https://bugs.documentfoundation.org/show_bug.cgi?id=158686

--- Comment #5 from Miklos Vajna <[email protected]> ---
The backtrace I see is:

#0  std::__uniq_ptr_impl<svx::FmTextControlShell,
std::default_delete<svx::FmTextControlShell> >::_M_ptr() const
(this=0x6666666600000278) at /usr/include/c++/12/bits/unique_ptr.h:191
#1  0x00007ffff1813a2a in std::unique_ptr<svx::FmTextControlShell,
std::default_delete<svx::FmTextControlShell> >::get() const
(this=0x6666666600000278)
    at /usr/include/c++/12/bits/unique_ptr.h:462
#2  0x00007ffff180c038 in std::unique_ptr<svx::FmTextControlShell,
std::default_delete<svx::FmTextControlShell> >::operator->() const
(this=0x6666666600000278)
    at /usr/include/c++/12/bits/unique_ptr.h:455
#3  0x00007ffff1806cb4 in FmXFormShell::IsActiveControl_Lock(bool) const
(this=0x6666666600000000, _bCountRichTextOnly=false)
    at /home/vmiklos/git/libreoffice/core/svx/source/form/fmshimp.cxx:3840
#4  0x00007ffff17e0047 in FmFormShell::IsActiveControl() const (this=0x5166ee0)
at /home/vmiklos/git/libreoffice/core/svx/source/form/fmshell.cxx:1227
#5  0x00007fffd276a5c4 in SwView::SelectShell() (this=0x4e282e0) at
/home/vmiklos/git/libreoffice/core/sw/source/uibase/uiview/view.cxx:296

I.e. SwView::SelectShell() dereferences its m_pFormShell pointer, but
sanitizers say that it's already deleted earlier in SfxDispatcher::FlushImpl().
Need to find a way so that the dying FmFormShell notifies SwView, so the view
cal clear its form shell pointer before it becomes invalid.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to