<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><span class="vcard"><a class="email" href="mailto:fyodor_e@hotmail.com" title="Fyodor <fyodor_e@hotmail.com>"> <span class="fn">Fyodor</span></a>
</span> changed
          <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED DUPLICATE - CRASH: After specific paste and undo operation"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107973">bug 107973</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">Status</td>
           <td>NEW
           </td>
           <td>RESOLVED
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Resolution</td>
           <td>---
           </td>
           <td>DUPLICATE
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Assignee</td>
           <td>libreoffice-bugs@lists.freedesktop.org
           </td>
           <td>fyodor_e@hotmail.com
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED DUPLICATE - CRASH: After specific paste and undo operation"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107973#c3">Comment # 3</a>
              on <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED DUPLICATE - CRASH: After specific paste and undo operation"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=107973">bug 107973</a>
              from <span class="vcard"><a class="email" href="mailto:fyodor_e@hotmail.com" title="Fyodor <fyodor_e@hotmail.com>"> <span class="fn">Fyodor</span></a>
</span></b>
        <pre>This bug surely relates to
<a class="bz_bug_link 
          bz_status_ASSIGNED "
   title="ASSIGNED - Writer crashes on undo times N (steps in Comment 11 or Comment 38)"
   href="show_bug.cgi?id=94225">https://bugs.documentfoundation.org/show_bug.cgi?id=94225</a>.
Crush happens here
<a href="https://opengrok.libreoffice.org/xref/core/sw/source/core/undo/unins.cxx#234">https://opengrok.libreoffice.org/xref/core/sw/source/core/undo/unins.cxx#234</a>

            SwNodeIndex aNd( pTmpDoc->GetNodes(), nNode);
            SwContentNode* pCNd = aNd.GetNode().GetContentNode();
            SwPaM aPaM( *pCNd, nContent );

As I've described in
<a class="bz_bug_link 
          bz_status_ASSIGNED "
   title="ASSIGNED - Writer crashes on undo times N (steps in Comment 11 or Comment 38)"
   href="show_bug.cgi?id=94225#c44">https://bugs.documentfoundation.org/show_bug.cgi?id=94225#c44</a>, fly anchored to
last para haven't got deleted. As a result, node indices, stored in Undo clases
become invalid, which leads to crush.

Code above creates aNd index pointing to start section node. GetContentNode
returns nullptr and SwPaM constructor crushes LO.

This bug will be resolved as <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED DUPLICATE - FILESAVE: XLSX - Column widths not retained"
   href="show_bug.cgi?id=94255">bug 94255</a> gets resolved.

*** This bug has been marked as a duplicate of <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED DUPLICATE - FILESAVE: XLSX - Column widths not retained"
   href="show_bug.cgi?id=94255">bug 94255</a> ***</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>