<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - crash"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107539">107539</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>crash
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>4.3.3.2 release
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Calc
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>libreoffice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>g4827387@trbvm.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="http://bugs.documentfoundation.org/attachment.cgi?id=132974" name="attach_132974" title="spreadsheet to reproduce the crash.">attachment 132974</a> <a href="http://bugs.documentfoundation.org/attachment.cgi?id=132974&action=edit" title="spreadsheet to reproduce the crash.">[details]</a></span>
spreadsheet to reproduce the crash.

I get a crash when pasting a few numbers in D3 (sheet 'cuentas').
What I paste is the following:

1116.07
980.77
858.57
775.33
721.48
650.58
605.94
566.20
526.81
486.20
447.93
387.61
276.99
244.59
237.31
228.49
212.36
194.55
171.32
149.02
131.78
113.34
94.05
72.93
47.30
25.00
4.32

I can reproduce this 100% of the times.

$ uname -a
Linux PC 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64
GNU/Linux
$ cat /etc/debian_version 
8.7
Libre office version:
Version: 4.3.3.2
Build ID: 430m0(Build:2)


crash:
--------------------------
[New Thread 0x7ff4532e9700 (LWP 19243)]

Program received signal SIGSEGV, Segmentation fault.
ScFormulaCell::SetCellGroup (this=0x0, xRef=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/formulacell.cxx:3509
3509   
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/formulacell.cxx:
No such file or directory.
(gdb) quit
A debugging session is active.

        Inferior 1 [process 18204] will be detached.

Quit anyway? (y or n) y
------------------------
backtrace:
(gdb) backtrace
#0  ScFormulaCell::SetCellGroup (this=0x0, xRef=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/formulacell.cxx:3509
#1  0x00007f23fb3a5d7b in operator() (this=<optimized out>, node=..., node=...)
at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/column3.cxx:2915
#2 
for_each<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52,
svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53,
EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54,
ScFormulaCell> > >::iterator_trait,
mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned
long, mdds::mtv::base_element_block> > >, (anonymous
namespace)::GroupFormulaCells> (__f=..., __last=..., __first=...) at
/usr/include/c++/4.9/bits/stl_algo.h:3755
#3  ScColumn::RegroupFormulaCells (this=this@entry=0x1f6d6e0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/column3.cxx:2960
#4  0x00007f23fb4250f9 in ScDocumentImport::initColumn
(this=this@entry=0x7ffcab280670, rCol=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/documentimport.cxx:505
#5  0x00007f23fb4254e2 in ScDocumentImport::finalize
(this=this@entry=0x7ffcab280670) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/core/data/documentimport.cxx:496
#6  0x00007f23fb822c7c in ScImportExport::ExtText2Doc (this=0x7ffcab280fa0,
rStrm=...) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/docshell/impex.cxx:1451
#7  0x00007f23fb824645 in ScImportExport::ImportStream
(this=this@entry=0x7ffcab280fa0, rStrm=..., rBaseURL="", nFmt=nFmt@entry=1)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/docshell/impex.cxx:363
#8  0x00007f23fb82473f in ScImportExport::ImportString
(this=this@entry=0x7ffcab280fa0, 
   
