https://bugs.documentfoundation.org/show_bug.cgi?id=146363
Bug ID: 146363
Summary: [regression] LibreOffice Draw crashes when changing
width/height of text box
Product: LibreOffice
Version: 7.1.8.1 release
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: Draw
Assignee: [email protected]
Reporter: [email protected]
Description:
* open any document in LibreOffice Draw, e.g. a clean default one
* add a text box
* open the "Position and Size" dialog (F4) of that text box
* change width and/or height to any value
* click "OK"
LibreOffice Draw crashes.
I am on Linux and use LibreOffice 7.1, Kompilainenn has reproduced this bug in
7.4.0alpha on Windows and says that this regression happened between 6.2 (not
affected) and 6.3 (affected). His bibisecting has shown that commit
1aa93766ee3994af9975e96e8ea60e02078de2d8 ("tdf#126180: EndTextEdit on all views
before delete/cut slide") [1] is to be blamed.
[1]
https://github.com/LibreOffice/core/commit/1aa93766ee3994af9975e96e8ea60e02078de2d8
This is Kompilainenn's crash report:
[2]
http://crashreport.libreoffice.org/stats/crash_details/ceac4e6f-55c0-4785-95ab-83b38ecdbd9d
Bellow is my attempt to somehow debug it from Linux, but I did not study that
code.
$ gdb <...>
<...>
Thread 1 "soffice.bin" received signal SIGSEGV, Segmentation fault.
SdrEditView::SetGeoAttrToMarked (this=this@entry=0x1783630, rAttr=...) at
/usr/src/debug/libreoffice-7.1.7-1.x86_64/svx/source/svdraw/svdedtv1.cxx:1749
1749 pObj = rMarkList.GetMark(i)->GetMarkedSdrObj();
(gdb)
(gdb) p pObj
$1 = <optimized out>
(gdb) p i
$2 = 0
(gdb) p nMarkCount
$3 = 1
(gdb) p *(SfxPoolItem*)0x4434760
$7 = {_vptr.SfxPoolItem = 0x7ffff5fcf2c8 <vtable for SfxBoolItem+16>,
m_nRefCount = 1, m_nWhich = 10236, m_nKind = SfxItemKind::NONE}
(gdb) bt
#0 SdrEditView::SetGeoAttrToMarked(SfxItemSet const&)
(this=this@entry=0x1783630, rAttr=...) at
/usr/src/debug/libreoffice-7.1.7-1.x86_64/svx/source/svdraw/svdedtv1.cxx:1749
#1 0x00007fffc68e7a2a in (anonymous namespace)::setUndo(sd::View*, SfxItemSet
const*) (pView=0x1783630, pArgs=0x4436b40)
at
/usr/src/debug/libreoffice-7.1.7-1.x86_64/sd/source/ui/func/futransf.cxx:58
#2 0x00007fffc68e7b33 in operator() (nResult=<optimized out>,
__closure=0x45561a0) at /usr/include/c++/11.2.0/bits/unique_ptr.h:421
#3 std::__invoke_impl<void,
sd::FuTransform::DoExecute(SfxRequest&)::<lambda(sal_Int32)>&, int> (__f=...)
at /usr/include/c++/11.2.0/bits/invoke.h:61
#4 std::__invoke_r<void,
sd::FuTransform::DoExecute(SfxRequest&)::<lambda(sal_Int32)>&, int> (__fn=...)
at /usr/include/c++/11.2.0/bits/invoke.h:111
#5 std::_Function_handler<void(int),
sd::FuTransform::DoExecute(SfxRequest&)::<lambda(sal_Int32)> >::_M_invoke(const
std::_Any_data &, int &&) (__functor=..., __args#0=<optimized out>)
at /usr/include/c++/11.2.0/bits/std_function.h:291
#6 0x00007fffeef679f7 in (anonymous
namespace)::GtkInstanceDialog::asyncresponse(int) () at
/usr/lib64/libreoffice/program/libvclplug_gtk3lo.so
#7 0x00007ffff16e56df in g_closure_invoke () at /usr/lib64/libgobject-2.0.so.0
<...>
(gdb) p pArgs
No symbol "pArgs" in current context.
(gdb) p *(SfxItemSet*)0x4436b40
$8 = {_vptr.SfxItemSet = 0x7ffff5fd03c0 <vtable for SfxAllItemSet+16>, m_pPool
= 0x16eb8f0, m_pParent = 0x0, m_pItems = {
_M_t = {<std::__uniq_ptr_impl<SfxPoolItem const*,
std::default_delete<SfxPoolItem const* []> >> = {
_M_t = {<std::_Tuple_impl<0, SfxPoolItem const**,
std::default_delete<SfxPoolItem const* []> >> = {<std::_Tuple_impl<1,
std::default_delete<SfxPoolItem const* []> >> = {<std::_Head_base<1,
std::default_delete<SfxPoolItem const* []>, true>> = {_M_head_impl = {<No data
fields>}}, <No data fields>}, <std::_Head_base<0, SfxPoolItem const**, false>>
= {
_M_head_impl = 0x4506a50}, <No data fields>}, <No data fields>}},
<No data fields>}}, m_pWhichRanges = 0x45452f0, m_nCount = 6}
(gdb)
Steps to Reproduce:
.
Actual Results:
.
Expected Results:
.
Reproducible: Always
User Profile Reset: No
Additional Info:
.
--
You are receiving this mail because:
You are the assignee for the bug.