https://bugs.documentfoundation.org/show_bug.cgi?id=150498
Michael Stahl (allotropia) <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE Assignee|[email protected] |[email protected] |desktop.org | --- Comment #6 from Michael Stahl (allotropia) <[email protected]> --- 1. the steps in comment #2 do crash on master, but that is for another reason, that is already tracked at bug 147731 the stack matches the attachments on that bug, and after disabling the SwPageDesc-copying code pointed out in that bug it stops crashing 2. the problem cannot be reproduced on master, but it happens on 6.4 branch here it happens that a redline from node 401 to 422 overlaps the start of a table but does not contain the end of the table. when copying to the clipboard, the function lcl_DeleteRedlines deletes all the tracked deletion changes, and this causes the problem - some table cell's nodes are deleted, but the cell is not removed from the SwTable, which eventually causes use-after-free on shutdown, in some code to export the clipboard document to ODT. the code in commit c4cf85766453982f1aa94a7f2cb22af19ed100be was supposed to split the offending redline at cell boundaries, but didn't work due to there being overlapping redlines, which was fixed by commit de49e1c55dc10ce1b59345af5cc49fde3adf65b7, which fixes this bug. => this is a duplicate of bug 149548 *** This bug has been marked as a duplicate of bug 149548 *** -- You are receiving this mail because: You are the assignee for the bug.
