[Libreoffice-bugs] [Bug 107869] New: Doing a few undo-redo cycle of deletion of a row with comment crashes Calc

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=107869

            Bug ID: 107869
           Summary: Doing a few undo-redo cycle of deletion of a row with
                    comment crashes Calc
           Product: LibreOffice
           Version: 5.3.3.2 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: bibisected, bisected
          Severity: critical
          Priority: medium
         Component: Calc
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: baron at caesar.elte.hu
                CC: erack at redhat.com, xiscofauli at libreoffice.org

- Add a comment to an empty cell in Calc.
- Delete the row with comment.
- Undo-redo deletion a few times.

=> Calc crashes.

Reproduced using 5.3.3.2 / Windows 7 and 5.2.2.2 / Ubuntu 16.04.
Crash report:
http://crashreport.libreoffice.org/stats/crash_details/b7bbd14f-86c5-452b-b147-d20ab6cc6c22

There is no crash in master branch, and it could be reverse-bibisected to the
following commit using repo bibisect-linux-64-5.4.
Eike, could you please backport the fix to 5.3?

https://cgit.freedesktop.org/libreoffice/core/commit/?id=06e427c24d75311c0ab79d2da586b961881db766
author          Eike Rathke <erack at redhat.com>  2017-04-12 21:24:34 (GMT)
committer       Eike Rathke <erack at redhat.com>  2017-04-12 22:48:47 (GMT)

"control deletion of SdrCaptionObj within ScCaptionPtr by refcount"

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20170515/4ad8cc6e/attachment-0001.html>