https://bugs.documentfoundation.org/show_bug.cgi?id=146363

            Bug ID: 146363
           Summary: [regression] LibreOffice Draw crashes when changing
                    width/height of text box
           Product: LibreOffice
           Version: 7.1.8.1 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Draw
          Assignee: [email protected]
          Reporter: [email protected]

Description:
* open any document in LibreOffice Draw, e.g. a clean default one
* add a text box
* open the "Position and Size" dialog (F4) of that text box
* change width and/or height to any value
* click "OK"

LibreOffice Draw crashes.

I am on Linux and use LibreOffice 7.1, Kompilainenn has reproduced this bug in
7.4.0alpha on Windows and says that this regression happened between 6.2 (not
affected) and 6.3 (affected). His bibisecting has shown that commit
1aa93766ee3994af9975e96e8ea60e02078de2d8 ("tdf#126180: EndTextEdit on all views
before delete/cut slide") [1] is to be blamed.

[1]
https://github.com/LibreOffice/core/commit/1aa93766ee3994af9975e96e8ea60e02078de2d8

This is Kompilainenn's crash report:
[2]
http://crashreport.libreoffice.org/stats/crash_details/ceac4e6f-55c0-4785-95ab-83b38ecdbd9d

Bellow is my attempt to somehow debug it from Linux, but I did not study that
code.

$ gdb <...>
<...>
Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
SdrEditView::SetGeoAttrToMarked (this=this@entry=0x1783630, rAttr=...) at
/usr/src/debug/libreoffice-7.1.7-1.x86_64/svx/source/svdraw/svdedtv1.cxx:1749
1749                pObj = rMarkList.GetMark(i)->GetMarkedSdrObj();
(gdb) 
(gdb) p pObj
$1 = <optimized out>
(gdb) p i
$2 = 0
(gdb) p nMarkCount
$3 = 1
(gdb) p *(SfxPoolItem*)0x4434760
$7 = {_vptr.SfxPoolItem = 0x7ffff5fcf2c8 <vtable for SfxBoolItem+16>,
m_nRefCount = 1, m_nWhich = 10236, m_nKind = SfxItemKind::NONE}
(gdb) bt
#0  SdrEditView::SetGeoAttrToMarked(SfxItemSet const&)
(this=this@entry=0x1783630, rAttr=...) at
/usr/src/debug/libreoffice-7.1.7-1.x86_64/svx/source/svdraw/svdedtv1.cxx:1749
#1  0x00007fffc68e7a2a in (anonymous namespace)::setUndo(sd::View*, SfxItemSet
const*) (pView=0x1783630, pArgs=0x4436b40)
    at
/usr/src/debug/libreoffice-7.1.7-1.x86_64/sd/source/ui/func/futransf.cxx:58
#2  0x00007fffc68e7b33 in operator() (nResult=<optimized out>,
__closure=0x45561a0) at /usr/include/c++/11.2.0/bits/unique_ptr.h:421
#3  std::__invoke_impl<void,
sd::FuTransform::DoExecute(SfxRequest&)::<lambda(sal_Int32)>&, int> (__f=...)
at /usr/include/c++/11.2.0/bits/invoke.h:61
#4  std::__invoke_r<void,
sd::FuTransform::DoExecute(SfxRequest&)::<lambda(sal_Int32)>&, int> (__fn=...)
at /usr/include/c++/11.2.0/bits/invoke.h:111
#5  std::_Function_handler<void(int),
sd::FuTransform::DoExecute(SfxRequest&)::<lambda(sal_Int32)> >::_M_invoke(const
std::_Any_data &, int &&) (__functor=..., __args#0=<optimized out>)
    at /usr/include/c++/11.2.0/bits/std_function.h:291
#6  0x00007fffeef679f7 in (anonymous
namespace)::GtkInstanceDialog::asyncresponse(int) () at
/usr/lib64/libreoffice/program/libvclplug_gtk3lo.so
#7  0x00007ffff16e56df in g_closure_invoke () at /usr/lib64/libgobject-2.0.so.0
<...>
(gdb) p pArgs
No symbol "pArgs" in current context.
(gdb) p *(SfxItemSet*)0x4436b40
$8 = {_vptr.SfxItemSet = 0x7ffff5fd03c0 <vtable for SfxAllItemSet+16>, m_pPool
= 0x16eb8f0, m_pParent = 0x0, m_pItems = {
    _M_t = {<std::__uniq_ptr_impl<SfxPoolItem const*,
std::default_delete<SfxPoolItem const* []> >> = {
        _M_t = {<std::_Tuple_impl<0, SfxPoolItem const**,
std::default_delete<SfxPoolItem const* []> >> = {<std::_Tuple_impl<1,
std::default_delete<SfxPoolItem const* []> >> = {<std::_Head_base<1,
std::default_delete<SfxPoolItem const* []>, true>> = {_M_head_impl = {<No data
fields>}}, <No data fields>}, <std::_Head_base<0, SfxPoolItem const**, false>>
= {
              _M_head_impl = 0x4506a50}, <No data fields>}, <No data fields>}},
<No data fields>}}, m_pWhichRanges = 0x45452f0, m_nCount = 6}
(gdb) 


Steps to Reproduce:
.

Actual Results:
.

Expected Results:
.


Reproducible: Always


User Profile Reset: No



Additional Info:
.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to