<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Crash when Navigate By Headings search wraps from end to beginning of file"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=123637">123637</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Crash when Navigate By Headings search wraps from end to beginning of file
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>6.2.0.0.beta1+
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Writer
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>libreoffice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>raykowj@gmail.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="http://bugs.documentfoundation.org/attachment.cgi?id=149500" name="attach_149500" title="Headings search crash test file">attachment 149500</a> <a href="http://bugs.documentfoundation.org/attachment.cgi?id=149500&action=edit" title="Headings search crash test file">[details]</a></span>
Headings search crash test file

Steps to repro:

1) Open writer with the attached file
2) Menu > View > Toolbars > Find
3) Select Headings in the Navigate By list box
4) Press the Next Heading control until crash occurs (4 presses)

I have traced the bug to the following commit:

commit d0e9cc832d19b622532f01580d9cf78ee0b215db
Author: Michael Stahl <<a href="mailto:Michael.Stahl@cib.de">Michael.Stahl@cib.de</a>>, Thu Oct 25 11:06:38 2018 +0200 (4
months ago)
Committer: Michael Stahl <<a href="mailto:Michael.Stahl@cib.de">Michael.Stahl@cib.de</a>>, Thu Nov 15 15:10:02 2018 +0100
(3 months ago)
Follows: libreoffice-6-2-branch-point
Precedes: libreoffice-6.2.0.0.beta1

sw_redlinehide_3: adapt GotoOutline for SwCursrShell

Adapt SwDoc::GotoOutline(), SwCursorShell::GotoNextOutline(),
SwCursorShell::GotoPrevOutline() to skip over outline nodes that are
merged away in the layout.

Change-Id: Id6f6bb93177753ed21a438c89dc6d90098e11455

It seems to be an issue with accessing an array out of bounds.</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>