<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><span class="vcard"><a class="email" href="mailto:mstahl@redhat.com" title="Michael Stahl <mstahl@redhat.com>"> <span class="fn">Michael Stahl</span></a>
</span> changed
          <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - CRASH: LibreOffice crashes while deleting the header containing an image"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107494">bug 107494</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">Keywords</td>
           <td>
                
           </td>
           <td>regression
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Status</td>
           <td>NEW
           </td>
           <td>RESOLVED
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">CC</td>
           <td>
                
           </td>
           <td>mstahl@redhat.com, sbergman@redhat.com
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Version</td>
           <td>5.4.0.0.alpha0+ Master
           </td>
           <td>5.0.0.5 release
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Resolution</td>
           <td>---
           </td>
           <td>FIXED
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Assignee</td>
           <td>libreoffice-bugs@lists.freedesktop.org
           </td>
           <td>mstahl@redhat.com
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - CRASH: LibreOffice crashes while deleting the header containing an image"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107494#c6">Comment # 6</a>
              on <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - CRASH: LibreOffice crashes while deleting the header containing an image"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107494">bug 107494</a>
              from <span class="vcard"><a class="email" href="mailto:mstahl@redhat.com" title="Michael Stahl <mstahl@redhat.com>"> <span class="fn">Michael Stahl</span></a>
</span></b>
        <pre>fixed on master

guess this is when it started to crash:

commit 0f98299f7aa44bbb55c1bfeddca7799f727d14b0
Author:     Stephan Bergmann <<a href="mailto:sbergman@redhat.com">sbergman@redhat.com</a>>
AuthorDate: Wed Mar 4 13:52:03 2015 +0100

    Avoid bad downcast of SwFrmFmt to SwSectionFmt

diff --git a/sw/inc/docary.hxx b/sw/inc/docary.hxx
index 098851e..8768cc0 100644
--- a/sw/inc/docary.hxx
+++ b/sw/inc/docary.hxx
@@ -128,8 +128,10 @@ public:

     inline sal_uInt16 GetPos(const SwFmt *p) const
         { return SwVectorModifyBase<Value>::GetPos( static_cast<Value>(
const_cast<SwFmt*>( p ) ) ); }
-    inline bool Contains(const SwFmt *p) const
-        { return SwVectorModifyBase<Value>::Contains( static_cast<Value>(
const_cast<SwFmt*>( p ) ) ); }
+    inline bool Contains(const SwFmt *p) const {
+        Value p2 = dynamic_cast<Value>(const_cast<SwFmt*>(p));
+        return p2 != nullptr && SwVectorModifyBase<Value>::Contains(p2);
+    }
 };

 class SwGrfFmtColls : public SwFmtsModifyBase<SwGrfFmtColl*></pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>