for me in a similar way as bug 134475 or bug 132940..

They crash of comment 10 is bit of a coincidence
Comment 12 Telesto 2020-08-30 11:37:48 UTC
Fine with
Version: 7.1.0.0.alpha0+ (x64)
Build ID: 6640d7f405d2970ba2825a9455926cc803284d01
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL

Likely: bug 132940