[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 Commit Notification changed: What|Removed |Added Whiteboard||target:5.3.0 -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 --- Comment #9 from Commit Notification --- Michael Meeks committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=b8fa4d1b2d135cabc9eb5162ca0c5af649f1cdaf tdf#103632 - sc: tolerate OOB sort fields from UNO API. It will be available in 5.3.0. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback. -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 --- Comment #10 from Commit Notification --- Michael Meeks committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=99316fc0c830ae6c827d9b7f56bf057ff7731ed5 tdf#103632 - sc: OOB sort fields unit test. It will be available in 5.3.0. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback. -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 Michael Meeks changed: What|Removed |Added Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #8 from Michael Meeks --- Pushed fix + test. -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 --- Comment #7 from Michael Meeks --- Knocked up a unit test for this too as https://gerrit.libreoffice.org/30761 - not a perfect fix - but rather a silly macro bug =) -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 --- Comment #6 from Michael Meeks --- Pushed something to at least slightly sanitize bogus OOB sorting data that happens to overcome this problem, I suspect though that it is still possible to use a range very much larger than the column storage provides: https://gerrit.libreoffice.org/30576 tdf#103632 - sc: tolerate OOB sort fields from UNO API. -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632
--- Comment #5 from Michael Meeks ---
A bogus field/column offset is passed in:
/usr/include/c++/4.8/debug/vector:353:error: attempt to subscript container
with out-of-bounds index 12303, but container only holds 1024 elements.
(gdb) p nMaxSorts.maKeyState[0]
Attempt to extract a component of a value that is not a structure.
(gdb) p aSortParam.maKeyState[0]
[Thread 0x7fffb49a6700 (LWP 5820) exited]
$5 = (__gnu_cxx::__alloc_traits >::value_type &)
@0x2c451520: {bDoSort = true, nField = 4, bAscending = false}
(gdb) p aSortParam.maKeyState[1]
$6 = (__gnu_cxx::__alloc_traits >::value_type &)
@0x2c45152c: {bDoSort = true, nField = 2, bAscending = true}
(gdb) p aSortParam.maKeyState[2]
[Thread 0x7fff9ae9c700 (LWP 5823) exited]
$7 = (__gnu_cxx::__alloc_traits >::value_type &)
@0x2c451538: {bDoSort = true, nField = 12303, bAscending = true}
It seems the field to sort by is completely bogus. I'm amazed this is a
regression.
--
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 Julien Nabet changed: What|Removed |Added Component|LibreOffice |Calc -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 Julien Nabet changed: What|Removed |Added CC||serval2...@yahoo.fr --- Comment #4 from Julien Nabet --- Created attachment 128452 --> https://bugs.documentfoundation.org/attachment.cgi?id=128452&action=edit bt with symbols On pc Debian x86-64 with master sources updated today, I could reproduce the crash However, I had another bt that the one already attached. -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 Xisco Faulí changed: What|Removed |Added Keywords||bibisectRequest, ||haveBacktrace, regression Status|UNCONFIRMED |NEW CC||xiscofa...@libreoffice.org Version|5.3.0.0.alpha1 |5.2.0.0.alpha1 Ever confirmed|0 |1 Severity|normal |critical --- Comment #3 from Xisco Faulí --- Confirmed in Version: 5.3.0.0.alpha1+ Build ID: 64d3bd38c9242c1cc114f6e68bf13475ef679b73 CPU Threads: 4; OS Version: Linux 4.2; UI Render: default; VCL: gtk2; Layout Engine: old; Locale: ca-ES (ca_ES.UTF-8); Calc: group and Version: 5.2.0.0.alpha1+ Build ID: 5b168b3fa568e48e795234dc5fa454bf24c9805e CPU Threads: 4; OS Version: Linux 4.2; UI Render: default; Locale: ca-ES (ca_ES.UTF-8) but not in Version: 5.0.0.0.alpha1+ Build ID: 0db96caf0fcce09b87621c11b584a6d81cc7df86 Locale: ca-ES (ca_ES.UTF-8) -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 --- Comment #2 from Jim Avera --- Created attachment 128417 --> https://bugs.documentfoundation.org/attachment.cgi?id=128417&action=edit gdb stacktrace at segfault -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 103632] Segfault during sort in ScColumn::GetCellValue
https://bugs.documentfoundation.org/show_bug.cgi?id=103632 --- Comment #1 from Jim Avera --- Created attachment 128416 --> https://bugs.documentfoundation.org/attachment.cgi?id=128416&action=edit test case .ods -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
