Created attachment 114587 [details]
test document for crash

Crashes in 4.4.0 beta1, 4.4.2.2 and daily recent

Command line returns
  pure virtual method called
  terminate called without an active exception

Reproducible with LO 4.4.1.2, Win 8.1

Thanks for confirming Andy.
I would not call it critical. I've no idea how to create a spreadsheet that behaves the same ;) So I guess it's a rather exceptional situation.

Cheers,

4.3.6.1 does not crash.. regression

Created attachment 114594 [details]
bt with debug symbols (master sources)

On pc Debian x86-64 with master sources updated today, I could reproduce this.

Created attachment 114595 [details]
bt from transactionmanager.cxx

I also noticed this console log:
warn:fwk:7980:1:framework/source/fwi/threadhelp/transactionmanager.cxx:265: TransactionManager...: Owner instance stand in close method. Call was rejected!

So I attached bt from this point.

Argh! Sorry guys, bts are not for this one! :-(

Created attachment 114599 [details]
console bt with master sources

I started from scratch and reproduced this.

I attached error/warn console logs at each step + bt.

thanks for the bt Julien!

It's another one from one of our old favourites:

    commit 7d9bb549d498d6beed2c4050c402d09643febdfa
    Author:     Armin Le Grand <alg@apache.org>
    AuthorDate: Mon Jun 2 15:00:50 2014 +0000
    Commit:     Miklos Vajna <vmiklos@collabora.co.uk>
    CommitDate: Tue Jul 1 13:30:09 2014 +0200
    
        Related: #i124638# Second step of DrawingLayer FillAttributes...

Also reproducible with LO 4.4.2.2 on linux 64-bit

And yes its not with every spreadsheet, but I have at least two... :-/

*** Bug 91081 has been marked as a duplicate of this bug. ***

With 5.0.0 master, Format -> Page leads to:

warn:legacy.osl:3605:1:svl/source/items/itempool.cxx:654: unknown WhichId - cannot put item
soffice.bin: /home/philippe/src/git-repo/libreoffice/core/svl/source/items/poolio.cxx :708 : sal_uInt16 SfxItemPool::GetIndex_Impl(sal_uInt16) const:  l'assertion « false && "missing bounds check before use" » a échoué.

Program received signal SIGABRT, Aborted.
0x00007ffff7519cc9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56	../nptl/sysdeps/unix/sysv/linux/raise.c: Aucun fichier ou dossier de ce type.
(gdb)  bt
#0  0x00007ffff7519cc9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007ffff751d0d8 in __GI_abort () at abort.c:89
#2  0x00007ffff7512b86 in __assert_fail_base (fmt=0x7fffdc1fa05f "%s%s%s :%u : %s%s l'assertion « %s » a échoué.\n%n", 
    assertion=assertion@entry=0x7ffff427a0b0 "false && \"missing bounds check before use\"", 
    file=file@entry=0x7ffff427a060 "/home/philippe/src/git-repo/libreoffice/core/svl/source/items/poolio.cxx", line=line@entry=708, 
    function=function@entry=0x7ffff427a500 <SfxItemPool::GetIndex_Impl(unsigned short) const::__PRETTY_FUNCTION__> "sal_uInt16 SfxItemPool::GetIndex_Impl(sal_uInt16) const") at assert.c:92
#3  0x00007ffff7512c32 in __GI___assert_fail (assertion=0x7ffff427a0b0 "false && \"missing bounds check before use\"", 
    file=0x7ffff427a060 "/home/philippe/src/git-repo/libreoffice/core/svl/source/items/poolio.cxx", line=708, 
    function=0x7ffff427a500 <SfxItemPool::GetIndex_Impl(unsigned short) const::__PRETTY_FUNCTION__> "sal_uInt16 SfxItemPool::GetIndex_Impl(sal_uInt16) const") at assert.c:101
#4  0x00007ffff41fcf47 in SfxItemPool::GetIndex_Impl(unsigned short) const ()
   from /home/philippe/src/git-repo/libreoffice/core/instdir/program/libsvllo.so
#5  0x00007ffff41ece9a in SfxItemPool::Put(SfxPoolItem const&, unsigned short) ()
   from /home/philippe/src/git-repo/libreoffice/core/instdir/program/libsvllo.so
#6  0x00007ffff41f8c83 in SfxItemSet::Put(SfxPoolItem const&, unsigned short) ()
   from /home/philippe/src/git-repo/libreoffice/core/instdir/program/libsvllo.so
#7  0x00007fffc9b4444f in setSvxBrushItemAsFillAttributesToTargetSet(SvxBrushItem const&, SfxItemSet&) ()
   from /home/philippe/src/git-repo/libreoffice/core/instdir/program/../program/libsvxcorelo.so
#8  0x00007fffae8f5fc9 in SvxPageDescPage::ResetBackground_Impl (this=0x1f2d010, rSet=...)
    at /home/philippe/src/git-repo/libreoffice/core/cui/source/tabpages/page.cxx:1332
#9  0x00007fffae8f27a6 in SvxPageDescPage::Reset (this=0x1f2d010, rSet=0x1abed10)
    at /home/philippe/src/git-repo/libreoffice/core/cui/source/tabpages/page.cxx:646
#10 0x00007ffff475140b in SfxTabDialog::ActivatePageHdl(TabControl*) () from /home/philippe/src/git-repo/libreoffice/core/instdir/program/libsfxlo.so
#11 0x00007ffff1e221e9 in Link<void*, long>::Call (this=0x1ef57c8, data=0x1ef5540)
    at /home/philippe/src/git-repo/libreoffice/core/include/tools/link.hxx:141
#12 0x00007ffff2021c88 in TabControl::ActivatePage (this=0x1ef5540) at /home/philippe/src/git-repo/libreoffice/core/vcl/source/control/tabctrl.cxx:1626
#13 0x00007ffff2023a48 in TabControl::calculateRequisition (this=0x1ef5540)

Caolán McNamara committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=8ae25bbc092254f680e2976873f15bdbc26615ef

Resolves: tdf#90435 secondary pool set to that of temp docs drawing layers

It will be available in 5.1.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds
Affected users are encouraged to test the fix and report feedback.

Caolán McNamara committed a patch related to this issue.
It has been pushed to "libreoffice-5-0":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=fbcd55ea26b4536e7611a44fc63b79733b82b81e&h=libreoffice-5-0

Resolves: tdf#90435 secondary pool set to that of temp docs drawing layers

It will be available in 5.0.0.0.beta2.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds
Affected users are encouraged to test the fix and report feedback.

*** Bug 90563 has been marked as a duplicate of this bug. ***

Caolán McNamara committed a patch related to this issue.
It has been pushed to "libreoffice-4-4":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=cbef9bda246c13dcad27bf8205930fc16b3e0265&h=libreoffice-4-4

Resolves: tdf#90435 secondary pool set to that of temp docs drawing layers

It will be available in 4.4.5.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds
Affected users are encouraged to test the fix and report feedback.