Bug 149173 - Crash BigPtrEntry::GetArray(this=0x0000600001726940) const at bparr.hxx:106:23 (STR: comment 3)
Summary: Crash BigPtrEntry::GetArray(this=0x0000600001726940) const at bparr.hxx:106:2...
Status: VERIFIED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
7.4.0.0 alpha0+
Hardware: All All
: medium normal
Assignee: Attila Bakos (NISZ)
URL:
Whiteboard: target:7.5.0 target:7.4.0.2
Keywords: bibisected, bisected, haveBacktrace, regression
Depends on:
Blocks: Undo-Redo Crash
  Show dependency treegraph
 
Reported: 2022-05-19 10:47 UTC by Telesto
Modified: 2024-03-22 01:32 UTC (History)
5 users (show)

See Also:
Crash report or crash signature:


Attachments
Example file (23.15 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document)
2022-05-19 10:48 UTC, Telesto
Details
Example file (23.28 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document)
2022-05-19 18:54 UTC, Telesto
Details
bt with debug symbols (9.33 KB, text/plain)
2022-05-20 19:15 UTC, Julien Nabet
Details
console logs during opening (170.11 KB, text/plain)
2022-05-20 19:17 UTC, Julien Nabet
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2022-05-19 10:47:13 UTC
Description:
Crash BigPtrEntry::GetArray(this=0x0000600001726940) const at bparr.hxx:106:23

Steps to Reproduce:
1. Open the attached file (original attachment 179717 [details], I likely only turned on track changes and saved it)
2. Disable show track changes Edit -> Track changes -> Show 
3. CTRL+A
4. CTRL-X

Actual Results:
Crash

Expected Results:
No crash


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 7.4.0.0.alpha1+ / LibreOffice Community
Build ID: 2e86718626a07e1656661df3ad69a64848bf4614
CPU threads: 8; OS: Mac OS X 12.3.1; UI render: Skia/Metal; VCL: osx
Locale: nl-NL (nl_NL.UTF-8); UI: en-US
Calc: threaded
Comment 1 Telesto 2022-05-19 10:48:10 UTC
Created attachment 180217 [details]
Example file
Comment 2 Telesto 2022-05-19 18:54:47 UTC
Created attachment 180234 [details]
Example file
Comment 3 Telesto 2022-05-20 18:01:32 UTC
New steps
1. Open the attached file (original attachment 179717 [details])
2. CTRL+A
3. CTRL+X
4. CTRL+Z
5. Close document -> No save
6. Reopen file from start center
7. CTRL+A
8. CTRL+X -> Crash

Version: 7.4.0.0.alpha0+ (x64) / LibreOffice Community
Build ID: cdf8e971d5d46df4bcab35a99c4254df9459213f
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: en-US (nl_NL); UI: en-GB
Calc: CL Jumbo
Comment 4 Telesto 2022-05-20 18:03:37 UTC
No crash with
Version: 7.3.0.0.alpha1+ (x64) / LibreOffice Community
Build ID: 7b0aabe71d2455f6f643553a07f1056935cf190f
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL
Comment 5 Telesto 2022-05-20 18:06:43 UTC
There is lots of broken stuff in document if you do CTRL+Z at step 4 or instead of CTRL+Z use CTRL+V to paste
Comment 6 Julien Nabet 2022-05-20 19:15:17 UTC
Created attachment 180266 [details]
bt with debug symbols

On pc Debian x86-64 with master sources updated today, I got an assertion just after closing the document put in attachment.
Comment 7 Julien Nabet 2022-05-20 19:17:56 UTC
Created attachment 180267 [details]
console logs during opening

Considering logs during opening show it needs some work here.
Comment 8 raal 2022-05-26 17:04:12 UTC
No crash with Version: 7.4.0.0.alpha1+ / LibreOffice Community
Build ID: b6e0ae1b1bad5e222e21bbb4b2a158c1fc6f9779
CPU threads: 4; OS: Linux 5.13; UI render: default; VCL: x11
Locale: cs-CZ (cs_CZ.UTF-8); UI: en-US
Calc: threaded Jumbo
Comment 9 Aron Budea 2022-06-19 05:21:25 UTC
Bibsected using steps from comment 3 to the following commit using repo bibisect-linux-64-7.4. Adding CC: to Attila Bakos (NISZ).

https://cgit.freedesktop.org/libreoffice/core/commit/?id=2951cbdf3a6e2b62461665546b47e1d253fcb834
author		Attila Bakos (NISZ) <bakos.attilakaroly@nisz.hu>	2021-11-10 14:10:11 +0100
committer	László Németh <nemeth@numbertext.org>	2022-01-03 14:28:15 +0100

tdf#143574 OOXML export/import of textboxes in group shapes
Comment 10 Attila Bakos (NISZ) 2022-06-20 15:41:51 UTC
patch will be here: https://gerrit.libreoffice.org/c/core/+/136192
Comment 11 Commit Notification 2022-07-11 12:10:01 UTC
Attila Bakos (NISZ) committed a patch related to this issue.
It has been pushed to "master":

https://git.libreoffice.org/core/commit/1d3d2a995239c3c71432006cb795324c56a0412a

tdf#148687 tdf#149173 tdf#149546 sw: fix crash with textboxes

It will be available in 7.5.0.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.
Comment 12 NISZ LibreOffice Team 2022-07-13 06:28:09 UTC
Verified in:
Version: 7.5.0.0.alpha0+ (x64) / LibreOffice Community
Build ID: a4ab155ae15e9e6d4deb157634f8b86c87fcbde4
CPU threads: 4; OS: Windows 10.0 Build 19042; UI render: Skia/Vulkan; VCL: win
Locale: hu-HU (hu_HU); UI: en-US
Calc: CL
Comment 13 Commit Notification 2022-07-13 07:26:00 UTC
Attila Bakos (NISZ) committed a patch related to this issue.
It has been pushed to "libreoffice-7-4":

https://git.libreoffice.org/core/commit/44eef5f494825a26594ba3d50ef1f3211ae73b9b

tdf#148687 tdf#149173 tdf#149546 sw: fix crash with textboxes

It will be available in 7.4.0.2.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.