Bug 138693 - Crash undo rejecting changes from web paste
Summary: Crash undo rejecting changes from web paste
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
3.5.7.2 release
Hardware: All All
: medium major
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: Crash
  Show dependency treegraph
 
Reported: 2020-12-06 13:53 UTC by Telesto
Modified: 2024-02-16 23:47 UTC (History)
4 users (show)

See Also:
Crash report or crash signature:


Attachments
Inside Clipboard file (401.94 KB, application/octet-stream)
2020-12-06 13:57 UTC, Telesto
Details
BT without symbols (18.95 KB, text/plain)
2021-12-13 12:29 UTC, Telesto
Details
Document containing screenshots of replications steps (721.03 KB, application/pdf)
2022-06-24 06:59 UTC, Reche
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2020-12-06 13:53:04 UTC
Description:
Crash undo rejecting changes from web paste

Steps to Reproduce:
1. open https://crashreport.libreoffice.org/stats/crash_details/31bd620a-3f90-4ecb-b474-8eef4859a9cf#allthreads in browser (Chromium based in my case)
2. CTRL+A
3. CTRL+C
4. Open Writer
5. Enable track & changes
6. CTRL+V
7. Edit -> track changes -> Manage
8. Reject one by one (notice first rejection already removing everything)
9. Close the dialog
10. Press CTRL+Z a couple of times

Actual Results:
Crash

Expected Results:
No crash


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 7.2.0.0.alpha0+ (x64)
Build ID: 32fdb8eb3506bc8dcf013cc713fe8e5debceb940
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL
Comment 1 Telesto 2020-12-06 13:57:06 UTC
Created attachment 167867 [details]
Inside Clipboard file
Comment 2 Telesto 2020-12-06 14:01:17 UTC
Less complicated page, same effect:
https://en.wikipedia.org/wiki/Family_resemblance
Comment 3 Telesto 2020-12-06 14:05:08 UTC
Also in
6.2

5.2

4.4.7.2

3.5.7.2
Comment 4 Xisco Faulí 2020-12-07 09:06:27 UTC
Not reproducible in

Version: 7.2.0.0.alpha0+
Build ID: 480d00625534c356dabd96c503d992f07c99d152
CPU threads: 4; OS: Linux 5.7; UI render: default; VCL: gtk3
Locale: en-US (en_US.UTF-8); UI: en-US
Calc: threaded

There is only one item in the Manage dialog
Comment 5 Telesto 2020-12-07 09:43:57 UTC
(In reply to Xisco Faulí from comment #4)
> Not reproducible in
> 
> Version: 7.2.0.0.alpha0+
> Build ID: 480d00625534c356dabd96c503d992f07c99d152
> CPU threads: 4; OS: Linux 5.7; UI render: default; VCL: gtk3
> Locale: en-US (en_US.UTF-8); UI: en-US
> Calc: threaded
> 
> There is only one item in the Manage dialog

Which browser did you use?
Comment 6 wingednova 2021-01-06 13:51:26 UTC
Not reproducible in 

Version: 7.0.3.1 (x64)
Build ID: d7547858d014d4cf69878db179d326fc3483e082
CPU threads: 8; OS: Windows 10.0 Build 19041; UI render: Skia/Vulkan; VCL: win
Locale: en-IN (en_IN); UI: en-US
Calc: threaded

nor in
Version: 7.1.0.0.alpha1 (x64)
Build ID: 987671387712c4f9061d6216ff2f001a7bb9e57b
CPU threads: 8; OS: Windows 10.0 Build 19041; UI render: Skia/Vulkan; VCL: win
Locale: en-IN (en_IN); UI: en-US
Calc: threaded

I used Google Chrome, and there's no item in Manage dialog in either version.
Comment 7 Telesto 2021-01-06 14:46:07 UTC
Still repro using Inside Clipboard file

Version: 7.2.0.0.alpha0+ (x64)
Build ID: 4e3ce9dd6ace0b22f7b3f45cf2338b201f4dc305
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL
Comment 8 Buovjaga 2021-01-19 12:23:22 UTC
No crash

Version: 7.2.0.0.alpha0+ (x64) / LibreOffice Community
Build ID: 2081eac430ac69619149e44b453a2d7dda41fc83
CPU threads: 2; OS: Windows 10.0 Build 19042; UI render: Skia/Raster; VCL: win
Locale: fi-FI (fi_FI); UI: en-US
Calc: threaded
Comment 9 Telesto 2021-01-19 14:54:01 UTC Comment hidden (obsolete)
Comment 10 Buovjaga 2021-01-19 14:57:35 UTC
(In reply to Telesto from comment #9)
> (In reply to Buovjaga from comment #8)
> Me lazy.. did you use Inside clipboard (comment 1) or followed (comment 0)
> 
> Comment 1 skips the whole my browser does this slightly different topic
> (didn't check... if this now actually gone)

