Bug 148557 - Crash mergedlo!SdrTextObj::GetOutlinerParaObject+0x10mergedlo!SdrTextObj::GetOutlinerParaObject+0x10:
Summary: Crash mergedlo!SdrTextObj::GetOutlinerParaObject+0x10mergedlo!SdrTextObj::Get...
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Calc (show other bugs)
Version:
(earliest affected)
4.3.0.4 release
Hardware: All All
: medium critical
Assignee: Not Assigned
URL:
Whiteboard: target:7.5.0
Keywords: haveBacktrace, notBibisectable, regression
Depends on:
Blocks: Calc-Comments Undo-Redo Clipboard Crash
  Show dependency tree / graph
 
Reported: 2022-04-13 10:09 UTC by Telesto
Modified: 2024-04-30 05:21 UTC (History)
4 users (show)

See Also:
Crash report or crash signature: ["OutlinerParaObject::OutlinerParaObject(OutlinerParaObject const&)","ScPostIt::CreateCaption(ScAddress const&, SdrCaptionObj const*)"]

Attachments
Screencast (2.00 MB, video/mp4)
2022-04-13 10:11 UTC, Telesto 		Details
BT without symbols (22.03 KB, text/plain)
2022-04-13 10:11 UTC, Telesto 		Details
Screencast (646.82 KB, video/mp4)
2022-04-13 10:18 UTC, Telesto 		Details
bt with debug symbols (7.77 KB, text/plain)
2022-04-16 21:40 UTC, Julien Nabet 		Details
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Telesto 2022-04-13 10:09:39 UTC 
Description:
Crash mergedlo!SdrTextObj::GetOutlinerParaObject+0x10mergedlo!SdrTextObj::GetOutlinerParaObject+0x10:

Steps to Reproduce:
1. Open attachment 179492 [details]
2. Follow the steps in the screencast (sorry not very precise steps yet). It's limited to cut paste undo/ redo/ cut/paste actions of an comment 

Actual Results:
Crash

Expected Results:
No crash


Reproducible: Always


User Profile Reset: No



Additional Info:
Version: 7.4.0.0.alpha0+ (x64) / LibreOffice Community
Build ID: efe854bf9b6daff3d0ecf6e3d04bd9a50bfaa3f3
CPU threads: 4; OS: Windows 6.3 Build 9600; UI render: Skia/Raster; VCL: win
Locale: nl-NL (nl_NL); UI: en-US
Calc: CL Jumbo
Comment 1 Telesto 2022-04-13 10:11:00 UTC 
Created attachment 179511 [details]
Screencast
Comment 2 Telesto 2022-04-13 10:11:48 UTC 
Created attachment 179512 [details]
BT without symbols
Comment 3 Telesto 2022-04-13 10:18:02 UTC 
Created attachment 179513 [details]
Screencast
Comment 4 Telesto 2022-04-14 08:12:33 UTC 
From the screencast
1. Insert a comment in say E5 and type some dummy text in it
2. Cut E5
3. Press and hold CTRL+Z 
4. Paste in E5
5. Paste in E7 -> Crash
Comment 5 Telesto 2022-04-14 08:15:03 UTC 
Also in
Versie: 4.4.7.2 
Build ID: f3153a8b245191196a4b6b9abd1d0da16eead600
Locale: nl_NL

fine with
Versie: 4.1.0.4 
Build ID: 89ea49ddacd9aa532507cbf852f2bb22b1ace28
Comment 6 Julien Nabet 2022-04-16 21:40:51 UTC 
Created attachment 179617 [details]
bt with debug symbols

On pc Debian x86-64 with master sources updated today, I could reproduce this.
Comment 7 Aron Budea 2022-04-19 01:17:10 UTC 
There are several states when bibisecting this with steps from comment 4 with bibisect-43max.
Starting from the good state.

1. Comments aren't pasted.

https://cgit.freedesktop.org/libreoffice/core/commit/?id=80ea2822c368e6655d216c32904268fc335ef6a4
author		Kohei Yoshida <kohei.yoshida@collabora.com>	2014-01-24 11:38:47 -0500
committer	Kohei Yoshida <kohei.yoshida@collabora.com>	2014-01-24 21:27:10 -0500

"Optimize copy-n-pasting of single cell replicated over a range.

This is a very common operation. Let's speed it up a bit.

TODO : Handle cell comments."

2. Crash during undo steps (3. step).

This is the next commit.
https://cgit.freedesktop.org/libreoffice/core/commit/?id=ab05317c79f665bcf9d5cff7b8312ce6963ff969
author		Kohei Yoshida <kohei.yoshida@collabora.com>	2014-01-24 21:29:54 -0500
committer	Kohei Yoshida <kohei.yoshida@collabora.com>	2014-01-25 00:05:13 -0500

"Stop leaking all ScPostIt instances."

3. Crash when opening the file.

Didn't bibisect this one.

4. Current crash after the steps.

https://cgit.freedesktop.org/libreoffice/core/commit/?id=85cdb06fd5ba0c974e729a56dcb0e323c4cdfd25
author		Stephan Bergmann <sbergman@redhat.com>	2014-02-07 17:54:14 +0100
committer	Stephan Bergmann <sbergman@redhat.com>	2014-02-07 18:43:32 +0100

"sal_Bool -> bool"

Marking as notBibisectable.
Comment 8 Stéphane Guillou (stragu) 2024-04-30 05:21:32 UTC 
Reproduced in 7.3.0.3 with signature "OutlinerParaObject::OutlinerParaObject(OutlinerParaObject const&)": https://crashreport.libreoffice.org/stats/crash_details/d40704e2-2919-4879-8bd6-50269d94c35f

In 7.4.0.3, I get "ScPostIt::CreateCaption(ScAddress const&, SdrCaptionObj const*)": https://crashreport.libreoffice.org/stats/crash_details/07db99bb-06a2-4b83-bc71-360fa1438758

...so quite similar to bug 132075.

Not reproduced in 7.5.9, 7.6.6 or current daily build:

Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 2f5ab5b8e7bd7dd06e00153abb77a69e5d192dd2
CPU threads: 8; OS: Linux 6.5; UI render: default; VCL: gtk3

Bibisected the fix with linux-64-7.5 repo to first good build [6f10bfc3f53a7d88037a32deadcc7f3be94c061e] which points to:

commit 8611f6e259b807b4f19c8dc0eab86ca648891ce3
author	Noel Grandin	Thu May 27 10:27:46 2021 +0200
committer	Noel Grandin	Mon Aug 29 13:44:02 2022 +0200
ref-count SdrObject
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/138837

Thank you Noel!