<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_UNCONFIRMED "
title="UNCONFIRMED - Doing a few undo-redo cycle of deletion of a row with comment crashes Calc"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=107869">107869</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Doing a few undo-redo cycle of deletion of a row with comment crashes Calc
</td>
</tr>
<tr>
<th>Product</th>
<td>LibreOffice
</td>
</tr>
<tr>
<th>Version</th>
<td>5.3.3.2 release
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>UNCONFIRMED
</td>
</tr>
<tr>
<th>Keywords</th>
<td>bibisected, bisected
</td>
</tr>
<tr>
<th>Severity</th>
<td>critical
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>Calc
</td>
</tr>
<tr>
<th>Assignee</th>
<td>libreoffice-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>baron@caesar.elte.hu
</td>
</tr>
<tr>
<th>CC</th>
<td>erack@redhat.com, xiscofauli@libreoffice.org
</td>
</tr></table>
<p>
<div>
<pre>- Add a comment to an empty cell in Calc.
- Delete the row with comment.
- Undo-redo deletion a few times.
=> Calc crashes.
Reproduced using 5.3.3.2 / Windows 7 and 5.2.2.2 / Ubuntu 16.04.
Crash report:
<a href="http://crashreport.libreoffice.org/stats/crash_details/b7bbd14f-86c5-452b-b147-d20ab6cc6c22">http://crashreport.libreoffice.org/stats/crash_details/b7bbd14f-86c5-452b-b147-d20ab6cc6c22</a>
There is no crash in master branch, and it could be reverse-bibisected to the
following commit using repo bibisect-linux-64-5.4.
Eike, could you please backport the fix to 5.3?
<a href="https://cgit.freedesktop.org/libreoffice/core/commit/?id=06e427c24d75311c0ab79d2da586b961881db766">https://cgit.freedesktop.org/libreoffice/core/commit/?id=06e427c24d75311c0ab79d2da586b961881db766</a>
author Eike Rathke <<a href="mailto:erack@redhat.com">erack@redhat.com</a>> 2017-04-12 21:24:34 (GMT)
committer Eike Rathke <<a href="mailto:erack@redhat.com">erack@redhat.com</a>> 2017-04-12 22:48:47 (GMT)
"control deletion of SdrCaptionObj within ScCaptionPtr by refcount"</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>