Apache OpenOffice (AOO) Bugzilla – Issue 91683
crash on delete cell with spell checker window opened
Last modified: 2013-08-07 15:15:24 UTC
To reproduce the bug: 0) Open OOoCalc 1) write in A1 cell the following: house inv. 2) Tools -> Spellcheck ... This open the spell checker window The word inv. must be viewed as wrong by spell checker 3) select on A1 Cell (not the spell checker window) the string "inv." (do not close the spell checker window) 4) press Del button (the button used to cancel the selected text) Del button is this: http://en.wikipedia.org/wiki/Delete_key Someone tell me that he have the crash with the backspace button and not with the Del one 5) OOo crash I have asked some people to check if they can reproduce this bug and: * a lot of people with GNU/Linux and Windows can reproduce this bugs * some people with GNU/Linux and Windows cannot reproduce this bug More than ten people can reproduce the bug and less then five people cannot. I have noted that if a person can reproduce the bug, then he can reproduce it on each computer he have. But if a person cannot reproduce the bug, then he cannot reproduce it on each computer he own. Probably the bug depends on some options. I have try to start OOo with a new user (default option), selecting or deselecting options, using only English dictionary (normally I have also Italian dictionary and Italian surname dictionary), etc ... but I have had always a crash Ciao Davide
there did you get your Installation set from ?
This is reproducible with OOo 2.4.1 (English and Italian) and OOo 3.0-beta2 (Italian). Always the official version provided by SUN.
reproduced in DEV300_m24
crashreport for SO8PU11 is rqr3q3
Spreadsheet only problem => reassigned to er ReportID: rv2y4uc
The crashdebug job I meanwhile started returned the following result: calling r:\windbg\kd.exe -srcpath o:\OOH680\src.m17;o:\OOH680\wntmsci10.pro\inc.m17 -y symsrv*sosymsrv.dll*C:\WINDOWS\TEMP\crashdata-3312-1216198754.pathes -z C:\WINDOWS\TEMP\crashdata-3312-1216198754_user.dmp -cf C:\WINDOWS\TEMP\crashdata-3312-1216198754.starter | grep32 -d10000 -i "ChildEBP RetAddr" ChildEBP RetAddr 00ebf388 5dddee01 svx680mi!EditView::GetEditEngine( void ) [o:\ooh680\src.m17\svx\source\editeng\editview.cxx @ 206] 00ebf454 5dddfb4c sc680mi!ScEditShell::Execute(SfxRequest* rReq = 00eb1651 )+0x42 [o:\ooh680\src.m17\sc\source\ui\view\editsh.cxx @ 191] 00ebf460 613cbb39 sc680mi!SfxStubScEditShellExecute(SfxShell* pShell = 069e47c8 , SfxRequest* rReq = 00ebf894 )+0xe [o:\ooh680\src.m17\sc\wntmsci10.pro\inc\scslots.hxx @ 3408] 00ebf52c 613cd2bc sfx680mi!SfxDispatcher::Call_Impl(SfxShell* rShell = 069e47c8 , SfxSlot* rSlot = 5e292ae8 , SfxRequest* rReq = 00ebf894 , unsigned char bRecord = 0x1 '')+0x3c5 [o:\ooh680\src.m17\sfx2\source\control\dispatch.cxx @ 338] 00ebf584 613c35c9 sfx680mi!SfxDispatcher::_Execute(SfxShell* rShell = 069e47c8 , SfxSlot* rSlot = 5e292ae8 , SfxRequest* rReq = 00ebf894 , unsigned short eCallMode = 4)+0x1a5 [o:\ooh680\src.m17\sfx2\source\control\dispatch.cxx @ 1106] 00ebf640 61467a0d sfx680mi!SfxBindings::Execute_Impl(SfxRequest* aReq = 00ebf894 , SfxSlot* pSlot = 5e292ae8 , SfxShell* pShell = 069e47c8 )+0x419 [o:\ooh680\src.m17\sfx2\source\control\bindings.cxx @ 1731] 00ebf9b0 61465beb sfx680mi!SfxDispatchController_Impl::dispatch(com::sun::star::util::URL* aURL = 069e8fa0 , com::sun::star::uno::Sequence* aArgs = 00ebfa4c , com::sun::star::uno::Reference* rListener = 00ebf9f4 )+0xbc0 [o:\ooh680\src.m17\sfx2\source\control\unoctitm.cxx @ 832] 00ebfa1c 609240b3 sfx680mi!SfxOfficeDispatch::dispatch(com::sun::star::util::URL* aURL = 069e8fa0 , com::sun::star::uno::Sequence* aArgs = 00ebfa4c )+0x107 [o:\ooh680\src.m17\sfx2\source\control\unoctitm.cxx @ 454] 00ebfa60 60924295 svt680mi!svt::AsyncAccelExec::impl_ts_asyncCallback(void* __formal = 00000000 )+0x3c [o:\ooh680\src.m17\svtools\source\misc\acceleratorexecute.cxx @ 471] 00ebfa6c 5f7a5975 svt680mi!svt::AsyncAccelExec::LinkStubimpl_ts_asyncCallback(void* pThis = 069e8f90 , void* pCaller = 00000000 )+0xe [o:\ooh680\src.m17\svtools\source\misc\acceleratorexecute.cxx @ 464] 00ebfa7c 5f0c70e5 tl680mi!Link::Call(void* pCaller = 00000000 )+0x11 [o:\ooh680\src.m17\tools\inc\tools\link.hxx @ 158] The code of that function looks like EditEngine* EditView::GetEditEngine() const { DBG_CHKTHIS( EditView, 0 ); DBG_CHKOBJ( pImpEditView->pEditEngine, EditEngine, 0 ); return pImpEditView->pEditEngine; } Thus I guess either the current EditEngine object is dead or the pImpEditView pointer is.
Created attachment 55183 [details] patch curing the symptom and preventing a crash, see comments inside
In cws late30bf01: sc/source/ui/view/editsh.cxx 1.34.118.1
Reassigning to QA for verification. Note: to reproduce the old crash behavior after spell-check select the "inv." text portion in the cell without clicking somewhere else before and no double click and no F2 prior to selecting, then press Del (or any other edit action). Btw, crash was in since at least OOo2.1 (which was the earliest release I tried).
verified in internal build cws_late30bf01 Remark: This fix disables the possibility to edit the cellcontent directly in the cell => followup issue #i91914#
closed because fix available in builds OOO300_m1