Steps: 1. Open attachment 2. Edit the chart 3. Move the blue shape 4. Enter text edit mode on the blue shape by double-clicking it 5. If it hasn't crashed, repeat steps 3-4 until it does Result: - LO 24.2: https://crashreport.libreoffice.org/stats/crash_details/dbaa1670-88bb-4ead-8fb4-a441ac59ff71 - LO 7.6 with ".LTHUNK11.lto_priv.12399" signature: https://crashreport.libreoffice.org/stats/crash_details/6989bc29-7c7d-4a82-a416-0446681923b4 Reproduced in recent daily build: Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community Build ID: ad1f0bdeac30fca1dc56a08803ef23f2aca4db05 CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3 Locale: en-AU (en_AU.UTF-8); UI: en-US Calc: CL threaded Bibisected with linux-64-7.5 repo to first bad build [79750afc96c99b9acaadb168cb6970f1d02aa004] which points to: commit ca1b528972235c16dab74e3662ff768c68a6cc38 author Michael Weghorn Wed Jul 13 10:23:59 2022 +0200 committer Michael Weghorn Wed Jul 13 12:04:22 2022 +0200 gtk3 a11y: Activate code that needs AtkRectangle Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137011 Michael, can you please have a look? Sorry I don't have more consistent steps. As expected, no repro with kf5 or gen VCL plugins.
Created attachment 194059 [details] sample ODS
Created attachment 194061 [details] Backtrace
Reproduced. From a first analysis, this looks like a preexisting lifecycle issue in the accessible shape code that newly gets triggered since the gtk3 a11y code calls into that code, which it didn't before. This will need further analysis Backtrace: attachment 194061 [details] Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community Build ID: 0ffdfb58a07e2a1b89a36bc241c6a2767e82cd2c CPU threads: 32; OS: Linux 6.7; UI render: default; VCL: gtk3 Locale: en-GB (en_GB.UTF-8); UI: en-US Calc: threaded