Created attachment 62819 [details] gdb log with full backtrace. Steps to reproduce: 1. Launch writer 2. Ctrl+F12 to insert a table. Accept the default table settings. 3. Table Properties->AutoFormat 4. Choose the "3D" autoformat, press OK Result: Writer crashes. gdb log attached with full backtrace. It's crashing because we're calling push_back on a boost ptr_vector with a null pointer. The crash occurs in sw/source/core/undo/untbl.cxx line 1320, and I tracked it back to the commit 2552420c by Noel Grandin (http://cgit.freedesktop.org/libreoffice/core/commit/?id=2552420cdc7588e1b0da06fd6810dba855e9d43c). The commit replaced SV_DECL_PTRARR goo with boost::ptr_vector. It might be that SV_DECL_PTRARR accepted null pointers while boost::ptr_vector does not, or it might be that a regression happened causing the pointer to be null now when it wasn't before.
Bug confirmed here in version 3.6.0alpha1+ (Build ID: 793f240) on my Windows XOP machine
For 3.6, the best thing to do is to revert my change. For master, I'll spin a patch that uses std::vector.
sorry, Noel, I have already done that...
David Tardon committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=b3473b9d227df79a383d09c2f2ebf6d6eebf3697 fdo#50896 SfxItemSets can contain emtpy element
David Tardon committed a patch related to this issue. It has been pushed to "libreoffice-3-6": http://cgit.freedesktop.org/libreoffice/core/commit/?id=9334a18fdffeb2a2255b1cf82c2ebc511421f24c&g=libreoffice-3-6 fdo#50896 SfxItemSets can contain emtpy element It will be available in LibreOffice 3.6.