[Libreoffice-bugs] [Bug 107398] CRASH: LibreOffice crashes when closing a document

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=107398

Xisco Faulí <xiscofauli at libreoffice.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |bibisected, bisected,
                   |                            |regression
           Priority|medium                      |highest
            Version|5.0.0.5 release             |5.3.0.0.alpha1+
           Severity|normal                      |critical

--- Comment #2 from Xisco Faulí <xiscofauli at libreoffice.org> ---
Regression introduced by:

author  Michael Stahl <mstahl at redhat.com>       2016-06-09 13:52:16 (GMT)
committer       Michael Stahl <mstahl at redhat.com>       2016-06-09 13:59:19
(GMT)
commit  c488214817516c13603deb1c180fef02f4c700bf (patch)
tree    f139da3173a9bf65a67d7d575af5d1ddc6a9d07a
parent  6a5cb3dae1760283c2c9156de666964ea4794f0f (diff)
tdf#96089 sw: fix scope of bBreakAfter in InsertCnt_()
The problem is that bBreakAfter is passed by reference to SwLayHelper
and stored as a reference member there, so it has to live at least as
long as pPageMaker.  (Unfortunately C++ can't statically check that.)

This then somehow caused the number of pages created after initial load
to be 812 instead of the correct 396 determined from the layout-cache in
the bugdoc, and that then caused Drawing objects to move backward during
the following re-pagination, and then SwDrawContact::Changed_() calls
SetFlyFrmAttr() and that sets the document to modified, which triggers the
AutoSave that was reported in the bug.

Bisected with bibisect-linux-64-5.3

Adding Cc: to Michael Stahl

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20170424/fa4a3470/attachment.html>