https://bugs.documentfoundation.org/show_bug.cgi?id=106456
--- Comment #7 from Aron Budea <ba...@caesar.elte.hu> ---
The direct cause of the crash is that in convertToTokenArray(...), nRow is -1,
which is passed in through pSrcDoc->FillMatrix(...) all the way to the mdds
function.
The place of the first FillMatrix(...) call:
http://opengrok.libreoffice.org/xref/core/sc/source/ui/docshell/externalrefmgr.cxx#1615
And this is where -1 becomes 4294967295 in an SCROW -> StoreT::size_type type
conversion:
http://opengrok.libreoffice.org/xref/core/sc/source/core/data/column2.cxx#2365
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
