[Libreoffice-bugs] [Bug 141405] New: LO crashes when adding control in dialog editor

bugzilla-daemon at bugs.documentfoundation.org bugzilla-daemon at bugs.documentfoundation.org
Wed Mar 31 17:36:45 UTC 2021 

https://bugs.documentfoundation.org/show_bug.cgi?id=141405

            Bug ID: 141405
           Summary: LO crashes when adding control in dialog editor
           Product: LibreOffice
           Version: 7.2.0.0.alpha0+ Master
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: UI
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: jbt at gmx.us

To clarify this is different from 104011 which was a crash about a
differently-named attribute in one particular control. That bug exists in
7.1.2.1 and other controls work fine.

This is about the current master branch
(8da9f85abc508140b90e4f5be587aa05d4f1e5f4) crashing in a different place (on an
empty UNO reference) for any control.

I'm setting hardware and OS specifically to what I tested with, but I would be
surprised if it was only this combination. I was testing with Calc, but it
should exist in other apps. 

To reproduce:

In a new document in Calc:
1) Tools->Macros->Organize Dialogs
2) Highlight Untitled 1 (Do not expand its tree, that will mess you up, but
presumably a different bug)
3) Click New
4) Name it anything you like, I tend to go with the default Dialog1. Hit OK
5) You'll notice Edit is grayed out. Highlight a different entry and come back
to Dialog1 get an active Edit button. This is presumably an unrelated
low-priority bug
6) Click Edit
7) Click on a control icon on the bottom other than "Form Combo Box" (which
would complicate matters). I was using mostly the List Box.
8) Click or click & drag in the dialog editor.
10) LO should crash

It's worth noting some concerning error message come before the crash, and
could be related.

warn:legacy.osl:1838091:1838091:svx/source/svdraw/svdouno.cxx:461:
SdrUnoObj::GetUnoControl: This object is not displayed in that particular view!
warn:legacy.osl:1838091:1838091:svx/source/svdraw/svdmodel.cxx:1646:
SdrModel::createUnoModel() - base implementation should not be called!

Then the crash happens here:

