Created attachment 115997 [details] Test document with text, tables, pictures and comments Steps: 1. Open the attached document (test.odt) 2. Edit > Find 3. Navigate by 4. Navigate by tables 5. Navigate by pictures 6. Navigate by comments Result: LO WRITER crashes
Confirmed on Linux 5.1 master (0359a59b6dec4a3c1e8fdc6e51d179fd6db4aad7) To clarify the instructions in comment 0: 1. Open attachment 115997 [details] 2. Open the find bar (Edit - Find) 3. Click on "Navigate by" on the find bar 4. In the small "Navigation" window (not the large "Navigator" window or the equivalent on the sidebar - see also bug 79167), select "Table" 5. Navigate up and down with the arrows on the find bar 6. Repeat 4 and 5 for "Graphics" (* this should have been renamed "Images" for consistency with other UI elements) 7. Repeat 4 and 5 for "Comment" I got two different backtraces doing this, which I will attach
Created attachment 116015 [details] Linux 5.1 master backtrace
Created attachment 116016 [details] Linux 5.1 master backtrace [2] This one looks like it's dbgutil only
"Simpler" way to reproduce: display the Navigation toolbox, step 1 2 and 3 from comment 1 Select the big image page 1 Select Comment in Navigation Clic on "Move Up" arrow Crash in sw/source/core/crsr/crstrvl.cxx:703 because pTNd is null const SwPosition& rPos = *pCrsr->GetPoint(); SwTextNode* pTNd = rPos.nNode.GetNode().GetTextNode(); OSL_ENSURE( pTNd, "No ContentNode" ); I presume an image node has no TextNode
Fix: https://gerrit.libreoffice.org/15952
Philippe Jung committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=4826007f0e09160ffdb592d10b65eb262ada18c8 tdf#91592 WRITER crashes when navigating through comments It will be available in 5.1.0. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
Philippe Jung committed a patch related to this issue. It has been pushed to "libreoffice-5-0": http://cgit.freedesktop.org/libreoffice/core/commit/?id=260a4a63d16a01842b50a15e51e08590dbbb75a4&h=libreoffice-5-0 tdf#91592 WRITER crashes when navigating through comments It will be available in 5.0.0.0.beta2. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.