Description: LibreOffice crashes while inspecting a file containing a custom shape and clicking on "Object" tree Steps to Reproduce: 1. Open the sample attachment 163404 [details] or create a new write file and add an arbitrary custom shape like a rectangle 2. Open "UNO Object Inspector" from "Tools > Development Tools" Menu 3. Find the only shape in "Shapes" part under "Object" section 4. Click on "Properties" 5. Select "@0" 6. Click on anywhere on the tree under "Object" section Actual Results: Crashing Expected Results: Not crashing Reproducible: Always User Profile Reset: No Additional Info: Version: 7.3.0.0.alpha0+ / LibreOffice Community Build ID: 1ec5a1300632a5455416b6cbb090d8c48353d939 CPU threads: 8; OS: Linux 5.8; UI render: default; VCL: gtk3 Locale: en-US (en_US.UTF-8); UI: en-US Calc: threaded
no repro in Version: 7.3.0.0.alpha0+ (x64) / LibreOffice Community Build ID: 4677345e3695bac158bb04048b4d5c608ed764b4 CPU threads: 4; OS: Windows 6.1 Service Pack 1 Build 7601; UI render: default; VCL: win Locale: ru-RU (ru_RU); UI: en-US Calc: CL
no repro Version: 7.3.0.0.alpha0+ / LibreOffice Community Build ID: 612d5b1a04fe022a34018d901bb9b052791d54e5 CPU threads: 4; OS: Linux 5.11; UI render: default; VCL: gtk3 Locale: cs-CZ (cs_CZ.UTF-8); UI: en-US Calc: threaded but my build is older then yours, recent regression?
No crash Version: 7.3.0.0.alpha0+ / LibreOffice Community Build ID: 36efb384a66b6dd645e0ae80fd7df68370a9dc8b CPU threads: 4; OS: Linux 5.11; UI render: default; VCL: gtk3 Locale: cs-CZ (cs_CZ.UTF-8); UI: en-US Calc: threaded
I can't reproduce it in Version: 7.3.0.0.alpha0+ / LibreOffice Community Build ID: 6daf48b50e1ff3bdd6a9f948c3e267e76b8a89d3 CPU threads: 4; OS: Linux 5.7; UI render: default; VCL: gtk3 Locale: en-US (en_US.UTF-8); UI: en-US Calc: threaded @Hossein, Could you please try to clean the user profile and retry ?
(In reply to Xisco Faulí from comment #4) > I can't reproduce it in > > Version: 7.3.0.0.alpha0+ / LibreOffice Community > Build ID: 6daf48b50e1ff3bdd6a9f948c3e267e76b8a89d3 > CPU threads: 4; OS: Linux 5.7; UI render: default; VCL: gtk3 > Locale: en-US (en_US.UTF-8); UI: en-US > Calc: threaded > > @Hossein, Could you please try to clean the user profile and retry ? Started LO in safe mode, cleared profile, but LO still crashes.
[Automated Action] NeedInfo-To-Unconfirmed
Created attachment 174224 [details] gdb backtrace The crash happens in: sw/source/core/doc/docbm.cxx:1318 void MarkManager::deleteMark(const IMark* const pMark) #4 0x00007fffdddaf1a0 in sw::mark::MarkManager::deleteMark(sw::mark::IMark const*) (this=0x555559d22820, pMark=0x55555b01d570) at /home/hossein/Projects/libreoffice/core/sw/source/core/doc/docbm.cxx:1318
*** Bug 143638 has been marked as a duplicate of this bug. ***
ok, I do reproduce the issue with a debug build, lowering priority
*** Bug 143636 has been marked as a duplicate of this bug. ***
Hi Hossein, is this issue still reproducible in a master build ?
(In reply to Xisco Faulí from comment #11) > Hi Hossein, > is this issue still reproducible in a master build ? Yes. Still reproducible in the latest master for Linux: Version: 7.3.0.0.alpha1+ / LibreOffice Community Build ID: 4d66721962f60a9c8b4653dc724f163c45e6ddd9 CPU threads: 8; OS: Linux 5.11; UI render: default; VCL: x11 Locale: en-US (en_US.UTF-8); UI: en-US Calc: threaded It is not reproducible in Windows, so I set the bug to Linux only: Not reproducible: Version: 7.3.0.0.alpha1+ (x64) / LibreOffice Community Build ID: 4d66721962f60a9c8b4653dc724f163c45e6ddd9 CPU threads: 32; OS: Windows 10.0 Build 19043; UI render: Skia/Raster; VCL: win Locale: en-US (en_DE); UI: en-US Calc: threaded
This crashes because of using gcc debug code, which explains why it only occurs with a debug build. Let's treat it similarly to an assert. I haven't debugged into it, but probably the prerequisites for using equal_range aren't met.
Dear Hossein, This bug has been in ASSIGNED status for more than 3 months without any activity. Resetting it to NEW. Please assign it back to yourself if you're still working on this.
Still reproducible with the latest 7.4 master: Version: 7.4.0.0.alpha0+ / LibreOffice Community Build ID: 18715f6a63af55045b108b98abeffeae8e51518b CPU threads: 8; OS: Linux 5.13; UI render: default; VCL: gtk3 Locale: en-US (en_US.UTF-8); UI: en-US Calc: threaded
Created attachment 182520 [details] bt with debug symbols + console logs On pc Debian x86-64 with master sources updated today, I could reproduce this. I attached console logs in addition to bt which is almost identical to Hossein's one.
Created attachment 184148 [details] gdb bt Here's an updated bt with last console logs.
Created attachment 184223 [details] Valgrind trace If it can help, I retrieved a Valgrind trace on pc debian x86-64 with master sources updated today + brand new LO profile + gen rendering.