[Libreoffice-bugs] [Bug 123035] New: Crash after undoing chart and shape insertion, then closing LO

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=123035

            Bug ID: 123035
           Summary: Crash after undoing chart and shape insertion, then
                    closing LO
           Product: LibreOffice
           Version: 3.5.0 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: bibisectRequest, haveBacktrace, regression
          Severity: major
          Priority: high
         Component: Writer
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: baron at caesar.elte.hu
            Blocks: 105948, 108741

Created attachment 148733
  --> https://bugs.documentfoundation.org/attachment.cgi?id=148733&action=edit
Backtrace

I came across this when chasing bug bug 122942 and bug 123032, but is
completely independent from them.

- Start a new document,
- Insert a chart,
- Insert a shape by Ctrl-clicking on the respective toolbar icon (this inserts
it in the middle of the view),
- Undo the changes until you get back an empty document.
- Close LO, or just the document.

=> Crash. VS says: "Exception thrown: read access violation. this was
0xFFFFFFFFFFFFFFFF."
At
https://opengrok.libreoffice.org/xref/core/include/com/sun/star/uno/Reference.h?r=06ec8a95#94

No crash report is generated. Attaching backtrace.

Observed using LO 6.3.0.0.alpha0+ (76c7a6c39d769cb9bdb9b951d9f95507c0139372),
3.5.0.3 / Windows 7.
No crash when using LO 3.3.0.
=> regression

If crash is reproducible in Linux, it has to be checked with oldest commit of
bibisect-43all whether it's bibisectable or not.


Referenced Bugs:

https://bugs.documentfoundation.org/show_bug.cgi?id=105948
[Bug 105948] [META] Undo/Redo bugs and enhancements
https://bugs.documentfoundation.org/show_bug.cgi?id=108741
[Bug 108741] [META] Shapes bugs and enhancements
-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20190129/ab5a090f/attachment.html>