comment 0
Comment 11 Xisco Faulí 2021-07-07 11:03:41 UTC Comment hidden (obsolete)
Comment 12 Telesto 2021-07-07 17:09:18 UTC Comment hidden (obsolete)
Comment 13 raal 2021-12-05 11:56:09 UTC
No repro Version: 7.4.0.0.alpha0+ / LibreOffice Community
Build ID: ba7db98cca3d8516697c94ef0d6af27db9e1655e
CPU threads: 4; OS: Linux 5.11; UI render: default; VCL: gtk3
Locale: cs-CZ (cs_CZ.UTF-8); UI: en-US
Calc: threaded
Browser Chromium 96.0.4664.45
Comment 14 Xisco Faulí 2021-12-13 12:20:59 UTC
Hello Telesto,
Please try again with the latest master build
Comment 15 Telesto 2021-12-13 12:24:04 UTC
Still crashing
Version: 7.4.0.0.alpha0+ (x64) / LibreOffice Community
Build ID: 7e5af164b7d293dd410710bed411e1ca64bbecf7
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL
Comment 16 Telesto 2021-12-13 12:29:45 UTC
Created attachment 176897 [details]
BT without symbols
Comment 17 Telesto 2021-12-13 12:31:50 UTC
FWIW: I have maybe 8 track changes registered on copy/paste. After save to ODT & reload it's reduced to 3 (and no crash)
Comment 18 Reche 2022-06-21 13:24:39 UTC
Able to reproduce it to the following Libre Office Writer version: 
Version: 7.3.4.2 (x64) / LibreOffice Community
Build ID: 728fec16bd5f605073805c3c9e7c4212a0120dc5
CPU threads: 4; OS: Windows 10.0 Build 19044; UI render: Skia/Vulkan; VCL: win
Locale: en-PH (en_PH); UI: en-US
Calc: threaded

Replicated into 2 Different scenarios: 

Scenario 1 (Reject the last track changes)
Replication steps: 
1. Open the provided link ( https://crashreport.libreoffice.org/stats/crash_details/31bd620a-3f90-4ecb-b474-8eef4859a9cf#allthreads) in Chrome Version 102.0.5005.115 (Official Build) (64-bit)
2. Press CTRL + A
3. Press CTRL + C
4. Open Libre Office Writer
5. Click EDIT from the File menu > Track Changes > Record
6. Press CTRL + V
7. Click EDIT from the File menu > Track Changes > Manage
8. Reject last changes (half of the track changes were removed) 
9. Reject one by one the remaining track changes
10. Close the dialog box
11. Press CTRL + Z a couple of times

Result: Libre Office Writer crash

Scenario 2 (Reject the first track changes) 
Replication steps: 
1. Open the provided link ( https://crashreport.libreoffice.org/stats/crash_details/31bd620a-3f90-4ecb-b474-8eef4859a9cf#allthreads) in Chrome Version 102.0.5005.115 (Official Build) (64-bit)
2. Press CTRL + A
3. Press CTRL + C
4. Open Libre Office Writer
5. Click EDIT from the File menu > Track Changes > Record
6. Press CTRL + V
7. Click EDIT from the File menu > Track Changes > Manage
8. Reject first changes 

Result: Libre Office Writer crash

Tried also to replicate it by viewing each track change and here’s what I’ve reproduced: 
1. Open the provided link ( https://crashreport.libreoffice.org/stats/crash_details/31bd620a-3f90-4ecb-b474-8eef4859a9cf#allthreads) in Chrome Version 102.0.5005.115 (Official Build) (64-bit)
2. Press CTRL + A
3. Press CTRL + C
4. Open Libre Office Writer
5. Click EDIT from the File menu > Track Changes > Record
6. Press CTRL + V
7. Click EDIT from the File menu > Track Changes > Manage (track changes recorded is 10)
8. Click from the first changes one by one (on the 8th track change, page hanged and unable to proceed)

Result: Libre Office Writer hanged and unable to proceed (you need to force close the application)
Comment 19 Reche 2022-06-24 06:59:49 UTC
Created attachment 180942 [details]
Document containing screenshots of replications steps
Comment 20 Tex2002ans 2024-02-16 23:47:59 UTC
Hmmm, I got a slightly different CRASHES following Reche's comment 18.

1st one with error:

- SwRedlineTable::Remove(unsigned __int64)
   - (Looks like only 2 of this kind were ever reported so far!)

2nd one with error:

- SwPosition::SwPosition(SwNode const &,o3tl::strong_int<long,Tag_SwNodeOffset>)

3rd one = NO CRASH for me.

- - -

Following "Scenario 1" steps in comment 18 exactly...

But only made it to:

[...]
8. Reject last changes (half of the track changes were removed)
9. Reject one by one the remaining track changes

After Step 8, when I then clicked "Reject" button ONCE, the entire thing crashed:

- https://crashreport.libreoffice.org/stats/crash_details/a58e03da-9469-49c7-a7ce-70cc23e88e0c

So it was:

- "Reject" the last change
- "Reject" the new last change
= CRASH

- - -

Following "Scenario 2" steps:

- https://crashreport.libreoffice.org/stats/crash_details/2b74b67a-0b36-4c05-b9e4-6f0f3fedfc8f

So it was:

- "Reject" the first change
= CRASH

- - -

Following "Scenario 3":

= NO CRASH for me.

- - - - - -

Everything was tested in:

Version: 24.2.0.3 (X86_64) / LibreOffice Community
Build ID: da48488a73ddd66ea24cf16bbc4f7b9c08e9bea1
CPU threads: 8; OS: Windows 10.0 Build 22631; UI render: Skia/Raster; VCL: win
Locale: en-US (en_US); UI: en-US
Calc: CL threaded

Browser I was copying from was:

- Chrome Version 121.0.6167.185 (Official Build) (64-bit)