[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #20 from Terrence Enger  ---
Working on debian-buster in the daily Linux dbgutil bibisect
repository, I am unable to reproduce the bug either before or after
the patch referenced in comment 15.  I think status VERIFIED
WORKSFORME is still right.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #19 from Michael Meeks  ---
Xisco - does your revert cause this one to recur ? =)

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #18 from Commit Notification 
 ---
Xisco Fauli committed a patch related to this issue.
It has been pushed to "libreoffice-6-1":

https://git.libreoffice.org/core/+/73c3c3deff69ccd6a2f55952a911738496fb3c32%5E%21

tdf#120750: Revert "tdf#96248 delete SfxPoolItems with Which Id >= 4000"

It will be available in 6.1.5.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Commit Notification  changed:

   What|Removed |Added

 Whiteboard|haveValgrind target:5.3.0   |haveValgrind target:5.3.0
   |target:6.3.0 target:6.2.0.1 |target:6.3.0 target:6.2.0.1
   ||target:6.1.5

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Commit Notification  changed:

   What|Removed |Added

 Whiteboard|haveValgrind target:5.3.0   |haveValgrind target:5.3.0
   |target:6.3.0|target:6.3.0 target:6.2.0.1

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #17 from Commit Notification 
 ---
Xisco Fauli committed a patch related to this issue.
It has been pushed to "libreoffice-6-2":

https://git.libreoffice.org/core/+/f1c47b9ea954342ecffc440784b43cc8cfd99f91%5E%21

tdf#120750: Revert "tdf#96248 delete SfxPoolItems with Which Id >= 4000"

It will be available in 6.2.0.1.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #16 from Commit Notification 
 ---
Xisco Fauli committed a patch related to this issue.
It has been pushed to "master":

https://git.libreoffice.org/core/+/c5d0d424bd7e78455cb6f9578cf2425ac0787004%5E%21

tdf#120750: Revert "tdf#96248 delete SfxPoolItems with Which Id >= 4000"

It will be available in 6.3.0.

The patch should be included in the daily builds available at
https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
https://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Commit Notification  changed:

   What|Removed |Added

 Whiteboard|haveValgrind target:5.3.0   |haveValgrind target:5.3.0
   ||target:6.3.0

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Aron Budea  changed:

   What|Removed |Added

   See Also||https://bugs.documentfounda
   ||tion.org/show_bug.cgi?id=12
   ||0750

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool:: Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Terrence Enger  changed:

   What|Removed |Added

 Status|RESOLVED|VERIFIED

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool:: Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Terrence Enger  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |WORKSFORME

--- Comment #15 from Terrence Enger  ---
Working in the daily Linux dbgutil repository, I cannot reproduce the
assertion, even in versions from before the patch in comment 14.  I am
setting status VERIFIED WORKSFORME.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool:: Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #14 from Commit Notification 
 ---
Jochen Nitschke committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=c9493b344a9bd104d0a882f5e9407880c0c63c20

tdf#96248 delete SfxPoolItems with Which Id >= 4000

It will be available in 5.3.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool:: Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Commit Notification  changed:

   What|Removed |Added

 Whiteboard|haveValgrind|haveValgrind target:5.3.0

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Jean-Baptiste Faure  changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEW
 CC||jbfa...@libreoffice.org
 Ever confirmed|0   |1

--- Comment #13 from Jean-Baptiste Faure  ---
(In reply to Julien Nabet from comment #12)
> Created attachment 121326 [details]
> valgrind log
> 
> On pc Debian x86-64 with master sources updated, I gave a try with Valgrind
> and had a crash! (!?).

Setting status to NEW according to comment #12.
Please set back to unconfirmed if you disagree.

Best regards. JBF

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #11 from Terrence Enger  ---
Created attachment 121324
  --> https://bugs.documentfoundation.org/attachment.cgi?id=121324=edit
valgrind

First a correction:  in comment 9 where I said KDE, I meant Xfce.

I have once again run LO with --valgrind, with somewhat different results:
(*) The program raises the assertion in SfxItemPool::Remove.
(*) Mostly library names are replaced with source line numnbers.  (Why
not always?  I do not know.)
(*) I ran gdb on the core file.

This libreOffice is commit 63feac2, fetched 2015-12-14 03:03 UTC, 
configured ...

CC=ccache /usr/bin/gcc
CXX=ccache /usr/bin/g++
--enable-option-checking=fatal
--enable-dbgutil
--enable-debug
--enable-crashdump
--without-system-postgresql
--without-myspell-dicts
--with-extra-buildid
--without-doxygen
--with-external-tar=/home/terry/lo_hacking/git/src
# --disable-remote

built and running on debian-stretch.

The process of interest is 3223.  The following points may be of interest:

line   what
   --
  52   process 3223 starts
 202   invalid read
 349   invalid read
 496   invalid read
 643   invalid read
 790   invalid read
 937   invalid read
1084   invalid read
1231   assertion raised; backtrace by LO
1318   backtrace by valgrind
1387   process 3223 ends
1451   gdb backtrace
1532   gdb backtrace full

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #12 from Julien Nabet  ---
Created attachment 121326
  --> https://bugs.documentfoundation.org/attachment.cgi?id=121326=edit
valgrind log

On pc Debian x86-64 with master sources updated, I gave a try with Valgrind and
had a crash! (!?).

