To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=111886
User mst changed the following:
What |Old value |New value
================================================================================
CC|'' |'mst,od'
--------------------------------------------------------------------------------
------- Additional comments from m...@openoffice.org Tue Jun 29 10:16:37 +0000
2010 -------
hi cmc,
i'm afraid your patch doesn't help fix the actual problem.
i'm using DEV300_m80 here, and it crashes in a different place, due to
dereferencing a SwFrm::pDrawObjs with value 0x333.... (deleted SwFrm).
the first invalid access from valgrind is this:
==20984== Invalid read of size 1
==20984== at 0x1AC25D52: SwFrm::IsTxtFrm() const (frame.hxx:1243)
==20984== by 0x1ADCDFEE: SwObjectFormatter::_FormatObjsAtFrm(SwTxtFrm*)
(objectformatter.cxx:445)
==20984== by 0x1ADD033B: SwObjectFormatterTxtFrm::DoFormatObjs()
(objectformattertxtfrm.cxx:367)
==20984== by 0x1ADCE51F: SwObjectFormatter::FormatObjsAtFrm(SwFrm&, SwPageFrm
const&, SwLayAction*) (objectformatter.cxx:217)
==20984== by 0x1AE180F1: lcl_CalcLowers(SwLayoutFrm*, SwLayoutFrm const*,
long, bool) (tabfrm.cxx:1602)
==20984== by 0x1AE18426: lcl_RecalcRow(SwRowFrm&, long) (tabfrm.cxx:1785)
==20984== by 0x1AE1998C: lcl_RecalcTable(SwTabFrm&, SwLayoutFrm*,
SwLayNotify&) (tabfrm.cxx:1851)
==20984== by 0x1AE1C828: SwTabFrm::MakeAll() (tabfrm.cxx:2319)
==20984== by 0x1AD72E3F: SwFrm::PrepareMake() (calcmove.cxx:391)
==20984== by 0x1ACADBA7: SwFrm::Calc() const (frame.hxx:1058)
==20984== by 0x1AD729EE: SwFrm::PrepareMake() (calcmove.cxx:292)
==20984== by 0x1ACADBA7: SwFrm::Calc() const (frame.hxx:1058)
==20984== Address 0x1164e0c9 is 73 bytes inside a block of size 124 free'd
==20984== at 0x47ED851: operator delete(void*) (vg_replace_malloc.c:387)
==20984== by 0x1AEC9183: SwTxtFrm::~SwTxtFrm() (txtfrm.cxx:369)
==20984== by 0x1AE5A22B: SwTxtFrm::JoinFrm() (frmform.cxx:695)
==20984== by 0x1AE5BACC: SwTxtFrm::_AdjustFollow(SwTxtFormatter&, unsigned
short, unsigned short, unsigned char) (frmform.cxx:584)
==20984== by 0x1AE5C336: SwTxtFrm::FormatAdjust(SwTxtFormatter&,
WidowsAndOrphans&, unsigned short, unsigned char) (frmform.cxx:1184)
==20984== by 0x1AE5D1B2: SwTxtFrm::_Format(SwTxtFormatter&, SwTxtFormatInfo&,
unsigned char) (frmform.cxx:1665)
==20984== by 0x1AE5D69D: SwTxtFrm::_Format(SwParaPortion*) (frmform.cxx:1792)
==20984== by 0x1AE5F286: SwTxtFrm::Format(SwBorderAttrs const*)
(frmform.cxx:1993)
==20984== by 0x1AE6A640: SwTxtInfo::CtorInitTxtInfo(SwTxtFrm*)
(inftxt.cxx:225)
==20984== by 0x1AE6FAED: SwTxtSizeInfo::CtorInitTxtSizeInfo(SwTxtFrm*,
SwFont*, unsigned short, unsigned short) (inftxt.cxx:300)
==20984== by 0x1AE5825B: SwTxtSizeInfo::SwTxtSizeInfo(SwTxtFrm*, SwFont*,
unsigned short, unsigned short) (inftxt.hxx:239)
==20984== by 0x1AE54FF5: SwTxtFrm::GetTopOfLine(long&, SwPosition const&)
const (frmcrsr.cxx:520)
---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org
For additional commands, e-mail: issues-h...@sw.openoffice.org
---------------------------------------------------------------------
To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org
For additional commands, e-mail: allbugs-h...@openoffice.org
