<html> <head> <base href="https://bugs.documentfoundation.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_UNCONFIRMED " title="UNCONFIRMED - Crash after undo they modifications made by track & changes (document comparison)" href="https://bugs.documentfoundation.org/show_bug.cgi?id=137869#c11">Comment # 11</a> on <a class="bz_bug_link bz_status_UNCONFIRMED " title="UNCONFIRMED - Crash after undo they modifications made by track & changes (document comparison)" href="https://bugs.documentfoundation.org/show_bug.cgi?id=137869">bug 137869</a> from <a class="email" href="mailto:lo_bugs@iseries-guru.com" title="Terrence Enger <lo_bugs@iseries-guru.com>"> Terrence Enger</a> <pre>Created <a href="https://bugs.documentfoundation.org/attachment.cgi?id=173478" name="attach_173478" title="backtrace on linux">attachment 173478</a> <a href="https://bugs.documentfoundation.org/attachment.cgi?id=173478&action=edit" title="backtrace on linux">[details]</a> backtrace on linux The interesting part of the backtrace starts at frame #18, where idx==778, m_nSize==778. In a local --enable-debug --enable-dbgutil build of commit d95e400b (2021-06-18), built and running on debian-buster, using the STR from the bug description, I see a crash in step 5 after the second <ctrl>+Z. Final terminal messages are (rewrapped): warn:legacy.osl:22417:22417:sw/source/core/access/acccontext.cxx:445: fire event for disposed frame? warn:legacy.osl:22417:22417:sw/source/core/layout/anchoredobject.cxx:569: <SwAnchoredObject::GetObjRectWithSpaces> - cache for object rectangle inclusive spaces marked as valid, but it couldn't be. Missing invalidation of cache. warn:sw.core:22417:22417:sw/source/core/docnode/node.cxx:1980: Wrong cond collection, skipping check of Cond Colls. warn:sw.core:22417:22417:sw/source/core/docnode/node.cxx:1980: Wrong cond collection, skipping check of Cond Colls. warn:legacy.osl:22417:22417:sw/source/core/access/acccontext.cxx:445: fire event for disposed frame? warn:legacy.osl:22417:22417:sw/source/core/access/acccontext.cxx:445: fire event for disposed frame? soffice.bin: /home/terry/lo_hacking/git/libo6/sw/source/core/bastyp/bparr.cxx:84: BigPtrEntry* BigPtrArray::operator[](sal_uLong) const: Assertion `idx < m_nSize' failed. Unspecified Application Error I am setting status NEW.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>