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #10 from Terrence Enger  ---
Created attachment 121285
  --> https://bugs.documentfoundation.org/attachment.cgi?id=121285=edit
valgrind

The process of interest is 21903, which starts at line 38 of the file
and ends at line 1113.  The following points may be of interest:

line   what
   --
  38   process starts
  84   invalid read
 203   invalid read
 322   invalid read
 441   invalid write
 560   invalid read
 682   invalid read
 805   invalid read
 928   invalid read
 976   Address 0x38 is not stack'd, malloc'd or (recently) free'd
 978   Application error ... Signal 6 ...
1044   Process terminating ... SIGABRT ... dumping core
1113   end ... 18 errors from 8 contexts

This LibreOffice is commit 5df3264, fetched 2015-12-13 05:56 UTC,
configured ...

CC=ccache /usr/bin/gcc
CXX=ccache /usr/bin/g++
--enable-option-checking=fatal
--enable-dbgutil
--enable-crashdump
--without-system-postgresql
--without-myspell-dicts
--with-extra-buildid
--without-doxygen
--with-external-tar=/home/terry/lo_hacking/git/src
--disable-remote

built and running on debian-testing.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Terrence Enger  changed:

   What|Removed |Added

 Whiteboard||haveValgrind

--- Comment #9 from Terrence Enger  ---
Some observations, not quite random ...

I now have debian-testing on another machine with dual processors.
This let me try the following changes.  Each crashes.

(*) LO executing on 1 or 2 processors
(*) Writer window unmaximized or left maximized (as it starts out in
debian-testing)
(*) new user profile directory or one used just before
(*) gnome3 (debian-testing) vs. fallback to gnome2 (debian-wheezy)
vs. KDE (debian-testing).

I have never succeeded in raising the assertion in a localbuilt
dbgutil LO.  However, I did succeed in getting a reference to address
0x38 under valgrind.  Shall attach output soon.

There must be *something* peculiar that I am doing.  Any thoughts on
what that might be?

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

Terrence Enger  changed:

   What|Removed |Added

Summary|assertion upon close with   |assertion in
   |borders and changed date|SfxItemPool::Remove upon
   |format  |close with borders and
   ||changed date format

--- Comment #6 from Terrence Enger  ---
(Adding "in SfxItemPool::Remove" to summary.)

Thank you, Julien and Joel, for your efforts.

In order to reproduce the bug, I had to start by recreating a whole
document and all the missteps that I could remember doing.  I found it
quite tedious to work from that down to the smallest set of crashing
steps that I could find.  That is not much excuse for me being so
terse when I wrote what is left for the bug description.

So, here are similar steps, but written more verbosely.  Note that I
have added a Save As at step (11).  This change is to bring the steps
in line with what I did many times; the omission of that was my last
simplification, and I only did it once.

I am starting with higher step numbers in order not to duplicate the
earlier description.  In all cases, any blanks in strings are
something that I am adding here for ease of reading; do not type those
blanks.

(10) Run a dbgutil version of LibreOffice with command line parameters
 --norestore --writer.  Program presents Writer window "Untitled 1".

(11) Type "+F A".  Program presents dialog "Save As".

(12) Save the file as, let us say, /tmp/a30.  (Now you know know how
 often I have been through this. )  Program closes the
 dialog and returns focus to Writer window "a30".

(13) Type "+O P".  Program presents dialog "Page Style: Default
 Style".

(14) Click on tab Header.  In the dialog, program displays tab Header.

(15) Click checkbox "Header on" (turning the checkbox on) and click
 button .  Program returns focus to Writer window, and the
 caret is at the beginning of the body of the document.

(16) Type "+I  ".  Menu option
 "Field" is highlighted.  (I think it may be a bug that it does
 not serve to type "+I d d ", but I have lost
 confidence in my understanding of accelerators and shortcut
 keys.)

(17) Type "" and in the submenu click "Date"; the date I see
 inserted is 12/05/15.

(18) Type "+O P".  Program presents dialog "Page Style: Default
 Style" and tab Header.

(19) Click tab Borders.  In the dialog, program displays tab Borders.

(20) In the control labelled User-defined, click at the bottom of the
 iconic page image.  Program puts a black bar with an enclosed
 white line across the botom of the page image.

(21) Click button .  Program returns focus to Writer window; my
 screen size does not let me see the border at the bottom of the
 page.

(22) Type "+F S".  An icon in the status bar at the bottom of the
 window shows the document "not modified".

(23) Right click on the date in the body of the document, and in the
 pop-up menu click "Fields...".  Program presents dialog "Edit
 Fields"; in pane Format, "12/31/99" is reverse-image.

(24) In pane Format, click "1999-12-31" and click button .
 Program closes the dialog and returns focus to Writer window.
 The date is displayed in the selected format; I see 2015-12-05.
 An icon in the status bar shows the document "modified".  (As
 well, I have made the crash by selecting date format "Fri,
 December 31, 1999" in this step.  I have not tried closing the
 dialog without actually changing anything.)

(25) Type "+Q".  Program prompts :Save Document? ...".

(26) In the dialog, click button .  Program crashes.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 96248] assertion in SfxItemPool::Remove upon close with borders and changed date format

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=96248

--- Comment #7 from Julien Nabet  ---
I tried again, 3 times, no crash here :-(
Perhaps, try an even more recent daily build.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs