Steps to reproduce: 1. Open impress 2. Insert a shape 3. Right Click - Area 4. Click on 'Add Color palette via extension' 5. Close the dialog 6. CLose the Are dialog -> Crash Reproduced in Version: 7.5.0.0.alpha0+ / LibreOffice Community Build ID: b55a0eea78837d43e77078e96729befb8e420773 CPU threads: 8; OS: Linux 5.10; UI render: default; VCL: gtk3 Locale: es-ES (es_ES.UTF-8); UI: en-US Calc: threaded
Regression introduced by: author Heiko Tietze <tietze.heiko@gmail.com> 2021-09-02 10:38:14 +0200 committer Heiko Tietze <heiko.tietze@documentfoundation.org> 2021-09-03 11:59:17 +0200 commit ef3dd0e04e734974ff9a6b7f30d0377ecd952842 (patch) tree df05031bd006061427f6d9217bdfd7061d3ef52f parent e72a7368b368a822d2400ee7db60312226ad3195 (diff) Resolves tdf#120333 - Access to color palettes via tight extensions Bisected with: bibisect-linux64-7.3 Adding Cc: to Heiko Tietze
@Caolán, I thought you might be interested in this issue
I feel that commit is innocent for why it crashes, maybe just adds more "stuff" so a use after free is more likely to crash. https://gerrit.libreoffice.org/c/core/+/136679 seems to work for me to avoid the problem.
Caolán McNamara committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/27ad7de6a9a8a019a0138179685268fc52e010d0 tdf#149787 capture a copy of mpViewShell and mpView It will be available in 7.5.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
i'll assume what i saw was the same problem and call it fixed, backports to7-4 and 7-3 in gerrit
Issue verified in Version: 7.5.0.0.alpha0+ / LibreOffice Community Build ID: 48010539f695bc269034f12cf72aa0665cca10de CPU threads: 8; OS: Linux 5.10; UI render: default; VCL: gtk3 Locale: es-ES (es_ES.UTF-8); UI: en-US Calc: threaded @Caolán, thanks for fixing this issue!!!
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-3": https://git.libreoffice.org/core/commit/744439e73038ea5bdbdd18b10e0e90c22bb9928c tdf#149787 capture a copy of mpViewShell and mpView It will be available in 7.3.5. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Caolán McNamara committed a patch related to this issue. It has been pushed to "libreoffice-7-4": https://git.libreoffice.org/core/commit/2739910b02dbf5e8bf89b7edd48428c4df31f319 tdf#149787 capture a copy of mpViewShell and mpView It will be available in 7.4.0.0.beta2. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Xisco Fauli committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/c62587987f2046b3b4b22af3d9897dd17077d5a8 tdf#149787: sd: Add unittest It will be available in 7.5.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.