https://bugs.freedesktop.org/show_bug.cgi?id=47368

--- Comment #95 from Tor Lillqvist <[email protected]> 2012-09-09 11:09:45 
UTC ---
I built the 3.6 branch with --enable-debug, and reproduced.

This indeed is some kind of lifecycle management issue. It seems that
svx::a11y::AccFrameSelector::WindowEventListener() in
svx/source/accessibility/AccessibleFrameSelector.cxx (defined with the
IMPL_LINK macro) gets called after the AccFrameSelector object in question has
been destroyed.

Some debugging output:

AccFrameSelector::AccFrameSelector() this=0xc584b60
AccFrameSelector::AccFrameSelector() this=0xc584de0              <= constructor
AccFrameSelector::AccFrameSelector() this=0xc43a0e4
AccFrameSelector::AccFrameSelector() this=0xc43a364
AccFrameSelector::AccFrameSelector() this=0xc43a5e4
AccFrameSelector::AccFrameSelector() this=0xc43a864
AccFrameSelector::AccFrameSelector() this=0xc43aae4
AccFrameSelector::WindowEventListener() this=0xc584b60
AccFrameSelector::WindowEventListener() this=0xc584de0
AccFrameSelector::WindowEventListener() this=0xc43a0e4
AccFrameSelector::WindowEventListener() this=0xc43a364
AccFrameSelector::WindowEventListener() this=0xc43a5e4
AccFrameSelector::WindowEventListener() this=0xc43a864
AccFrameSelector::WindowEventListener() this=0xc43aae4
AccFrameSelector::~AccFrameSelector() this=0xc584de0             <= destructor
AccFrameSelector::~AccFrameSelector() this=0xc584de0 returning
AccFrameSelector::~AccFrameSelector() this=0xc43a0e4
AccFrameSelector::~AccFrameSelector() this=0xc43a0e4 returning
AccFrameSelector::~AccFrameSelector() this=0xc43a364
AccFrameSelector::~AccFrameSelector() this=0xc43a364 returning
AccFrameSelector::~AccFrameSelector() this=0xc43a5e4
AccFrameSelector::~AccFrameSelector() this=0xc43a5e4 returning
AccFrameSelector::~AccFrameSelector() this=0xc43a864
AccFrameSelector::~AccFrameSelector() this=0xc43a864 returning
AccFrameSelector::~AccFrameSelector() this=0xc43aae4
AccFrameSelector::~AccFrameSelector() this=0xc43aae4 returning
AccFrameSelector::WindowEventListener() this=0xc584b60
AccFrameSelector::ProcessWindowEvent() this=0xc584b60
AccFrameSelector::WindowEventListener() this=0xc584de0

Program received signal EXC_BAD_ACCESS, Could not access memory.

backtrace:

