Issue 123745

Summary: [IA2] Eventual crash in Writer documents containing cross-references
Product: General Reporter: Michael Curran <mick>
Component: accessibilityAssignee: AOO issues mailing list <issues>
Status: CLOSED FIXED QA Contact:
Severity: Normal    
Priority: P3 CC: issues, jamie, steve.yin.aoo
Version: 4.1.0-dev   
Target Milestone: 4.1.0   
Hardware: All   
OS: Windows, all   
Issue Type: DEFECT Latest Confirmation in: ---
Developer Difficulty: ---
Issue Depends on:    
Issue Blocks: 121767    
Attachments:
Description Flags
A writer document containing 3 headings and two paragraphs. The last paragraph contains a crosss-reference to the second heading. none

Description Michael Curran 2013-11-25 00:53:24 UTC
Created attachment 81988 [details]
A writer document containing 3 headings and two paragraphs. The last paragraph contains a crosss-reference to the second heading.

Open Office Writer becomes unstable and eventually crashes when arrowing through a document containing a cross-reference, while running NVDA or AccProbe testing tool with focus tracking enabled.
Steps to reproduce:
1. Open the attached testcase in Open Office Writer.
2. Start NVDA screen reader; or
3. Start accProbe, anble focus tracking, and choose ti view all available IA2 properties.
4. Move back to Open Office Writer and arrow down to the line below "test 2" which contains a cross-reference to the "test 1" heading.
5. Move back and forth over the line with right and left arrow keys for a while. Possibly constantly wrapping off the edge of this line onto the next (blank) line and back again may also cause the issue.
6. Open Office Writer will either:
 * Close  automatically with no message; or
 * Freeze, such that the caret no longer moves; or
 * Report an unknown exception to the user and then close.

Debugging with windbg certainly detects exceptions pretty quickly, though with out debug symbols the symbols it does show are rather meaningless.

Some extra notes:
 * Sometimes before the crash, random data starts getting exposed by IAccessibleTextOne example is in the testcase, a 'A' is reported to exist at the end of the document. Another example, though not covered by the test case, is other text such as a random language name appearing where normal text should be.
 * Sometimes the title and message of the unknown exception crash dialog contains garbage text.
Comment 1 Michael Curran 2013-11-25 00:57:06 UTC
This bug is certainly not new to this code. I'm pretty sure we experienced very similar in IBM Lotus Symphony.
Comment 2 James Teh 2013-11-25 02:31:56 UTC
Confirmed with AOO410m1(Build:9750)  -  Rev. 1544479. I've seen both the freeze and exception dialogs here.
Comment 3 James Teh 2014-01-18 11:13:30 UTC
Steve, I just wanted to make sure you hadn't missed this, as it's pretty nasty. :)
Comment 4 Steve Yin 2014-01-18 16:37:19 UTC
(In reply to James Teh from comment #3)
> Steve, I just wanted to make sure you hadn't missed this, as it's pretty
> nasty. :)

Jamie, thanks for your reminder. You may rest assured that I am still working on these critical bugs. :)
Comment 5 Steve Yin 2014-01-24 08:10:50 UTC
Lack of accessibility support for toc link.
Comment 6 Steve Yin 2014-01-27 10:50:57 UTC
A simple mistake, rValue is a reference!
Comment 7 SVN Robot 2014-01-27 10:52:11 UTC
"steve_y" committed SVN revision 1561632 into trunk:
Bug 123745 - [IA2] Eventual crash in Writer documents containing cross-refere...
Comment 8 Steve Yin 2014-01-27 10:52:32 UTC
UT passed.
Comment 9 Michael Curran 2014-01-27 23:41:02 UTC
Verified fixed in svn rev 1551541. Thanks!
Comment 10 Michael Curran 2014-01-27 23:59:58 UTC
(In reply to Michael Curran from comment #9)
Sorry, verified fixed in svn rev 1561756
Comment 11 Steve Yin 2014-01-28 07:52:02 UTC
Thanks for verifying it. Closed.