<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - FILEOPEN DOCX Accepting field code change TC entry crashes LO"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=124468">124468</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>FILEOPEN DOCX Accepting field code change TC entry crashes LO
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>6.3.0.0.alpha0+ Master
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Writer
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>libreoffice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>libreoffice@nisz.hu
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Description:
When the attached document containing a changed field code is opened in Writer
and the change is accepted Writer crashes.

Steps to Reproduce:
    1. In Word create some hyperlinks: web address and e-mail address too
    2. Turn on change tracking
    3. Edit the existing hyperlinks and change their type: the e-mail address
to web page and web page to e-mail address.
    4. Word will indicate the changes with “Field code has changed” entries.
    5. Open the document in Writer and open the Manage Changes window. Clicking
Accept (or Reject) on the first change will crash LO.
    6. Accepting or rejecting from the Track Changes toolbar does not cause a
crash.


Actual Results:
When the attached document containing a changed field code is opened in Writer
and the change is accepted Writer crashes.

Expected Results:
Writer shouldn't crash.


Reproducible: Always


User Profile Reset: No



Additional Info:
LibreOffice details: 
Version: 6.3.0.0.alpha0+
Build ID: ade1df0948563b532a5d293c31d46a4f042559ee
CPU threads: 4; OS: Windows 6.3; UI render: GL; VCL: win; 
Locale: hu-HU (hu_HU); UI-Language: en-US
Calc: threaded

Not reproduced in:
Verzió: 6.2.0.3
Build az.: 98c6a8a1c6c7b144ce3cc729e34964b47ce25d62
CPU szálak: 4; OS: Windows 6.3; Felületmegjelenítés: GL; VCL: win; 
Területi beállítások: hu-HU (hu_HU); UI nyelve: hu-HU
Calc: threaded

Console log:
 ~/bibisect-win32-6.3
$ instdir/program/swriter.exe
0x2846A6DE (0x24EFFDF8 0x24EFFE20 0x034F81B5 0x3474FC4C),
?UpdateCurField@SwFieldMgr@@QAEXKABVOUString@rtl@@0V?$unique_ptr@VSwField@@U?$default_delete@VSwField@@@std@@@std@@@Z()
+ 0x1CCE bytes(s)
0x0351C78D (0x007091D8 0x0169F824 0x09287DAA 0x000000BC),
?Invoke@Timer@@UAEXXZ() + 0xD bytes(s)
0x0928B5FF (0x000000BC 0x0E3C3F3C 0x000000BC 0x00000000), create_SalInstance()
+ 0xB5F bytes(s)
0x09287DAA (0x00F40A02 0x000004A2 0x000000BC 0x00000000),
?toPair@Point@@QBEABVPair@@XZ() + 0xB77A bytes(s)
0x09287E9D (0x00F40A02 0x000004A2 0x000000BC 0x00000000),
?toPair@Point@@QBEABVPair@@XZ() + 0xB86D bytes(s)
0x74B98E71 (0x09287E40 0x00F40A02 0x000004A2 0x000000BC), CallNextHookEx() +
0xB1 bytes(s)
0x74B990D1 (0x09287E40 0x00000000 0x000004A2 0x000000BC), CallNextHookEx() +
0x311 bytes(s)
0x74B9A66F (0x3474F268 0x0169F9D0 0x09287781 0x0169F9E8), GetMessageW() + 0x24F
bytes(s)
0x74B9A6E0 (0x0169F9E8 0x03940001 0x74B9A6F0 0x0B7AFF90), DispatchMessageW() +
0x10 bytes(s)
0x09287781 (0x0169F9E8 0x007091D8 0x00000001 0x0394FA58),
?toPair@Point@@QBEABVPair@@XZ() + 0xB151 bytes(s)
0x09287914 (0x00000001 0x00000000 0x0E3C3D58 0x0394FA58),
?toPair@Point@@QBEABVPair@@XZ() + 0xB2E4 bytes(s)
0x092874D0 (0x00000001 0x00000000 0x3474F1D0 0x0350DB80),
?toPair@Point@@QBEABVPair@@XZ() + 0xAEA0 bytes(s)
0x0350BA36 (0x54EBFEE6 0x0394FA58 0x10024B28 0x00000001),
?Execute@Application@@SAXXZ() + 0x156 bytes(s)
0x0FF2EA10 (0x3474F7AC 0x0078B2C8 0x10024B28 0x7F73D000)
0x0351AC1F (0x54EBF942 0x6C096314 0x0FFEF26C 0x00000000), ?ImplSVMain@@YAHXZ()
+ 0x6F bytes(s)
0x0FF673AE (0x6C096314 0x0169FCD0 0x00C4123A 0x00000003), soffice_main() + 0xEE
bytes(s)
0x00C41049 (0x00000003 0x0078B2C8 0x006FA868 0x1EDD74F1), main() + 0x19
bytes(s)
0x00C4123A (0x7F73D000 0x74F97BE0 0x5EAE7F7A 0x0169FD2C), main() + 0x20A
bytes(s)
0x74F97C04 (0x7F73D000 0x86BA3D1E 0x00000000 0x00000000), BaseThreadInitThunk()
+ 0x24 bytes(s)
0x7740AD8F (0xFFFFFFFF 0x773F00CB 0x00000000 0x00000000),
RtlInitializeExceptionChain() + 0x8F bytes(s)
0x7740AD5A (0x00C41315 0x7F73D000 0x00000000 0x00000000),
RtlInitializeExceptionChain() + 0x5A bytes(s)</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>