https://bugs.documentfoundation.org/show_bug.cgi?id=164783
Bug ID: 164783
Summary: Libreoffice crashes when clicking on grid form column
header or in empty space below rows
Product: LibreOffice
Version: 7.4.7.2 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: UI
Assignee: [email protected]
Reporter: [email protected]
Description:
When a user clicks on the column header of a
"com.sun.star.awt.grid.UnoControlGrid" control, or in the empty space below the
rows, it sometimes causes Libreoffice to crash. It is caused by an
out-of-bounds nChildIndex value being passed to the
"AccessibleGridControlTable::getAccessibleChild" function in source file
"accessibility/source/extended/AccessibleGridControlTable.cxx". It will try to
access the row index with this out-of-bounds value, causing a segmentation
fault.
Steps to Reproduce:
1: Open the attached file
2: Click on the 'Grid in dialog' button
3: Click on a column header to sort the column, or in the empty area below the
rows
4: If it doesn't crash after several clicks, close and reopen the dialog and
try again
5: Sometimes it takes several times, but it will eventually crash Libreoffice
Actual Results:
Libreoffice crashes because of a segmentation fault
Expected Results:
The grid should sort the rows according to the selected column header without
crashing Libreoffice.
Reproducible: Always
User Profile Reset: Yes
Additional Info:
Version: 7.4.7.2 / LibreOffice Community
Build ID: 40(Build:2)
CPU threads: 12; OS: Linux 6.1; UI render: default; VCL: gtk3
Locale: en-US (en_US.UTF-8); UI: en-US
Debian package version: 4:7.4.7-1+deb12u6
Calc: threaded
--
You are receiving this mail because:
You are the assignee for the bug.
