[Libreoffice-bugs] [Bug 119793] New: Crash on redo of rectangle movement and text

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119793

            Bug ID: 119793
           Summary: Crash on redo of rectangle movement and text
           Product: LibreOffice
           Version: 6.1.0.3 release
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Calc
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: hi-angel at yandex.ru

Description:


Steps to Reproduce:
1. Open the attached xls
2. Move the orange-border rectangle that is at top-left angle someplace.
3. Press a letter (so a character would appear in the rectangle)
4. Press Ctrl+z to undo the text, and then press Ctrl+z to undo the movement


Actual Results:
Calc crashes

Expected Results:
Actions undone.


Reproducible: Always


User Profile Reset: No


OpenGL enabled: Yes

Additional Info:
This crash reproducible at least on Mac OS X, and Archlinux.

Stacktrace from the later, got with gdb:

#0  0x00007fc59c0b32bc in  () at /usr/lib/libreoffice/program/libsfxlo.so
#1  0x00007fc59be7d65e in SfxShell::GetSlotState(unsigned short, SfxInterface
const*, SfxItemSet*) () at /usr/lib/libreoffice/program/libsfxlo.so
#2  0x00007fc54fb0d72e in ScTabViewShell::GetUndoState(SfxItemSet&) () at
/usr/lib/libreoffice/program/../program/libsclo.so
#3  0x00007fc59be5b5e0 in SfxDispatcher::FillState_(SfxSlotServer const&,
SfxItemSet&, SfxSlot const*) () at /usr/lib/libreoffice/program/libsfxlo.so
#4  0x00007fc59be5865a in  () at /usr/lib/libreoffice/program/libsfxlo.so
#5  0x00007fc59be58af2 in  () at /usr/lib/libreoffice/program/libsfxlo.so
#6  0x00007fc599c8c4c4 in Scheduler::ProcessTaskScheduling() () at
/usr/lib/libreoffice/program/libvcllo.so
#7  0x00007fc58cda19b9 in  () at
/usr/lib/libreoffice/program/libvclplug_gtk3lo.so
#8  0x00007fc59499ab49 in g_main_context_dispatch () at
/usr/lib/libglib-2.0.so.0
#9  0x00007fc59499af59 in  () at /usr/lib/libglib-2.0.so.0
#10 0x00007fc59499afee in g_main_context_iteration () at
/usr/lib/libglib-2.0.so.0
#11 0x00007fc58cda2f14 in  () at
/usr/lib/libreoffice/program/libvclplug_gtk3lo.so
#12 0x00007fc599c9b7cf in Application::Yield() () at
/usr/lib/libreoffice/program/libvcllo.so
#13 0x00007fc599c9cff6 in Application::Execute() () at
/usr/lib/libreoffice/program/libvcllo.so
#14 0x00007fc59d4a3de2 in  () at /usr/lib/libreoffice/program/libsofficeapp.so
#15 0x00007fc599ca2258 in  () at /usr/lib/libreoffice/program/libvcllo.so
#16 0x00007fc599ca2362 in SVMain() () at
/usr/lib/libreoffice/program/libvcllo.so
#17 0x00007fc59d4cbca9 in soffice_main () at
/usr/lib/libreoffice/program/libsofficeapp.so
#18 0x00005571a78ac02d in  ()
#19 0x00007fc59d26e223 in __libc_start_main () at /usr/lib/libc.so.6
#20 0x00005571a78ac06e in  ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180910/5e263385/attachment.html>