Bug 167177 - Crash when rejecting a change (track changes) in specific case (also assert: Index out of bounds)
Summary: Crash when rejecting a change (track changes) in specific case (also assert: ...
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
4.4.7.2 release
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: haveBacktrace
Depends on:
Blocks: Crash-Assert Crash-BigPtrArray
  Show dependency tree / graph
 
Reported: 2025-06-23 19:29 UTC by Telesto
Modified: 2025-06-27 20:09 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:

Attachments
gdb bt (7.20 KB, text/plain)
2025-06-27 19:48 UTC, Julien Nabet 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2025-06-23 19:29:51 UTC 
Description:
Crash when rejecting a change (track changes) in specific case

Steps to Reproduce:
1. Open attachment 201379 [details] from bug 167132
2. Edit -> Track Changes -> Record -> ON
3. Select the first line of text
4. Format -> Columns -> Enter 2 columns & press OK
5. Right Click the line marked as 'record change'
6. Pick Reject


Actual Results:
Crash

Expected Results:
No crash


Reproducible: Always


User Profile Reset: No

Additional Info:
Version: 26.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 6faa7e6f7bae3e6a613b4f4b7cee4a9c6d2b7aae
CPU threads: 4; OS: Windows 10 X86_64 (build 19045); UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL threaded
Comment 1 Telesto 2025-06-23 19:33:10 UTC 
Also in
Version: 7.6.3.0.0+ (X86_64) / LibreOffice Community
Build ID: 35f19e5cb93ce218787904e99c2bedfd40e725cc
CPU threads: 4; OS: Windows 10.0 Build 19045; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL threaded

and in
Version: 6.4.0.0.alpha1+ (x64)
Build ID: 9bc848cf0d301aa57eabcffa101a1cf87bad6470
CPU threads: 4; OS: Windows 10.0 Build 19045; UI render: default; VCL: win; 
Locale: nl-NL (nl_NL); UI-Language: en-US
Calc: CL

and in
Versie: 4.4.7.2 
Build ID: f3153a8b245191196a4b6b9abd1d0da16eead600
Locale: nl_NL
Comment 2 Telesto 2025-06-23 19:36:49 UTC 
swlo!BigPtrArray::operator[]+0x106
swlo!SwNodeIndex::SwNodeIndex+0x3c
swlo!SwPosition::SwPosition+0x1b
swlo!SwDocShell::GetUpdateDocMode+0x132f3
swlo!SwDocShell::GetUpdateDocMode+0x21026
swlo!SwDocShell::GetUpdateDocMode+0xb003
swlo!SwDocShell::GetUpdateDocMode+0x13aae
swlo!sw::mark::Fieldmark::SetFieldHelptext+0x4c07
swlo!sw::mark::Fieldmark::SetFieldHelptext+0xf19c
swlo!sw::mark::Fieldmark::SetFieldHelptext+0xfc04
swlo!SwEditShell::RejectRedline+0x7f
swlo!SwView::Execute+0x35e0
Comment 3 Mateusz Wlazłowski 2025-06-24 16:14:42 UTC 
Reproducible


Version: 25.2.4.3 (X86_64) / LibreOffice Community
Build ID: 33e196637044ead23f5c3226cde09b47731f7e27
CPU threads: 8; OS: Linux 6.11; UI render: default; VCL: gtk3
Locale: en-US (en_US.UTF-8); UI: en-US
Flatpak
Calc: threaded
Comment 4 Julien Nabet 2025-06-27 19:48:56 UTC 
Created attachment 201522 [details]
gdb bt

On pc Debian x86-64 with master sources updated today, I could reproduce this.

I attached bt + some gdb traces.