Apache OpenOffice (AOO) Bugzilla – Issue 67940
Crash when typing inside a section surrounding a nested table
Last modified: 2013-08-07 14:43:17 UTC
See the attached test case. Open it and try to write something inside the section, below the table. On my computer it always crashes. It works fine with 2.0.2.
Created attachment 38132 [details] Crash testcase
I checked with "2.0.3RC5 German version WIN XP: [680m5(Build9036)]" and can confirm the reported problem, pls. see attached screenshot! I can also confirm that no crash happens using "2.0.2 German version WIN XP: [680m5(Build9011)]" I created a crash report. The ID of the error report is r6s5c6.
Created attachment 38133 [details] Screenshot showing "dangerous area"
ja: confirmed for src680m178 and src680m179 ja->rainerbielefeld: are you still using src680m118 ? That's rather old...
MRU->OD (cc FME): easy to reproduce. Insert a table, in this insert a section. Into this section insert another table. Now place cursor right below inner table -> crash Please have a look, if you have enough resources to fix for OO 2.0.4.
Investigation reveals, that the changes made in cws redline01 at method <SwTable::GetTblBox( UNLONG nSttIdx )> causes the crash. According to discussion with FME, FME will take over responsibility for this issue. FME will clarify with AMA, how to solve this problem
FME: Looks like we should jump to the end of the inner table in SwTable::GetTblBox() instead of breaking.
We were able to reproduce this issue on OOo 2.0.3 with the following configurations separately: On Intel(R) Pentium(R) 4 CPU 2.80GHz with 1GB RAM running - 1. Linux 2.6.9-42.0.3.EL.CSE.smp #1 SMP i686 i686 i386 GNU/Linux 2. MS Windows XP Pro Ver. 2002 (SP2) Actually, we can use a table with just one cell to reproduce this issue. We used the following steps: 1. Start OOo 2. Select File->Next->Text Document to create a new text document. Actually, you can instead choose HTML Document, XML Form Document or Master Document. 3. Select Table->Insert->Table... and the Inset Table dailog shows. 4. Set Columns and Rows to one respectively and press OK to insert the table of one cell. 5. Click inside the one cell to place cursor. 6. Select Insert->Section... to insert a section into the cell. 7. Click inside the Section to to place cursor. 8. Now, repeat steps 3 & 4 to insert a table of one cell inside the section 9. Now click inside the section and right below the inner table. 10. Now OOo pops up the 'OpenOffice.org Document Recovery' dialog informing the user that OOo has crashed. We performed the follow up tests to check if this issue was specific to Text documents only. We peformed the above steps for an HTML Document, XML Form Document, and Master Document. We were able to reproduce the crash on these document types too. We peformed another follow-up test related to the above task. The steps are as listed below: 1. Peform the above steps 1-7 in order .... .... 8. Click inside the section so that the cursor is at the left corner of the cell. 9. Enter one or more characters(any type) inside the section at the cursor. 10. Now perform step 8 from the earlier steps. A table with one cell inside the section can be seen. But now the inner table is on a line below the characters entered previous. 11. Now click inside the section and right below the inner table. It will be noted that OOo DOES NOT crash. However, if the characters are deleted and step 11 above peformed, OOo will crash. We successfully tested this on tables of any size and sections inserted into any cell. We can report the same results as above. This is a serious bug since OOo can be crashed.
Fixed in cws swqbf93, swtable rev. 1.3.34.2
FME: Ready for QA.
.
Verified fix in CWS swqbf93.
Checked fix in680m214.
As repoter, confirming this is fixed in OOo 2.3 and 2.3.1. Thank you to all who contributed for fixing this bug.