rText="1116.07\n980.77\n858.57\n775.33\n721.48\n650.58\n605.94\n566.20\n526.81\n486.20\n447.93\n387.61\n276.99\n244.59\n237.31\n228.49\n212.36\n194.55\n171.32\n149.02\n131.78\n113.34\n94.05\n72.93\n47.30\n25.00\n4.32",
nFmt=nFmt@entry=1) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/docshell/impex.cxx:285
#9  0x00007f23fbb3994e in ScViewFunc::PasteDataFormat
(this=this@entry=0x2398f98, nFormatId=nFormatId@entry=1,
rxTransferable=uno::Reference to (x11::X11Transferable *) 0x2093798,
nPosX=<optimized out>, 
    nPosY=2, pLogicPos=pLogicPos@entry=0x0, bLink=false, bAllowDialogs=true) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/viewfun5.cxx:351
#10 0x00007f23fbb3198a in ScViewFunc::PasteFromSystem
(this=this@entry=0x2398f98, nFormatId=nFormatId@entry=1, bApi=bApi@entry=false)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/viewfun3.cxx:686
#11 0x00007f23fbb32005 in ScViewFunc::PasteFromSystem
(this=this@entry=0x2398f98) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/viewfun3.cxx:543
#12 0x00007f23fba59cf7 in ScClipUtil::PasteFromClipboard (pViewData=0x2398fa0,
pTabViewShell=pTabViewShell@entry=0x2398ed0,
bShowDialog=bShowDialog@entry=true)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/cliputil.cxx:58
#13 0x00007f23fba4ba2b in ScCellShell::ExecuteEdit (this=0x209bd90, rReq=...)
at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sc/source/ui/view/cellsh1.cxx:1251
#14 0x00007f2422bd17d4 in SfxShell::CallExec (this=0x209bd90,
pFunc=0x7f23fba418b0 <SfxStubScCellShellExecuteEdit(SfxShell*, SfxRequest&)>,
rReq=...)
    at /build/libreoffice-jn5nCw/libreoffice-4.3.3/include/sfx2/shell.hxx:181
#15 0x00007f2422bc9484 in SfxDispatcher::Call_Impl (this=0x260cf30, rShell=...,
rSlot=..., rReq=..., bRecord=true) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/dispatch.cxx:283
#16 0x00007f2422bcb405 in SfxDispatcher::_Execute (this=0x260cf30, rShell=...,
rSlot=..., rReq=..., eCallMode=4) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/dispatch.cxx:960
#17 0x00007f2422928c6d in SfxBindings::Execute_Impl (this=0x1d19e70, aReq=...,
pSlot=pSlot@entry=0x7f23fbfd7560 <aScCellShellSlots_Impl+480>,
pShell=pShell@entry=0x209bd90)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/bindings.cxx:1238
#18 0x00007f242296338b in SfxDispatchController_Impl::dispatch (this=0x2f0d0a0,
aURL=..., aArgs=empty uno::Sequence, rListener=empty uno::Reference)
    at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/unoctitm.cxx:731
#19 0x00007f2422965c79 in SfxOfficeDispatch::dispatch (this=0x2e68f10,
aURL=..., aArgs=empty uno::Sequence) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/sfx2/source/control/unoctitm.cxx:359
#20 0x00007f242206b2e7 in svt::AsyncAccelExec::impl_ts_asyncCallback
(this=0x2f16050) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/svtools/source/misc/acceleratorexecute.cxx:475
#21 0x00007f2420b88bca in Call (pCaller=<optimized out>, this=<optimized out>)
at /build/libreoffice-jn5nCw/libreoffice-4.3.3/include/tools/link.hxx:123
#22 DoEvent_Impl (pEvent=<optimized out>, this=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/helper/evntpost.cxx:53
#23 vcl::EventPoster::LinkStubDoEvent_Impl (pThis=<optimized out>,
pCaller=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/helper/evntpost.cxx:49
#24 0x00007f24209acf92 in Call (pCaller=<optimized out>, this=<optimized out>)
at /build/libreoffice-jn5nCw/libreoffice-4.3.3/include/tools/link.hxx:123
#25 ImplHandleUserEvent (pSVEvent=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/window/winproc.cxx:1883
#26 ImplWindowFrameProc (pWindow=0x268ec48, nEvent=30368, pEvent=0x268ec30) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/window/winproc.cxx:2454
#27 0x00007f2420c11eb1 in CallCallback (pEvent=0x268ec30, nEvent=22,
this=0x1973ea0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/inc/salframe.hxx:243
#28 SalGenericDisplay::DispatchInternalEvent (this=this@entry=0xd540b0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/generic/app/gendisp.cxx:90
#29 0x00007f2414489534 in SalX11Display::Yield (this=0xd540b0) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldisp.cxx:1850
#30 0x00007f2414489335 in DisplayYield (fd=<optimized out>, pDisplay=0xd540b0)
at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldisp.cxx:375
#31 0x00007f2414488a2b in HandleNextEvent (this=0x7f24146efec0
<yieldTable+384>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldata.cxx:583
#32 SalXLib::Yield (this=0xd38e60, bWait=<optimized out>,
bHandleAllCurrentEvents=false) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/unx/generic/app/saldata.cxx:675
#33 0x00007f2420b9c91e in ImplYield (i_bAllEvents=false, i_bWait=true) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svapp.cxx:359
#34 Application::Yield () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svapp.cxx:391
#35 0x00007f2420b9c9b5 in Application::Execute () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svapp.cxx:340
#36 0x00007f24253f57a5 in desktop::Desktop::Main (this=0x7ffcab282670) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/app.cxx:1682
#37 0x00007f2420ba1582 in ImplSVMain () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svmain.cxx:155
#38 0x00007f2420ba15b2 in SVMain () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/vcl/source/app/svmain.cxx:188
#39 0x00007f2425418225 in soffice_main () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/sofficemain.cxx:85
#40 0x000000000040071b in sal_main () at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/main.c:48
#41 main (argc=<optimized out>, argv=<optimized out>) at
/build/libreoffice-jn5nCw/libreoffice-4.3.3/desktop/source/app/main.c:47
-------------------------
Detaching from program: /usr/lib/libreoffice/program/soffice.bin, process 18204


Backtrace full and backtrace no-filters full attached below</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>