Abdelrazak Younes wrote:
Hi,
This crash was due to an invalid CursorSlice::text() null pointer
accessed in InsetMathNest::cursorPos():
CoordCache & coord_cache = sl.text()->bv()->coordCache();
As you can see, I used this indirection to access the
BufferView::CoordCache(). Bad luck, the passed CursorSlice was not
completely valid inside a mathed inset, hence the crash. My solution is
to pass BufferView to InsetBase::cursorPos() and all its derivative.
I committed it because it is fully in line with my former CoordCacher work.
Abdel.
