<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Crash after undoing chart and shape insertion, then closing LO"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=123035">123035</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Crash after undoing chart and shape insertion, then closing LO
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>3.5.0 release
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Keywords</th>
          <td>bibisectRequest, haveBacktrace, regression
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>major
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>high
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Writer
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>libreoffice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>baron@caesar.elte.hu
          </td>
        </tr>

        <tr>
          <th>Blocks</th>
          <td>105948, 108741
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="http://bugs.documentfoundation.org/attachment.cgi?id=148733" name="attach_148733" title="Backtrace">attachment 148733</a> <a href="http://bugs.documentfoundation.org/attachment.cgi?id=148733&action=edit" title="Backtrace">[details]</a></span>
Backtrace

I came across this when chasing bug <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Inserting shape over chart in DOCX inserts it below chart"
   href="show_bug.cgi?id=122942">bug 122942</a> and <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Shape jumps after inserting over chart in DOCX, and moving it"
   href="show_bug.cgi?id=123032">bug 123032</a>, but is
completely independent from them.

- Start a new document,
- Insert a chart,
- Insert a shape by Ctrl-clicking on the respective toolbar icon (this inserts
it in the middle of the view),
- Undo the changes until you get back an empty document.
- Close LO, or just the document.

=> Crash. VS says: "Exception thrown: read access violation. this was
0xFFFFFFFFFFFFFFFF."
At
<a href="https://opengrok.libreoffice.org/xref/core/include/com/sun/star/uno/Reference.h?r=06ec8a95#94">https://opengrok.libreoffice.org/xref/core/include/com/sun/star/uno/Reference.h?r=06ec8a95#94</a>

No crash report is generated. Attaching backtrace.

Observed using LO 6.3.0.0.alpha0+ (76c7a6c39d769cb9bdb9b951d9f95507c0139372),
3.5.0.3 / Windows 7.
No crash when using LO 3.3.0.
=> regression

If crash is reproducible in Linux, it has to be checked with oldest commit of
bibisect-43all whether it's bibisectable or not.</pre>
        </div>
      </p>

        <div id="referenced">
          <hr style="border: 1px dashed #969696">
          <b>Referenced Bugs:</b>
          <ul>
              <li>
                [<a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [META] Undo/Redo bugs and enhancements"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=105948">Bug 105948</a>] [META] Undo/Redo bugs and enhancements
              </li>
              <li>
                [<a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [META] Shapes bugs and enhancements"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=108741">Bug 108741</a>] [META] Shapes bugs and enhancements
              </li>
          </ul>
        </div>
        <br>

      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>