LibreOffice 36daily120318 3.6.0alpha0+
Build ID: 49d7d4b-985da32-e67b1bf-879ce36-638d9c
Created attachment 58784 [details]
bt with symbols on master
I reproduced this pb on master (pc Debian x86-64).
Attached the bt with symbols.
I finally understand why it crashes but it is much more complex to fix this.
The code has been wrong for a long time and only worked by luck. We are calling a virtual function at an object that is already in thee destructor. This has been so for a long time but only crashes after Stephan's recent commit to include protected virtual destructors.
I need to think about a way to solve this problem.
<http://cgit.freedesktop.org/libreoffice/core/commit/?id=706ac4779de1870cf0d922f1cc3f6d4470392403> "Make sure one base class does not use another one after destruction" should fix the immediate problem (though, as discussed in private, the whole thing looks rather fragile and could benefit from clean up).
Markus Mohrhard committed a patch related to this issue.
It has been pushed to "master":
prevent call to virtual method in destructor, fdo#47589
Stephan's commit already fixed the crash and I now fixed the problem with the virtual function call in the destructor.
There was a similar problem with the report designer formula window that has been fixed too now.
The calc code does still need a lot of love in this area. We should try to get rid of ScAnyRefDlg and all the lifetime problems around it. We are still deleting ScFormulaDlg and ScFormulaReferenceHelper while we are using them.
checked in master from 2012-04-04
OK - thanks!