[Libreoffice-bugs] [Bug 132431] Crash: "vector::_M_fill_insert" with large sumifs

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=132431

--- Comment #3 from Julien Nabet <serval2412 at yahoo.fr> ---
After some debugging on gdb I found a code pointer.

6056             // initialize temporary result matrix
6057             if (vConditions.empty())
6058                 vConditions.resize( nDimensionCols * nDimensionRows, 0);
See
https://opengrok.libreoffice.org/xref/core/sc/source/core/tool/interpr1.cxx?r=dbda099d#6058

nDimensionCols = -42


Before this block:
nCol1=1 nCol2=1
   6029             if (bRangeReduce)
   6030             {
   6031                 nCol1 += nStartColDiff;
   6032                 nRow1 += nStartRowDiff;
   6033 
   6034                 nCol2 += nEndColDiff;
   6035                 nRow2 += nEndRowDiff;
   6036             }
After:
nCol1=1 nCol2=-42

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200426/d7c7ef53/attachment.htm>