[Libreoffice-bugs] [Bug 91131] UI: Crash when deleting List Style after trying to create new style with same name

2016-03-02 Thread bugzilla-daemon 
https://bugs.documentfoundation.org/show_bug.cgi?id=91131

Michael Stahl  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED
   Assignee|libreoffice-b...@lists.free |mst...@redhat.com
   |desktop.org |

--- Comment #6 from Michael Stahl  ---
the crash is somewhat intermittent, so no surprise that the bibisect in comment
#4 is bogus...

==12226== Invalid read of size 8
==12226==at 0x3CB85C1B: SwList::GetListId() const (list.cxx:227)
==12226==by 0x3CB0533F:
sw::DocumentListsManager::deleteListForListStyle(rtl::OUString const&)
(DocumentListsManager.cxx:142)
==12226==by 0x3CAA501D: SwDoc::DelNumRule(rtl::OUString const&, bool)
(docnum.cxx:1029)
==12226==by 0x3D4FF5DD: SwDocStyleSheetPool::Remove(SfxStyleSheetBase*)
(docstyle.cxx:2367)
==12226==by 0x3D4F3BDB: SwDocShell::Delete(rtl::OUString const&, unsigned
short) (docst.cxx:876)
==12226==by 0x3D4F1CB6: SwDocShell::ExecStyleSheet(SfxRequest&)
(docst.cxx:461)
==12226==by 0x3D4D7AC7: SfxStubSwDocShellExecStyleSheet(SfxShell*,
SfxRequest&) (swslots.hxx:1351)
==12226==by 0x8E96FEB: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&),
SfxRequest&) (shell.hxx:204)
==12226==by 0x8E8DFD1: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&,
SfxRequest&, bool) (dispatch.cxx:262)
==12226==by 0x8E90F1F: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&,
SfxRequest&, SfxCallMode) (dispatch.cxx:852)
==12226==by 0x8E91679: SfxDispatcher::Execute(unsigned short, SfxCallMode,
SfxPoolItem const**, unsigned short, SfxPoolItem const**) (dispatch.cxx:970)
==12226==by 0x8FE543A: SfxCommonTemplateDialog_Impl::Execute_Impl(unsigned
short, rtl::OUString const&, rtl::OUString const&, unsigned short, unsigned
short, unsigned short*, unsigned short const*) (templdlg.cxx:1609)
==12226==by 0x8FE764B: SfxCommonTemplateDialog_Impl::DeleteHdl(void*)
(templdlg.cxx:1975)
==12226==by 0x8FE867C:
SfxCommonTemplateDialog_Impl::MenuSelectAsyncHdl(void*) (templdlg.cxx:2150)
==12226==by 0x8FE85FC:
SfxCommonTemplateDialog_Impl::LinkStubMenuSelectAsyncHdl(void*, void*)
(templdlg.cxx:2145)
==12226==by 0xD1EADAA: Link::Call(void*) const (link.hxx:84)
==12226==by 0xD1E7C59: ImplHandleUserEvent(ImplSVEvent*) (winproc.cxx:1960)
==12226==by 0xD1E961E: ImplWindowFrameProc(vcl::Window*, unsigned short,
void const*) (winproc.cxx:2528)
==12226==by 0xD731984: SalFrame::CallCallback(unsigned short, void const*)
const (salframe.hxx:269)
==12226==by 0xD741848: SalGenericDisplay::DispatchInternalEvent()
(gendisp.cxx:86)
==12226==by 0x28BAE543: GtkData::userEventFn(void*) (gtk3gtkdata.cxx:809)
==12226==by 0x28BAE5D0: call_userEventFn (gtk3gtkdata.cxx:819)
==12226==by 0x15206E39: g_main_dispatch (gmain.c:3154)
==12226==by 0x15206E39: g_main_context_dispatch (gmain.c:3769)
==12226==by 0x152071CF: g_main_context_iterate.isra.29 (gmain.c:3840)
==12226==by 0x1520727B: g_main_context_iteration (gmain.c:3901)
==12226==by 0x28BAD3E1: GtkData::Yield(bool, bool) (gtk3gtkdata.cxx:467)
==12226==by 0x28BB0672: GtkInstance::DoYield(bool, bool, unsigned long)
(gtkinst.cxx:407)
==12226==by 0xD5F0BAC: ImplYield(bool, bool, unsigned long) (svapp.cxx:509)
==12226==by 0xD5EC9D3: Application::Yield() (svapp.cxx:551)
==12226==by 0xD5EC84D: Application::Execute() (svapp.cxx:471)
==12226==by 0x5110852: desktop::Desktop::DoExecute() (app.cxx:1332)
==12226==by 0x5111A13: desktop::Desktop::Main() (app.cxx:1657)
==12226==by 0xD5FB313: ImplSVMain() (svmain.cxx:167)
==12226==by 0xD5FB455: SVMain() (svmain.cxx:204)
==12226==by 0x51620D7: soffice_main (sofficemain.cxx:135)
==12226==by 0x40095D: sal_main (main.c:48)
==12226==by 0x400943: main (main.c:47)
==12226==  Address 0x32ca2120 is 0 bytes inside a block of size 8 free'd
==12226==at 0x4C2A2B0: operator delete(void*) (vg_replace_malloc.c:576)
==12226==by 0x3CB04ECC: sw::DocumentListsManager::deleteList(rtl::OUString
const&) (DocumentListsManager.cxx:68)
==12226==by 0x3CB05578:
sw::DocumentListsManager::deleteListsByDefaultListStyle(rtl::OUString const&)
(DocumentListsManager.cxx:169)
==12226==by 0x3CAA5045: SwDoc::DelNumRule(rtl::OUString const&, bool)
(docnum.cxx:1030)
==12226==by 0x3D0BFC01: SwUndoNumruleCreate::UndoImpl(sw::UndoRedoContext&)
(SwUndoFmt.cxx:393)
==12226==by 0x3D0E4313: SwUndo::UndoWithContext(SfxUndoContext&)
(undobj.cxx:218)
==12226==by 0x9B46451: SfxListUndoAction::UndoWithContext(SfxUndoContext&)
(undo.cxx:1347)
==12226==by 0x9B43612: SfxUndoManager::ImplUndo(SfxUndoContext*)
(undo.cxx:806)
==12226==by 0x9B433D0: SfxUndoManager::UndoWithContext(SfxUndoContext&)
(undo.cxx:774)
==12226==by

