[Libreoffice-bugs] [Bug 118377] CRASH: Writer crashes inserting a section

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=118377

--- Comment #4 from Armin Le Grand (CIB) <Armin.Le.Grand at me.com> ---
Stack says:

vcllo.dll!std::_Container_base12::_Orphan_all() Line 217 (c:\Program Files
(x86)\Microsoft Visual Studio 14.0\VC\include\xutility:217)
vcllo.dll!std::_Deque_alloc<std::_Deque_base_types<std::unique_ptr<OutDevState,std::default_delete<OutDevState>
>,std::allocator<std::unique_ptr<OutDevState,std::default_delete<OutDevState> >
> > >::_Orphan_all() Line 877 (c:\Program Files (x86)\Microsoft Visual Studio
14.0\VC\include\deque:877)
vcllo.dll!std::deque<std::unique_ptr<OutDevState,std::default_delete<OutDevState>
>,std::allocator<std::unique_ptr<OutDevState,std::default_delete<OutDevState> >
> >::push_back(std::unique_ptr<OutDevState,std::default_delete<OutDevState> >
&& _Val) Line 1160 (c:\Program Files (x86)\Microsoft Visual Studio
14.0\VC\include\deque:1160)
vcllo.dll!OutDevStateStack::push_back(OutDevState * p) Line 25
(c:\lo\work01\vcl\source\outdev\outdevstatestack.cxx:25)
vcllo.dll!OutputDevice::Push(PushFlags nFlags) Line 117
(c:\lo\work01\vcl\source\outdev\outdevstate.cxx:117)
vcllo.dll!vcl::ReferenceDeviceTextLayout::ReferenceDeviceTextLayout(const
Control & _rControl, OutputDevice & _rTargetDevice, OutputDevice &
_rReferenceDevice) Line 140 (c:\lo\work01\vcl\source\gdi\textlayout.cxx:140)
vcllo.dll!vcl::ControlTextRenderer::ControlTextRenderer(const Control &
_rControl, OutputDevice & _rTargetDevice, OutputDevice & _rReferenceDevice)
Line 336 (c:\lo\work01\vcl\source\gdi\textlayout.cxx:336)
vcllo.dll!Control::DrawControlText(OutputDevice & _rTargetDevice, const
tools::Rectangle & rRect, const rtl::OUString & _rStr, DrawTextFlags _nStyle,
std::vector<tools::Rectangle,std::allocator<tools::Rectangle> > * _pVector,
rtl::OUString * _pDisplayText, const Size * i_pDeviceSize) Line 436
(c:\lo\work01\vcl\source\control\ctrl.cxx:436)
vcllo.dll!Button::ImplDrawAlignedImage(OutputDevice * pDev, Point & rPos, Size
& rSize, unsigned long nImageSep, DrawFlags nDrawFlags, DrawTextFlags
nTextStyle, tools::Rectangle * pSymbolRect, bool bAddImageSep) Line 271
(c:\lo\work01\vcl\source\control\button.cxx:271)
vcllo.dll!RadioButton::ImplDraw(OutputDevice * pDev, DrawFlags nDrawFlags,
const Point & rPos, const Size & rSize, const Size & rImageSize,
tools::Rectangle & rStateRect, tools::Rectangle & rMouseRect) Line 2066
(c:\lo\work01\vcl\source\control\button.cxx:2066)
vcllo.dll!RadioButton::ImplDrawRadioButton(OutputDevice & rRenderContext) Line
2165 (c:\lo\work01\vcl\source\control\button.cxx:2165)
vcllo.dll!RadioButton::Paint(OutputDevice & rRenderContext, const
tools::Rectangle & __formal) Line 2427
(c:\lo\work01\vcl\source\control\button.cxx:2427)
vcllo.dll!vcl::Window::ImplPaintToDevice(OutputDevice * i_pTargetOutDev, const
Point & i_rPos) Line 1448 (c:\lo\work01\vcl\source\window\paint.cxx:1448)
vcllo.dll!vcl::Window::PaintToDevice(OutputDevice * pDev, const Point & rPos,
const Size & __formal) Line 1521
(c:\lo\work01\vcl\source\window\paint.cxx:1521)
tklo.dll!VCLXWindow::draw(long nX, long nY) Line 2333
(c:\lo\work01\toolkit\source\awt\vclxwindow.cxx:2333)
tklo.dll!UnoControl::draw(long x, long y) Line 1014
(c:\lo\work01\toolkit\source\controls\unocontrol.cxx:1014)
drawinglayerlo.dll!drawinglayer::processor2d::VclPixelProcessor2D::processBasePrimitive2D(const
drawinglayer::primitive2d::BasePrimitive2D & rCandidate) Line 672
(c:\lo\work01\drawinglayer\source\processor2d\vclpixelprocessor2d.cxx:672)
drawinglayerlo.dll!drawinglayer::processor2d::BaseProcessor2D::process(const
drawinglayer::primitive2d::Primitive2DContainer & rSource) Line 72
(c:\lo\work01\drawinglayer\source\processor2d\baseprocessor2d.cxx:72)
drawinglayerlo.dll!drawinglayer::processor2d::BaseProcessor2D::process(const
drawinglayer::primitive2d::BasePrimitive2D & rCandidate) Line 49
(c:\lo\work01\drawinglayer\source\processor2d\baseprocessor2d.cxx:49)
drawinglayerlo.dll!drawinglayer::processor2d::VclPixelProcessor2D::processBasePrimitive2D(const
drawinglayer::primitive2d::BasePrimitive2D & rCandidate) Line 913
(c:\lo\work01\drawinglayer\source\processor2d\vclpixelprocessor2d.cxx:913)

Rendering of a RadioButton (probably unrelated to my changes, but you never
know).
Fact is that in OutputDevice::Push the mpOutDevStateStack is 'empty' ->
mpOutDevStateStack->push_back( pState ) crashes. I have no idea what
mpOutDevStateStack is or how it is managed. Taking a look...

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180704/c9ddf27f/attachment.html>