soffice.bin: /home/john/code/lo/core/include/com/sun/star/uno/Reference.h:385:
interface_type* com::sun::star::uno::Refere
nce< <template-parameter-1-1> >::operator->() const [with interface_type =
com::sun::star::lang::XServiceInfo]: Assertion 
`_pInterface != NULL' failed.
--Type <RET> for more, q to quit, c to continue without paging--q  
Quit
(gdb) bt
#0  __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007ffff7ae3859 in __GI_abort () at abort.c:79
#2  0x00007ffff7ae3729 in __assert_fail_base
    (fmt=0x7ffff7c79588 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n",
assertion=0x7ffff417ed3d "_pInterface != NULL", file=0x7ffff417ed00
"/home/john/code/lo/core/include/com/sun/star/uno/Reference.h", line=385,
function=<optimized out>)
    at assert.c:92
#3  0x00007ffff7af4f36 in __GI___assert_fail
    (assertion=0x7ffff417ed3d "_pInterface != NULL", file=0x7ffff417ed00
"/home/john/code/lo/core/include/com/sun/star/uno/Reference.h", line=385,
function=0x7ffff417ec60 "interface_type* com::sun::star::uno::Reference<
<template-parameter-1-1> >::operator->() const [with interface_type =
com::sun::star::lang::XServiceInfo]") at assert.c:101
#4  0x00007ffff3b99d77 in
com::sun::star::uno::Reference<com::sun::star::lang::XServiceInfo>::operator->()
const
    (this=0x7fffffff15c0) at
/home/john/code/lo/core/include/com/sun/star/uno/Reference.h:385
#5  0x00007ffff3b98af3 in SdrEditView::InsertObjectAtView(SdrObject*,
SdrPageView&, SdrInsertFlags) (this=
    0x55555898e350, pObj=0x55555849ebf0, rPV=...,
nOptions=SdrInsertFlags::NONE)
    at /home/john/code/lo/core/svx/source/svdraw/svdedtv.cxx:1008
#6  0x00007ffff3b738c0 in SdrCreateView::EndCreateObj(SdrCreateCmd)
(this=0x55555898e350, eCmd=SdrCreateCmd::ForceEnd)
    at /home/john/code/lo/core/svx/source/svdraw/svdcrtv.cxx:666
#7  0x00007fffda69f641 in basctl::DlgEdFuncInsert::MouseButtonUp(MouseEvent
const&) (this=0x5555587c1f00, rMEvt=...)
    at /home/john/code/lo/core/basctl/source/dlged/dlgedfunc.cxx:388
#8  0x00007fffda690228 in basctl::DlgEditor::MouseButtonUp(MouseEvent const&)
(this=0x555558788050, rMEvt=...)
    at /home/john/code/lo/core/basctl/source/dlged/dlged.cxx:453
#9  0x00007fffda5e52b4 in basctl::DialogWindow::MouseButtonUp(MouseEvent
const&) (this=0x55555838a9c0, rMEvt=...)
    at /home/john/code/lo/core/basctl/source/basicide/baside3.cxx:142
#10 0x00007ffff1304f30 in ImplHandleMouseEvent(VclPtr<vcl::Window> const&,
MouseNotifyEvent, bool, long, long, unsigned long, unsigned short,
MouseEventModifiers)
    (xWindow=..., nSVEvent=MouseNotifyEvent::MOUSEBUTTONUP, bMouseLeave=false,
nX=1280, nY=527, nMsgTime=767181245, nCode=1,
nMode=(MouseEventModifiers::SIMPLECLICK | MouseEventModifiers::SELECT))
    at /home/john/code/lo/core/vcl/source/window/winproc.cxx:702   
#11 0x00007ffff130a612 in ImplHandleSalMouseButtonUp(vcl::Window*,
SalMouseEvent const*)
    (pWindow=0x55555851cd20, pEvent=0x7fffffff1f30) at
/home/john/code/lo/core/vcl/source/window/winproc.cxx:2057
#12 0x00007ffff130b8b5 in ImplWindowFrameProc(vcl::Window*, SalEvent, void
const*)
    at /home/john/code/lo/core/vcl/source/window/winproc.cxx:2412
#13 0x00007fffe7a8a6fc in SalFrame::CallCallback(SalEvent, void const*) const
(this=
    0x5555583f51c0, nEvent=SalEvent::MouseButtonUp, pEvent=0x7fffffff1f30)
    at /home/john/code/lo/core/vcl/inc/salframe.hxx:306
#14 0x00007fffe7a89dba in GtkSalFrame::CallCallbackExc(SalEvent, void const*)
const
    (this=0x5555583f51c0, nEvent=SalEvent::MouseButtonUp,
pEvent=0x7fffffff1f30)
    at /home/john/code/lo/core/vcl/unx/gtk3/gtk3gtkframe.cxx:4690
#15 0x00007fffe7a8342b in GtkSalFrame::signalButton(_GtkWidget*,
_GdkEventButton*, void*)
    (pEvent=0x555558497b60, frame=0x5555583f51c0) at
/home/john/code/lo/core/vcl/unx/gtk3/gtk3gtkframe.cxx:2684
#16 0x00007fffe74794fb in  () at /lib/x86_64-linux-gnu/libgtk-3.so.0
#17 0x00007fffebd0e802 in g_closure_invoke () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#18 0x00007fffebd22814 in  () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0
#19 0x00007fffebd2d47d in g_signal_emit_valist () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#20 0x00007fffebd2e0f3 in g_signal_emit () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#21 0x00007fffe7423c23 in  () at /lib/x86_64-linux-gnu/libgtk-3.so.0
#22 0x00007fffe72df128 in  () at /lib/x86_64-linux-gnu/libgtk-3.so.0
#23 0x00007fffe72e13db in gtk_main_do_event () at
/lib/x86_64-linux-gnu/libgtk-3.so.0
#24 0x00007fffe6fc9f79 in  () at /lib/x86_64-linux-gnu/libgdk-3.so.0
#25 0x00007fffe6ffd106 in  () at /lib/x86_64-linux-gnu/libgdk-3.so.0
#26 0x00007fffebc2317d in g_main_context_dispatch () at
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#27 0x00007fffebc23400 in  () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#28 0x00007fffebc234a3 in g_main_context_iteration () at
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#29 0x00007fffe79ba9e5 in GtkSalData::Yield(bool, bool) (this=0x555555684190,
bWait=true, bHandleAllCurrentEvents=false)
    at /home/john/code/lo/core/vcl/unx/gtk3/gtk3gtkdata.cxx:389
#30 0x00007fffe79be4e6 in GtkInstance::DoYield(bool, bool) (this=
    0x555555684040, bWait=true, bHandleAllCurrentEvents=false)
#31 0x00007ffff188a4e6 in ImplYield(bool, bool) (i_bWait=true,
i_bAllEvents=false)
    at /home/john/code/lo/core/vcl/source/app/svapp.cxx:465
#32 0x00007ffff188acef in Application::Yield() () at
/home/john/code/lo/core/vcl/source/app/svapp.cxx:532
#33 0x00007ffff188a1e3 in Application::Execute() () at
/home/john/code/lo/core/vcl/source/app/svapp.cxx:444
#34 0x00007ffff7d3195f in desktop::Desktop::Main() (this=0x7fffffff2db0) at
/home/john/code/lo/core/desktop/source/app/app.cxx:1586
#35 0x00007ffff189d78a in ImplSVMain() () at
/home/john/code/lo/core/vcl/source/app/svmain.cxx:197
#36 0x00007ffff189d8b7 in SVMain() () at
/home/john/code/lo/core/vcl/source/app/svmain.cxx:229
#37 0x00007ffff7d896d1 in soffice_main() () at
/home/john/code/lo/core/desktop/source/app/sofficemain.cxx:98
#38 0x00005555555548c0 in sal_main () at
/home/john/code/lo/core/desktop/source/app/main.c:49
#39 0x00005555555548a2 in main (argc=4, argv=0x7fffffff3118) at
/home/john/code/lo/core/desktop/source/app/main.c:47

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20210331/79dd3cdf/attachment-0001.htm>

More information about the Libreoffice-bugs mailing list