<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body><span class="vcard"><a class="email" href="mailto:m.weghorn@posteo.de" title="Michael Weghorn <m.weghorn@posteo.de>"> <span class="fn">Michael Weghorn</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - Calc crashes when marking cells and you exit without saving"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=131083">bug 131083</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>UNCONFIRMED
</td>
<td>NEW
</td>
</tr>
<tr>
<td style="text-align:right;">Ever confirmed</td>
<td>
</td>
<td>1
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Calc crashes when marking cells and you exit without saving"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=131083#c22">Comment # 22</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Calc crashes when marking cells and you exit without saving"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=131083">bug 131083</a>
from <span class="vcard"><a class="email" href="mailto:m.weghorn@posteo.de" title="Michael Weghorn <m.weghorn@posteo.de>"> <span class="fn">Michael Weghorn</span></a>
</span></b>
<pre>(In reply to mgruber from <a href="show_bug.cgi?id=131083#c19">comment #19</a>)
<span class="quote">> Since ./soffice --calc --valgrind >> /tmp/valgrind.log didn't pipe the
> actual log output, I used the following call as suggested in the debug
> instructions wiki:
>
> valgrind --tool=memcheck --num-callers=128 --trace-children=yes ./soffice
> --calc 2>&1 | tee /tmp/valgrind.log
>
> Hope that was correct(?).</span >
Yes, thanks.
The valgrind log shows an invalid read:
<span class="quote">> ==14248== Thread 1:
> ==14248== Invalid read of size 8
> ==14248== at 0x321E20A0: ScModule::GetSelectionTransfer() const (scmod.hxx:155)
> ==14248== by 0x321E0E10: ScSelectionTransferObj::~ScSelectionTransferObj() (seltrans.cxx:151)
> ==14248== by 0x321E0EBF: ScSelectionTransferObj::~ScSelectionTransferObj() (seltrans.cxx:161)</span >
>
<span class="quote">> [...]</span >
>
<span class="quote">> ==14248== by 0x400964: main (main.c:47)
> ==14248== Address 0x100 is not stack'd, malloc'd or (recently) free'd</span >
Unfortunately, I see no explicit information like where memory was free'd etc.,
which could have helped even more in finding out what's going wrong.
I still can't reproduce myself yet, but given the valgrind log, let's set
status to NEW.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>