[Libreoffice-bugs] [Bug 91131] UI: Crash when deleting List Style after trying to create new style with same name

2015-11-19 Thread bugzilla-daemon 
https://bugs.documentfoundation.org/show_bug.cgi?id=91131

raal  changed:

   What|Removed |Added

   Keywords||bisected
 CC||mst...@redhat.com,
   ||r...@post.cz
 Whiteboard|bibisectRequest |bibisected

--- Comment #4 from raal  ---
This seems to have begun at the below commit.
Adding Cc: to Michael Stahl ; Could you possibly take a look at this one?
Thanks

90012cb7ba832730701e29655d352a5929a14161 is the first bad commit
commit 90012cb7ba832730701e29655d352a5929a14161
Author: Matthew Francis 
Date:   Sat Mar 14 23:46:36 2015 +0800

source-hash-81b594afa7162552fc2489ba0c7e1e8b5addb4f2

commit 81b594afa7162552fc2489ba0c7e1e8b5addb4f2
Author: Michael Stahl 
AuthorDate: Thu Jul 24 13:42:00 2014 +0200
Commit: Michael Stahl 
CommitDate: Thu Jul 24 13:45:55 2014 +0200

svl: remove some odd and obsolete debugging code related to
MI_HATS_REPARIERT

This was apparently disabled before the MI_HATS_REPARIERT check was
removed in f03a3edf2523c208948059861e0df48567834d0d, and then yesterday
something in the header inclusions changed to enable the DBG macros
that
still used the removed stuff, but _only_ on Windows... now clean this
up.

