132075 – Crash OutlinerParaObject::OutlinerParaObject

Bug 132075 - Crash OutlinerParaObject::OutlinerParaObject

Summary: Crash OutlinerParaObject::OutlinerParaObject

Status:	RESOLVED FIXED

Alias:	None

Product:	LibreOffice
Classification:	Unclassified
Component:	Calc (show other bugs)
Version: (earliest affected)	4.3.0.4 release
Hardware:	All All

Importance:	medium major
Assignee:	Not Assigned

URL:
Whiteboard:	target:7.4.0
Keywords:	haveBacktrace, notBibisectable, regression

Depends on:
Blocks:	Calc-Comments Paste Crash
	Show dependency tree / graph

Reported:	2020-04-12 21:40 UTC by Telesto
Modified:	2024-04-30 05:21 UTC (History)
CC List:	7 users (show)

See Also:	118707 104967 105055 117228 https://crashreport.libreoffice.org/stats/signature/ScPostIt::ScPostIt(ScDocument%20&,ScAddress%20const%20&,ScPostIt%20const%20&,unsigned%20long) 148557
Crash report or crash signature:	["ScPostIt::ScPostIt(ScDocument &,ScAddress const &,ScPostIt const &,unsigned long)","ScPostIt::CreateCaption","ScPostIt::CreateCaption(ScAddress const&, SdrCaptionObj const*)"]

Attachments
bt with debug symbols (15.07 KB, text/plain) 2020-04-13 15:19 UTC, Julien Nabet	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Telesto 2020-04-12 21:40:03 UTC

Description:
Crash OutlinerParaObject::OutlinerParaObject

Steps to Reproduce:
1. Open Calc
2. Insert a caption with text
3. Copy the cell with caption (CTRL+C)
4. CTRL+Z
5. CTRL+V
6. CTRL+V (Accept to overwrite) -> Crash

Actual Results:
Crash

Expected Results:
No Crash


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 7.0.0.0.alpha0+ (x64)
Build ID: 95ec2e9b024ff12a3005777c902d7e0975460b1d
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: default; VCL: win; 
Locale: nl-NL (nl_NL); UI-Language: en-US
Calc: CL

Comment 1 Julien Nabet 2020-04-13 15:19:57 UTC

Created attachment 159537 [details]
bt with debug symbols

On pc Debian x86-64 with master sources updated today, I could reproduce this.

You meant "comment" instead of "caption" I suppose.

Comment 2 Julien Nabet 2020-04-13 15:20:58 UTC

I could reproduce this too with LO Debian package 6.4.2

Comment 3 Xisco Faulí 2020-04-15 13:43:13 UTC

it seems it's not a regression.
The crash is reproducible after https://cgit.freedesktop.org/libreoffice/core/commit/?id=05602710a047c58db0ceda88bedc291420990bc1, which basically reverts https://cgit.freedesktop.org/libreoffice/core/commit/?id=b6b1ded0a0539e7be1b5338de378a3276a6ff445

also reproduced in

Version: 5.2.0.0.alpha1+
Build ID: 5b168b3fa568e48e795234dc5fa454bf24c9805e
CPU Threads: 4; OS Version: Linux 4.8; UI Render: default; 
Locale: ca-ES (ca_ES.UTF-8)

@Luboš Luňák, I thought you might be interested in this issue

Comment 4 Xisco Faulí 2020-04-15 13:45:45 UTC

Also reproduced in

Version: 4.3.0.0.alpha1+
Build ID: c15927f20d4727c3b8de68497b6949e72f9e6e9e

but not in

Version 4.1.0.0.alpha0+ (Build ID: efca6f15609322f62a35619619a6d5fe5c9bd5a)

Comment 5 Telesto 2020-04-15 18:47:47 UTC

Same crash with bug 118707 file of (https://cgit.freedesktop.org/libreoffice/core/commit/?id=05602710a047c58db0ceda88bedc291420990bc1)

After a small dance with Cut/Paste/Cut/Paste/Undo/Paste (or something like that)

Comment 6 Telesto 2020-04-15 19:04:27 UTC

It's also crashing with bug 104967 document, after a (long) dance with undo/paste of the Kamera sheet

Comment 7 Buovjaga 2020-06-10 14:24:09 UTC

This appears in Linux 43max, but it has tons of commits, where undo crashes! Too much skipping to be bibisected.

Comment 8 QA Administrators 2022-06-11 03:29:13 UTC Comment hidden (obsolete)

Dear Telesto,

To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year.

There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present.

If you have time, please do the following:

Test to see if the bug is still present with the latest version of LibreOffice from https://www.libreoffice.org/download/

If the bug is present, please leave a comment that includes the information from Help - About LibreOffice.

If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a comment that includes the information from Help - About LibreOffice.

Please DO NOT

Update the version field
Reply via email (please reply directly on the bug tracker)
Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not
appropriate in this case)

If you want to do more to help you can test to see if your issue is a REGRESSION. To do so:
1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) from https://downloadarchive.documentfoundation.org/libreoffice/old/

2. Test your bug
3. Leave a comment with your results.
4a. If the bug was present with 3.3 - set version to 'inherited from OOo';
4b. If the bug was not present in 3.3 - add 'regression' to keyword

Feel free to come ask questions or to say hello in our QA chat: https://web.libera.chat/?settings=#libreoffice-qa

Thank you for helping us make LibreOffice even better for everyone!

Warm Regards,
QA Team

MassPing-UntouchedBug

Comment 9 Stéphane Guillou (stragu) 2024-04-30 04:01:22 UTC

I had to use these steps (note extra step 2b, without which it would not crash):

1. Open Calc
2. Insert a comment with text
2b. Click elsewhere in the sheet to deselect the cell with comment
3. Copy the cell with comment (CTRL + C)
4. CTRL+Z
5. CTRL+V
6. CTRL+V (Accept to overwrite) -> Crash

Repro in 6.3.0.4 and 7.0.0.3 with signature "ScPostIt::CreateCaption":
- https://crashreport.libreoffice.org/stats/crash_details/c8676532-12b1-4435-b085-1d0e73aa175a
- https://crashreport.libreoffice.org/stats/crash_details/496de9b8-bc7a-432c-9aab-4a742a0e6433

In 7.3.0.3 as well with "ScPostIt::CreateCaption(ScAddress const&, SdrCaptionObj const*)": https://crashreport.libreoffice.org/stats/crash_details/20b0f1cb-71dd-4c32-81a3-125b53605ab7

Resolved in 7.5.9, 7.6.6 and a recent daily build:

Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 2f5ab5b8e7bd7dd06e00153abb77a69e5d192dd2
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: CL threaded

In the linux-64-7.4 bibiset repo, I've bibisected the first build that doesn't crash to [37c0c21c8d03e151c19874bb2555b6a8e8a641de] which is László's 8c018910ae4d8701b1ce2a95727b9baed4016da3. I can't make sense of how it could be related, but I've tested a few times before and after the commit and it is consistent...

There might be a remaining series of steps that can lead to the same signature, as can be seen here for 7.4.0.3: https://crashreport.libreoffice.org/stats/crash_details/079e2698-db26-465e-a46d-0cee6c11ec47
...but I can't determine what it is, and we can close this report for the steps above.