<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><span class="vcard"><a class="email" href="mailto:serval2412@yahoo.fr" title="Julien Nabet <serval2412@yahoo.fr>"> <span class="fn">Julien Nabet</span></a>
</span> changed
          <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Crash: "vector::_M_fill_insert" with large sumifs"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=132431">bug 132431</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">CC</td>
           <td>
                
           </td>
           <td>erack@redhat.com, serval2412@yahoo.fr
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Crash: "vector::_M_fill_insert" with large sumifs"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=132431#c4">Comment # 4</a>
              on <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Crash: "vector::_M_fill_insert" with large sumifs"
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=132431">bug 132431</a>
              from <span class="vcard"><a class="email" href="mailto:serval2412@yahoo.fr" title="Julien Nabet <serval2412@yahoo.fr>"> <span class="fn">Julien Nabet</span></a>
</span></b>
        <pre>Eike: 
Following my last comment, I don't know if we must dig about why nEndColDiff is
negative and so nCol2 then nDimensionCols is negative or if this
straightforward patch would be sufficient:
diff --git a/sc/source/core/tool/interpr1.cxx
b/sc/source/core/tool/interpr1.cxx
index 03a8f46731a6..58d4fc2de725 100644
--- a/sc/source/core/tool/interpr1.cxx
+++ b/sc/source/core/tool/interpr1.cxx
@@ -6045,6 +6045,11 @@ void ScInterpreter::IterateParametersIfs(
double(*ResultFunc)( const sc::ParamIf
                 PushError ( FormulaError::IllegalArgument);
                 return;
             }
+            if ( (nDimensionCols <= 0) || (nDimensionRows <= 0) )
+            {
+                PushError ( FormulaError::IllegalArgument);
+                return;
+            }

             // recalculate matrix values
             if (nGlobalError != FormulaError::NONE)

(It avoids crash and displays Err:502 for the cell)
Any thoughts?</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>