#0  0x00000000 in ?? ()
#1  0x23a3567f in svx::a11y::AccFrameSelector::WindowEventListener
(this=0xc584de0, pEvent=0xbfffdccc) at
/Users/tml/lo/tdf/svx/source/accessibility/AccessibleFrameSelector.cxx:659
#2  0x23a356a2 in svx::a11y::AccFrameSelector::LinkStubWindowEventListener
(pThis=0xc584de0, pCaller=0xbfffdccc) at
/Users/tml/lo/tdf/svx/source/accessibility/AccessibleFrameSelector.cxx:648
#3  0x032a2b9b in Link::Call (this=0xbd10fb8, pCaller=0xbfffdccc) at
link.hxx:143
#4  0x032c8627 in VclEventListeners::Call (this=0x22736750, pEvent=0xbfffdccc)
at /Users/tml/lo/tdf/vcl/source/app/vclevent.cxx:75
#5  0x0364751d in Window::CallEventListeners (this=0x739a6ec, nEvent=1,
pData=0x0) at /Users/tml/lo/tdf/vcl/source/window/window.cxx:5184
#6  0x0364761f in Window::ImplCallEventListeners (this=0x739a6ec, nEvent=1,
pData=0x0) at /Users/tml/lo/tdf/vcl/source/window/window.cxx:5167
#7  0x03662ba0 in Window::~Window (this=0x739a6ec) at
/Users/tml/lo/tdf/vcl/source/window/window.cxx:4210
#8  0x032efda2 in Control::~Control (this=0x739a6ec) at
/Users/tml/lo/tdf/vcl/source/control/ctrl.cxx:91
#9  0x23b01d49 in svx::FrameSelector::~FrameSelector (this=0x739a6ec) at
/Users/tml/lo/tdf/svx/source/dialog/frmsel.cxx:789
#10 0x25a21dd5 in SvxBorderTabPage::~SvxBorderTabPage (this=0x739a000) at
/Users/tml/lo/tdf/cui/source/tabpages/border.cxx:333
#11 0x00ce9d92 in SfxTabDialog::~SfxTabDialog (this=0x6b43e00) at
/Users/tml/lo/tdf/sfx2/source/dialog/tabdlg.cxx:495
#12 0x22b69f0a in ScAttrDlg::~ScAttrDlg (this=0x6b43e00) at
/Users/tml/lo/tdf/sc/source/ui/attrdlg/attrdlg.cxx:93
#13 0x22b6ea42 in AbstractTabDialog_Impl::~AbstractTabDialog_Impl
(this=0x227d5db0) at /Users/tml/lo/tdf/sc/source/ui/attrdlg/scdlgfact.cxx:126
#14 0x2062da22 in ScTabViewShell::ExecuteCellFormatDlg (this=0x6adf800,
rReq=@0xbfffecd0, nTabPage=65535) at
/Users/tml/lo/tdf/sc/source/ui/view/tabvwsha.cxx:539
#15 0x205486a1 in ScCellShell::Execute (this=0x127e96a0, rReq=@0xbfffecd0) at
/Users/tml/lo/tdf/sc/source/ui/view/cellsh3.cxx:357
#16 0x2052fa50 in SfxStubScCellShellExecute (pShell=0x127e96a0,
rReq=@0xbfffecd0) at scslots.hxx:6331
#17 0x00c5db70 in SfxShell::CallExec (this=0x127e96a0, pFunc=0x2052fa38
<SfxStubScCellShellExecute(SfxShell*, SfxRequest&)>, rReq=@0xbfffecd0) at
shell.hxx:199
#18 0x00c47752 in SfxDispatcher::Call_Impl (this=0x12717a10,
rShell=@0x127e96a0, rSlot=@0x20a5c244, rReq=@0xbfffecd0, bRecord=1 '\001') at
/Users/tml/lo/tdf/sfx2/source/control/dispatch.cxx:260
#19 0x00c47a8d in SfxDispatcher::_Execute (this=0x12717a10, rShell=@0x127e96a0,
rSlot=@0x20a5c244, rReq=@0xbfffecd0, eCallMode=4) at
/Users/tml/lo/tdf/sfx2/source/control/dispatch.cxx:943
#20 0x00c3d196 in SfxBindings::Execute_Impl (this=0x1271b5e0, aReq=@0xbfffecd0,
pSlot=0x20a5c244, pShell=0x127e96a0) at
/Users/tml/lo/tdf/sfx2/source/control/bindings.cxx:1284
#21 0x00c669eb in SfxDispatchController_Impl::dispatch (this=0x226ce850,
aURL=@0xbfffee38, aArgs=@0xbfffee7c, rListener=@0xbfffeddc) at
/Users/tml/lo/tdf/sfx2/source/control/unoctitm.cxx:748
#22 0x00c67172 in SfxOfficeDispatch::dispatch (this=0xc57ec68,
