Bug 169252 - Draw/Impress: Crash on copy, paste and click comment
Summary: Draw/Impress: Crash on copy, paste and click comment
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: UI (show other bugs)
Version:
(earliest affected)
25.2.0.3 release
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: bibisected, bisected, haveBacktrace, regression
Depends on:
Blocks:
 
Reported: 2025-11-04 16:13 UTC by nutka
Modified: 2025-11-05 01:30 UTC (History)
4 users (show)

See Also:
Crash report or crash signature: ["sdr::annotation::Annotation::findAnnotationObject()"]

Attachments
Demonstrating the issue on LibO 25.2.7.2 (Windows 11) (682.58 KB, image/gif)
2025-11-04 16:13 UTC, nutka 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description nutka 2025-11-04 16:13:37 UTC 
Created attachment 203730 [details]
Demonstrating the issue on LibO 25.2.7.2 (Windows 11)

In Draw or Impress:
1. Insert a comment (menu Insert ⟶ Comment)
2. menu Edit ⟶ Copy
3. Paste the clipboard (Edit ⟶ Paste)
4. click the comment anchor

Result: crash

Cf. the attached .gif recording


------- Configuration:

Version: 25.2.7.2 (X86_64) / LibreOffice Community
Build ID: 5cbfd1ab6520636bb5f7b99185aa69bd7456825d
CPU threads: 8; OS: Windows 11 X86_64 (10.0 build 26200); UI render: Skia/Raster; VCL: win
Locale: en-US (fr_FR); UI: en-US
Calc: threaded


Version: 25.8.2.2 (X86_64)
Build ID: d401f2107ccab8f924a8e2df40f573aab7605b6f


Version: 26.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 620(Build:0)
Comment 1 Xisco Faulí 2025-11-04 16:49:46 UTC 
Reproduced in

Version: 26.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: fdcc566a017e1b107723b8b40a18088e19a31f04
CPU threads: 8; OS: Linux 6.1; UI render: default; VCL: gtk3
Locale: es-ES (es_ES.UTF-8); UI: en-US
Calc: threaded
Comment 2 Xisco Faulí 2025-11-04 16:58:30 UTC 
Regression introduced by:

commit d3afb7acebc023340aef5d70d4f35cecb359cd54	[log]
author	Tomaž Vajngerl <tomaz.vajngerl@collabora.co.uk>	Tue Jan 07 11:58:19 2025 +0900
committer	Tomaž Vajngerl <quikee@gmail.com>	Tue Jan 07 05:43:58 2025 +0100
tree 441e9248d291ec87ad891ae311d61b33cd48fef4
parent c034a21f359db6bd8ba7b4938d4501bbcc87e21d [diff]

tdf#164529 support annotation selection with edit (trigger pop-up)

Bisected with: bibisect-linux64-25.8
Comment 3 Julien Nabet 2025-11-04 19:24:58 UTC 
On pc Debian x86-64 with master sources updated today, I got an assertion.
Here's the relevant part of the bt:
#4  0x00007f136c832420 in __assert_fail_base (fmt=<optimized out>, assertion=<optimized out>, file=<optimized out>, line=213, function=<optimized out>) at ./assert/assert.c:118
#5  0x00007f12ff5d9c6b in rtl::Reference<sdr::annotation::Annotation>::operator-> (this=0x5601097e9ce0) at include/rtl/ref.hxx:213
#6  0x00007f12ff8a6027 in sd::AnnotationManagerImpl::SelectAnnotation (this=0x5601036510b0, xAnnotation=empty rtl::Reference, bEdit=true)
    at /home/julien/lo/libreoffice/sd/source/ui/annotations/annotationmanager.cxx:900
#7  0x00007f12ff8a85c4 in sd::AnnotationManager::SelectAnnotation (this=0x560107020790, xAnnotation=empty rtl::Reference, bEdit=true)
    at /home/julien/lo/libreoffice/sd/source/ui/annotations/annotationmanager.cxx:1319
#8  0x00007f12ffa3f40d in sd::FuSelection::MouseButtonUp (this=0x560104161600, rMEvt=...) at /home/julien/lo/libreoffice/sd/source/ui/func/fusel.cxx:874
#9  0x00007f12ffede04c in sd::ViewShell::MouseButtonUp (this=0x5601037081c0, rMEvt=..., pWin=0x56010342d510) at /home/julien/lo/libreoffice/sd/source/ui/view/viewshel.cxx:709
#10 0x00007f12ffe26dc9 in sd::DrawViewShell::MouseButtonUp (this=0x5601037081c0, rMEvt=..., pWin=0x56010342d510) at /home/julien/lo/libreoffice/sd/source/ui/view/drviews4.cxx:499
#11 0x00007f12ffec6895 in sd::Window::MouseButtonUp (this=0x56010342d510, rMEvt=...) at /home/julien/lo/libreoffice/sd/source/ui/view/sdwindow.cxx:256