[Libreoffice-bugs] [Bug 114710] EDITING: CRASH (Reason=EXCEPTION_ACCESS_VIOLATION_READ) when paste special contents from particular source.ods as GDI metafile

Thu Feb 22 13:27:33 UTC 2018

https://bugs.documentfoundation.org/show_bug.cgi?id=114710

--- Comment #7 from Tor Lillqvist <tml at iki.fi> ---
Valgrind output:

> ==9144== Invalid read of size 8
> ==9144==    at 0x3DF8A485: std::__uniq_ptr_impl<SfxItemSet, std::default_delete<SfxItemSet> >::_M_ptr() const (unique_ptr.h:147)
> ==9144==    by 0x3DF8A404: std::unique_ptr<SfxItemSet, std::default_delete<SfxItemSet> >::get() const (unique_ptr.h:337)
> ==9144==    by 0x3DF856FC: std::unique_ptr<SfxItemSet, std::default_delete<SfxItemSet> >::operator*() const (unique_ptr.h:322)
> ==9144==    by 0x3DF83328: SfxSetItem::GetItemSet() const (poolitem.hxx:296)
> ==9144==    by 0x3E5C972A: ScPatternAttr::GetItem(unsigned short, SfxItemSet const*) const (patattr.cxx:1290)
> ==9144==    by 0x3E1B7297: SfxBoolItem const& ScPatternAttr::GetItem<SfxBoolItem>(TypedWhichId<SfxBoolItem>, SfxItemSet const*) const (patattr.hxx:81)
> ==9144==    by 0x3F566C35: ScOutputData::LayoutStrings(bool, bool, ScAddress const&) (output2.cxx:1645)
> ==9144==    by 0x3F5657AB: ScOutputData::DrawStrings(bool) (output2.cxx:1440)
> ==9144==    by 0x3F5A8864: ScPrintFunc::DrawToDev(ScDocument*, OutputDevice*, double, tools::Rectangle const&, ScViewData*, bool) (printfun.cxx:598)
> ==9144==    by 0x3EF6C19F: ScDocShell::Draw(OutputDevice*, JobSetup const&, unsigned short) (docsh4.cxx:2029)
> ==9144==    by 0xAD1F6EA: SfxObjectShell::DoDraw_Impl(OutputDevice*, Point const&, Fraction const&, Fraction const&, JobSetup const&, unsigned short) (objembed.cxx:232)
> ==9144==    by 0xAD1F0F8: SfxObjectShell::DoDraw(OutputDevice*, Point const&, Size const&, JobSetup const&, unsigned short) (objembed.cxx:179)
> ==9144==  Address 0x4aff5420 is 16 bytes inside a block of size 48 free'd
> ==9144==    at 0x4C311E8: operator delete(void*) (vg_replace_malloc.c:576)
> ==9144==    by 0x3E5BF451: ScPatternAttr::~ScPatternAttr() (patattr.cxx:105)
> ==9144==    by 0xB62A8F9: SfxItemPool::Remove(SfxPoolItem const&) (itempool.cxx:769)
> ==9144==    by 0x3DF77EFB: ScAttrArray::SetPatternArea(int, int, ScPatternAttr const*, bool, ScEditDataArray*) (attarray.cxx:561)
> ==9144==    by 0x3DF78AEA: ScAttrArray::SetPattern(int, ScPatternAttr const*, bool) (attarray.cxx:378)
> ==9144==    by 0x3E109069: ScColumn::ApplyAttr(int, SfxPoolItem const&) (column.cxx:720)
> ==9144==    by 0x3E1A9BDF: ScColumn::SetNumberFormat(int, unsigned int) (column2.cxx:2941)
> ==9144==    by 0x3E62461A: ScTable::SetNumberFormat(short, int, unsigned int) (table2.cxx:1954)
> ==9144==    by 0x3E347A6D: ScDocument::SetNumberFormat(ScAddress const&, unsigned int) (document.cxx:3716)
> ==9144==    by 0x3E547FFD: ScFormulaCell::InterpretTail(ScInterpreterContext&, ScFormulaCell::ScInterpretTailParameter) (formulacell.cxx:1997)
> ==9144==    by 0x3E543F84: ScFormulaCell::Interpret() (formulacell.cxx:1536)
> ==9144==    by 0x3E541A84: ScFormulaCell::MaybeInterpret() (formulacell.cxx:2583)
> ==9144==  Block was alloc'd at
> ==9144==    at 0x4C301CA: operator new(unsigned long) (vg_replace_malloc.c:334)
> ==9144==    by 0x3E5BF493: ScPatternAttr::Clone(SfxItemPool*) const (patattr.cxx:110)
> ==9144==    by 0xB629B28: SfxItemPool::Put(SfxPoolItem const&, unsigned short) (itempool.cxx:686)
> ==9144==    by 0x3E2A677B: ScDocumentPool::Put(SfxPoolItem const&, unsigned short) (docpool.cxx:335)
> ==9144==    by 0x3E5C8099: ScPatternAttr::PutInPool(ScDocument*, ScDocument*) const (patattr.cxx:1071)
> ==9144==    by 0x3DF8220F: ScAttrArray::CopyArea(int, int, long, ScAttrArray&, ScMF) const (attarray.cxx:2433)
> ==9144==    by 0x3DF8243A: ScAttrArray::CopyAreaSafe(int, int, long, ScAttrArray&) (attarray.cxx:2460)
> ==9144==    by 0x3E1D10B9: ScColumn::CopyFromClip(sc::CopyFromClipContext&, int, int, long, ScColumn&) (column3.cxx:1134)
> ==9144==    by 0x3E61D204: ScTable::CopyFromClip(sc::CopyFromClipContext&, short, int, short, int, short, int, ScTable*) (table2.cxx:675)
> ==9144==    by 0x3E3411C9: ScDocument::CopyBlockFromClip(sc::CopyFromClipContext&, short, int, short, int, ScMarkData const&, short, int) (document.cxx:2646)
> ==9144==    by 0x3E342E3B: ScDocument::CopyFromClip(ScRange const&, ScMarkData const&, InsertDeleteFlags, ScDocument*, ScDocument*, bool, bool, bool, bool, ScRangeList const*) (document.cxx:2954)
> ==9144==    by 0x3EDD6B6C: ScTransferObj::InitDocShell(bool) (transobj.cxx:698)
>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180222/8521e825/attachment.html>