aURL=@0xbfffee38, aArgs=@0xbfffee7c) at
/Users/tml/lo/tdf/sfx2/source/control/unoctitm.cxx:377
#23 0x0ca93db2 in framework::MenuBarManager::Select (this=0xc4509d8,
pMenu=0xbd045d0) at
/Users/tml/lo/tdf/framework/source/uielement/menubarmanager.cxx:1154
#24 0x0ca93e76 in framework::MenuBarManager::LinkStubSelect (pThis=0xc4509d8,
pCaller=0xbd045d0) at
/Users/tml/lo/tdf/framework/source/uielement/menubarmanager.cxx:1086
#25 0x032a2b9b in Link::Call (this=0xbd04604, pCaller=0xbd045d0) at
link.hxx:143
#26 0x035c4bca in Menu::Select (this=0xbd045d0) at
/Users/tml/lo/tdf/vcl/source/window/menu.cxx:1135
#27 0x035bf2e8 in Menu::ImplCallSelect (this=0xbd045d0) at
/Users/tml/lo/tdf/vcl/source/window/menu.cxx:2978
#28 0x035bf308 in Menu::LinkStubImplCallSelect (pThis=0xbd045d0, pCaller=0x0)
at /Users/tml/lo/tdf/vcl/source/window/menu.cxx:2975
#29 0x032a2b9b in Link::Call (this=0x227b6b20, pCaller=0x0) at link.hxx:143
#30 0x0366e816 in ImplHandleUserEvent (pSVEvent=0x227d2f20) at
/Users/tml/lo/tdf/vcl/source/window/winproc.cxx:2003
#31 0x036714fb in ImplWindowFrameProc (pWindow=0x6407310, nEvent=22,
pEvent=0x227d2f20) at /Users/tml/lo/tdf/vcl/source/window/winproc.cxx:2575
#32 0x036823dd in SalFrame::CallCallback (this=0x64070d0, nEvent=22,
pEvent=0x227d2f20) at salframe.hxx:281
#33 0x03681c9f in AquaSalInstance::Yield (this=0x78b2020, bWait=true,
bHandleAllCurrentEvents=false) at
/Users/tml/lo/tdf/vcl/aqua/source/app/salinst.cxx:735
#34 0x032b3b2b in ImplYield (i_bWait=true, i_bAllEvents=false) at
/Users/tml/lo/tdf/vcl/source/app/svapp.cxx:451
#35 0x032b01a8 in Application::Yield (i_bAllEvents=false) at
/Users/tml/lo/tdf/vcl/source/app/svapp.cxx:485
#36 0x032b01d0 in Application::Execute () at
/Users/tml/lo/tdf/vcl/source/app/svapp.cxx:430
#37 0x000fcd61 in desktop::Desktop::Main (this=0xbffff950) at
/Users/tml/lo/tdf/desktop/source/app/app.cxx:1715
#38 0x032bbb6f in ImplSVMain () at
/Users/tml/lo/tdf/vcl/source/app/svmain.cxx:183
#39 0x03680ccf in AquaSalInstance::handleAppDefinedEvent (pEvent=0x64b5ec0) at
/Users/tml/lo/tdf/vcl/aqua/source/app/salinst.cxx:606
#40 0x036dcdd6 in -[VCL_NSApplication sendEvent:] (self=0x7860d30,
_cmd=0x91847963, pEvent=0x64b5ec0) at
/Users/tml/lo/tdf/vcl/aqua/source/app/vclnsapp.mm:69
#41 0x90fe373c in -[NSApplication run] ()
#42 0x90f868e6 in NSApplicationMain ()
#43 0x0367e8fd in ImplSVMainHook (pnInit=0xbffff90c) at
/Users/tml/lo/tdf/vcl/aqua/source/app/salinst.cxx:243
#44 0x032bbc9f in SVMain () at /Users/tml/lo/tdf/vcl/source/app/svmain.cxx:217
#45 0x0012c855 in soffice_main () at
/Users/tml/lo/tdf/desktop/source/app/sofficemain.cxx:85
#46 0x00001f26 in sal_main () at /Users/tml/lo/tdf/desktop/source/app/main.c:34
#47 0x00001f0e in main (argc=1, argv=0xbffffa3c) at
/Users/tml/lo/tdf/desktop/source/app/main.c:33

I am a bit clueless about how this LINK stuff works, but will try to see what I
can figure out...

(It's fun that googling for related stuff, I found some OOo experts calling the
LINK mechanism obsolete or old already in 2003...)

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to