Apache OpenOffice (AOO) Bugzilla – Issue 10672
Crash on use of drop cap function configured into toolbar
Last modified: 2013-08-07 14:43:23 UTC
Writer core down when I uses function bar Drop Caps.
Reassigned to ES
ES->PB: - add the drop caps function to a tool bar. - execute it - click ok -> crash SVL644MI! SfxItemPool::Put(class SfxPoolItem const &,unsigned short) + 120 bytes SVL644MI! SfxItemSet::SfxItemSet(class SfxItemSet const &) + 1190 bytes SFX644MI! SfxSingleTabDialog::OKHdl_Impl(class Button *) + 58 bytes SFX644MI! SfxSingleTabDialog::LinkStubOKHdl_Impl(void *,void *) + 15 bytes VCL644MI! Button::Click(void) + 90 bytes VCL644MI! OKButton::Click(void) + 324 bytes VCL644MI! PushButton::Tracking(class TrackingEvent const &) + 284 bytes VCL644MI! Window::EndTracking(unsigned short) + 596 bytes VCL644MI! ImplHandleMouseEvent(class Window *,unsigned short,unsigned char,long,long,unsigned long,unsigned short,unsigned short) + 5507 bytes VCL644MI! ImplWindowFrameProc(void *,class SalFrame *,unsigned short,void const *) + 370 bytes VCL644MI! SalFrameWndProc(struct HWND__ *,unsigned int,unsigned int,long,int &) + 4560 bytes VCL644MI! SalFrameWndProc(struct HWND__ *,unsigned int,unsigned int,long,int &) + 513 bytes VCL644MI! SalFrameWndProcW(struct HWND__ *,unsigned int,unsigned int,long) + 38 bytes USER32! 77d43a5f() USER32! 77d43b2e() USER32! 77d43d6a() USER32! 77d43dd0() VCL644MI! ImplSalYield(unsigned char) + 191 bytes VCL644MI! ImplSalYield(unsigned char) + 79 bytes VCL644MI! SalInstance::Yield(unsigned char) + 169 bytes VCL644MI! Application::Yield(void) + 95 bytes VCL644MI! Dialog::Execute(void) + 1213 bytes SW644MI! SwTextShell::ExecParaAttrArgs(class SfxRequest &) + 595 bytes SW644MI! SfxStubSwTextShellExecParaAttrArgs(class SfxShell *,class SfxRequest &) + 14 bytes SFX644MI! SfxDispatcher::Call_Impl(class SfxShell &,class SfxSlot const &,class SfxRequest &,unsigned char) + 1269 bytes SFX644MI! SfxDispatcher::_Execute(class SfxShell &,class SfxSlot const &,class SfxRequest &,unsigned short) + 832 bytes SFX644MI! SfxBindings::Execute_Impl(class SfxRequest &,class SfxSlot const *,class SfxShell *) + 1652 bytes SFX644MI! SfxBindings::Execute_Impl(unsigned short,class SfxPoolItem const * *,unsigned short,unsigned short,class SfxPoolItem const * *) + 1416 bytes SFX644MI! SfxBindings::Execute(unsigned short,class SfxPoolItem const * *,unsigned short,unsigned short,class SfxPoolItem const * *) + 166 bytes SFX644MI! SfxToolBoxControl::Select(unsigned char) + 138 bytes SFX644MI! SfxToolBoxControl::Select(unsigned short) + 51 bytes SFX644MI! SfxToolBoxManager::Select(class ToolBox *) + 122 bytes SFX644MI! SfxToolBoxManager::LinkStubSelect(void *,void *) + 15 bytes VCL644MI! ToolBox::Select(void) + 60 bytes VCL644MI! ToolBox::ImplHandleMouseButtonUp(class MouseEvent const &,unsigned char) + 505 bytes VCL644MI! ToolBox::Tracking(class TrackingEvent const &) + 69 bytes VCL644MI! Window::EndTracking(unsigned short) + 596 bytes VCL644MI! ImplHandleMouseEvent(class Window *,unsigned short,unsigned char,long,long,unsigned long,unsigned short,unsigned short) + 5507 bytes VCL644MI! ImplWindowFrameProc(void *,class SalFrame *,unsigned short,void const *) + 370 bytes VCL644MI! SalFrameWndProc(struct HWND__ *,unsigned int,unsigned int,long,int &) + 4560 bytes VCL644MI! SalFrameWndProc(struct HWND__ *,unsigned int,unsigned int,long,int &) + 513 bytes VCL644MI! SalFrameWndProcW(struct HWND__ *,unsigned int,unsigned int,long) + 38 bytes USER32! 77d43a5f() USER32! 77d43b2e() USER32! 77d43d6a() USER32! 77d43dd0() VCL644MI! ImplSalYield(unsigned char) + 191 bytes VCL644MI! ImplSalYield(unsigned char) + 79 bytes VCL644MI! SalInstance::Yield(unsigned char) + 169 bytes VCL644MI! Application::Yield(void) + 95 bytes VCL644MI! Application::Execute(void) + 47 bytes SOFFICE! desktop::Desktop::Main(void) + 7791 bytes VCL644MI! SVMain(void) + 251 bytes SOFFICE! 0112d338() SOFFICE! WinMainCRTStartup + 308 bytes KERNEL32! 77e7eb69() Should that go to you? Note: was already there in a 569 ;-|
I think it's a writer issue, because on open the dialog you will see some assertions, which discover that the writer feeds the dialog with a corrupt ItemSet (wrong range).
Crashes should have highest priority, It set it to P1.
Fixed in cws os4
Title changed cws os4 is available on so-cwsserv02 for wntmsci9 and unxsols3.pro
Fixed
verified
Ok integrated in 644m4s2