[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-13 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

Markus Mohrhard  changed:

   What|Removed |Added

 Status|NEW |ASSIGNED
   Assignee|libreoffice-b...@lists.free |markus.mohrhard@googlemail.
   |desktop.org |com

--- Comment #10 from Markus Mohrhard  ---
My code is just exposing a bug in another place.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-11 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

--- Comment #9 from Aron Budea  ---
(In reply to Julien Nabet from comment #8)
> Aron/Xisco: how did you get the bt?

I debugged in the code. The message contains the line number where the
exception is triggered (but it's in the mdds source code, and a bit difficult
to find).

This is the line:
https://gitlab.com/mdds/mdds/blob/master/include/mdds/multi_type_vector_def.inl#L795

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-11 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

Julien Nabet  changed:

   What|Removed |Added

 CC||serval2...@yahoo.fr

--- Comment #8 from Julien Nabet  ---
Aron/Xisco: how did you get the bt?
Indeed, I got a popup error. If I Ctrl-C gdb, i got a bt from the code which
manages popup then if I continue gdb, it stops without bt.
popup may be useful but in this case, it prevents me to retrieve a bt.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-10 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

--- Comment #7 from Aron Budea  ---
The direct cause of the crash is that in convertToTokenArray(...), nRow is -1,
which is passed in through pSrcDoc->FillMatrix(...) all the way to the mdds
function.

The place of the first FillMatrix(...) call:
http://opengrok.libreoffice.org/xref/core/sc/source/ui/docshell/externalrefmgr.cxx#1615

And this is where -1 becomes 4294967295 in an SCROW -> StoreT::size_type type
conversion:
http://opengrok.libreoffice.org/xref/core/sc/source/core/data/column2.cxx#2365

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-10 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

Aron Budea  changed:

   What|Removed |Added

 CC||markus.mohrhard@googlemail.
   ||com
   See Also||https://bugs.documentfounda
   ||tion.org/show_bug.cgi?id=67
   ||071

--- Comment #6 from Aron Budea  ---
This crash started with Markus' commit referenced below. The crash is actually
a Fatal Error with the message:
"multi_type_vector::get_block_position#795: block position not found!
(logical pos=4294967295, block size=5, logical size=1048576)"

Maybe some kind of overflow?

https://cgit.freedesktop.org/libreoffice/core/commit/?id=c8ad72703b74b7338c5f8dd1fe0275822b1e45f0
author  Markus Mohrhard
2016-02-18 05:03:11 (GMT)
committer   Markus Mohrhard
2016-02-18 07:48:27 (GMT)

"don't fill the matrix cell by cell, tdf#67071"

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-10 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

Aron Budea  changed:

   What|Removed |Added

   Keywords||bisected

--- Comment #5 from Aron Budea  ---
e9077931ccdae86f7653037f37768a75c43ed8d6 is the first bad commit
commit e9077931ccdae86f7653037f37768a75c43ed8d6
Author: Norbert Thiebaud 
Date:   Mon Feb 22 02:24:55 2016 -0800

source sha:c8ad72703b74b7338c5f8dd1fe0275822b1e45f0

# bad: [8955562930c20a45d6a06ae6f63531addd503826] source
sha:1fccc616d205b7d7011d66d4e4c719b62876eec5
# good: [aab6c3dc042083e4201ae4e31fce330f25e611ab] source
sha:2966d57bdfdd40a55e31408f7da75b415e809d8e
git bisect start '8955562930c20a45d6a06ae6f63531addd503826'
'aab6c3dc042083e4201ae4e31fce330f25e611ab'
# bad: [ab655016dc935157830f7758bd4a0a35887e2997] source
sha:39c8d40ddf85903d9ea2b81ae4ca924e91f89cb7
git bisect bad ab655016dc935157830f7758bd4a0a35887e2997
# bad: [8ac5562a44af31cbbd4931ee8bcd393d465ae5de] source
sha:85c789be1f94777b582977e69b16665a47dc364f
git bisect bad 8ac5562a44af31cbbd4931ee8bcd393d465ae5de
# good: [d00937aa002cca73a3505a9175939e079d268344] source
sha:de669d714fa6f7d33d6df6e323c72710f470f77c
git bisect good d00937aa002cca73a3505a9175939e079d268344
# bad: [349d023c1143f8b9c99819abb696156b343c2bb6] source
sha:a6e8910a3c5d33e671a13559438b7228596b8bca
git bisect bad 349d023c1143f8b9c99819abb696156b343c2bb6
# bad: [651292f2aa1658898a1ea040c6ee63f20ef98ee9] source
sha:fa20b651d61edb7bf9487cb79140bb57fc668967
git bisect bad 651292f2aa1658898a1ea040c6ee63f20ef98ee9
# bad: [e9077931ccdae86f7653037f37768a75c43ed8d6] source
sha:c8ad72703b74b7338c5f8dd1fe0275822b1e45f0
git bisect bad e9077931ccdae86f7653037f37768a75c43ed8d6
# first bad commit: [e9077931ccdae86f7653037f37768a75c43ed8d6] source
sha:c8ad72703b74b7338c5f8dd1fe0275822b1e45f0

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-09 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

--- Comment #4 from Xisco FaulĂ­  ---
Created attachment 131776
  --> https://bugs.documentfoundation.org/attachment.cgi?id=131776&action=edit
gdb backtrace

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs


[Libreoffice-bugs] [Bug 106456] LibreOffice Calc crashed on inserting formula

2017-03-09 Thread bugzilla-daemon
https://bugs.documentfoundation.org/show_bug.cgi?id=106456

Julien Nabet  changed:

   What|Removed |Added

Summary|Libreffice Calc crashed on  |LibreOffice Calc crashed on
   |inserting formula   |inserting formula

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs