[Libreoffice-bugs] [Bug 136903] Crash swlo!SwRedlineData::SetSeqNo+0xf26: (track changes involved)

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=136903

László Németh <nemeth at numbertext.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |NEW
           Assignee|nemeth at numbertext.org       |libreoffice-bugs at lists.free
                   |                            |desktop.org

--- Comment #8 from László Németh <nemeth at numbertext.org> ---
(In reply to Aron Budea from comment #6)
> (In reply to NISZ LibreOffice Team from comment #5)
> > Seems to have started with:
> > [...]
> > 
> > Before this commit the same steps in the bibisect-7.1 repo crashed with:
> Actually, before the following commit there isn't even a crash, thus I would
> consider that the real starting point, bibisected using repo
> bibisect-linux-64-6.3. Adding CC: to László Németh.
> 
> https://cgit.freedesktop.org/libreoffice/core/commit/
> ?id=2de1fd7d8b8bd42c66190140cc4506df0c3367f1
> author		László Németh <nemeth at numbertext.org>	2019-05-10 16:36:10 +0200
> committer	László Németh <nemeth at numbertext.org>	2019-05-11 13:09:32 +0200
> 
> tdf#125187 DOCX track changes: fix w:del within w:ins

Reverting this, moreover, also its preceding patch, doesn't solve the problem.
I'll attach a simplified test file, where backspace, Ctrl-Z, Ctrl-Y crashes
LibreOffice immediately.

Interestingly, deletion of the problematic comment doesn't update the place of
its frame, leaving a gray box.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20210624/e86bc15e/attachment.htm>