Change-Id: I4222db252f4a886b3497ca0c22dbec26eaa6c994

bibisect-44max$ git bisect log
# bad: [cf6ea17155fabb2a120ba07c150735591ac861d7]
source-hash-3f94c9e9ddfd807b449f3bb9b232cf2041fa12d2
# good: [fc71ac001f16209654d15ef8c1c4018aa55769f5]
source-hash-c15927f20d4727c3b8de68497b6949e72f9e6e9e
git bisect start 'latest' 'oldest'
# bad: [8cf60cc706948588e2f33a6d98b7c55d454e362a]
source-hash-f340f0454627939f1830826fb5cc53a90e6c62a4
git bisect bad 8cf60cc706948588e2f33a6d98b7c55d454e362a
# good: [d9885f526fc7a09cc8f9f8ee643af1b966be24bb]
source-hash-d1465c64c6f64ad8dd25e40cdc69649b24b305ea
git bisect good d9885f526fc7a09cc8f9f8ee643af1b966be24bb
# bad: [c779cf7967f4d14c5e649a5c696b07279d550efd]
source-hash-e9c5022580f14c0ca97503f8b3cc56b530fff174
git bisect bad c779cf7967f4d14c5e649a5c696b07279d550efd
# good: [030e0477638f9d9110ad62f88fd4b881521e0541]
source-hash-1a6e47e3fda10e6d220b67d766ec6fbdfd852b80
git bisect good 030e0477638f9d9110ad62f88fd4b881521e0541
# good: [c9e7f255b30a0410226b2074702aeba9b49dce13]
source-hash-2d5a7c36ee9ae7ff39d8415f81fb911ff822548e
git bisect good c9e7f255b30a0410226b2074702aeba9b49dce13
# bad: [0996e94321008e9f1857c299efad9dc3bc6e5ff2]
source-hash-6c1f2ea2aa11b2c8fd42b455c7c452194ed2c1e7
git bisect bad 0996e94321008e9f1857c299efad9dc3bc6e5ff2
# good: [c69835b63d379747e58c9d6315dbf32a09e842ef]
source-hash-d5fb4b731938c22fcf9c5e3280da8f722b5492e4
git bisect good c69835b63d379747e58c9d6315dbf32a09e842ef
# bad: [90012cb7ba832730701e29655d352a5929a14161]
source-hash-81b594afa7162552fc2489ba0c7e1e8b5addb4f2
git bisect bad 90012cb7ba832730701e29655d352a5929a14161
# good: [1c81f4ba81c4e3b78798881afd8f4099156dedb2]
source-hash-d6551bde0bcd06e4ed6b9aaa47f7891e47511264
git bisect good 1c81f4ba81c4e3b78798881afd8f4099156dedb2
# good: [33219b2f24783028d49cc92dd56e79b1f923e721]
source-hash-b8a72f7e344fec02a0ea0fcc3848d5960a21fc0b
git bisect good 33219b2f24783028d49cc92dd56e79b1f923e721
# good: [ab96982967eb1bbfb7690ed03e6610b5604869fb]
source-hash-fb743559fb993d2d8d8b61354e734c27d9d13e1c
git bisect good ab96982967eb1bbfb7690ed03e6610b5604869fb
# good: [30dc08dd79c93996723a8add24705e790868ddef]
source-hash-e08fc65e5fe716c838b0c0dc29d337967df5380f
git bisect good 30dc08dd79c93996723a8add24705e790868ddef
# good: [3001a2cb287cded294078fba259e51557086feef]
source-hash-e904562af54545684b32d2042ded6bdb9459edca
git bisect good 3001a2cb287cded294078fba259e51557086feef
# first bad commit: [90012cb7ba832730701e29655d352a5929a14161]
source-hash-81b594afa7162552fc2489ba0c7e1e8b5addb4f2

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 91131] UI: Crash when deleting List Style after trying to create new style with same name

2015-06-17 Thread bugzilla-daemon 
https://bugs.documentfoundation.org/show_bug.cgi?id=91131

Julien Nabet serval2...@yahoo.fr changed:

   What|Removed |Added

   Keywords||have-backtrace
 CC||serval2...@yahoo.fr

--- Comment #3 from Julien Nabet serval2...@yahoo.fr ---
On pc Debian x86-64 with master sources updated today, I could reproduce this.
I noticed this on console:
warn:legacy.osl:4233:1:sw/source/core/undo/docundo.cxx:247: EndUndo(): given ID
different from StartUndo()

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 91131] UI: Crash when deleting List Style after trying to create new style with same name

2015-05-15 Thread bugzilla-daemon 
https://bugs.documentfoundation.org/show_bug.cgi?id=91131

Beluga todven...@suomi24.fi changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEW
Version|4.4.3.2 rc  |4.4.2.2 release
   Keywords||regression
 CC||todven...@suomi24.fi
 Ever confirmed|0   |1
 Whiteboard||bibisectRequest
   Severity|normal  |major
 OS|Windows (All)   |All

--- Comment #2 from Beluga todven...@suomi24.fi ---
Reproduced crash.

4.2.8.2 doesn't crash, but has a different quirk: after you delete the test
list style, go to paragraph styles and then back to list styles, the test style
has re-appeared! You can even delete it again.

Win 7 Pro 64-bit Version: 5.0.0.0.alpha1+
Build ID: 9de1d53a2ce3ee7036b4688b373db7b2235af4d9
TinderBox: Win-x86@39, Branch:master, Time: 2015-05-14_00:07:12
Locale: fi-FI (fi_FI)

Ubuntu 15.04 64-bit 
Version: 4.4.2.2
Build ID: 40m0(Build:2)
Locale: en_US

Version: 4.2.8.2
Build ID: 48d50dbfc06349262c9d50868e5c1f630a573ebd

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 91131] UI: Crash when deleting List Style after trying to create new style with same name

2015-05-08 Thread bugzilla-daemon 
https://bugs.documentfoundation.org/show_bug.cgi?id=91131

--- Comment #1 from Gordo gordon1dr...@yahoo.com ---
Same thing here.

Version: 5.0.0.0.alpha1+
Build ID: 520400e8faf8e7346d16f34babb6258033673e12
TinderBox: Win-x86@39, Branch:master, Time: 2015-05-08_12:19:40

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs