https://bugs.documentfoundation.org/show_bug.cgi?id=163275

            Bug ID: 163275
           Summary: Typing "-(!1)" into a spreadsheet cell and then
                    clicking no in the dialog about formula error crashes
                    libreoffice
           Product: LibreOffice
           Version: 24.8.2.1 release
          Hardware: ARM
                OS: macOS (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Calc
          Assignee: [email protected]
          Reporter: [email protected]

Description:
In any spreadsheet, type:
-(!1)
and click enter. A dialog appears with the text "LibreOffice Calc found an
error in the formula entered. Do you want to accept the correction proposed
below? =-(1)". Click no. Libreoffice crashes.


Steps to Reproduce:
1. Type "-(!1)" into a calc spreadsheet without the quotes and hit enter
2. In the dialog that appears, click No


Actual Results:
LibreOffice crashes with the following stacktrace:


Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BREAKPOINT (SIGABRT)
Exception Codes:       0x0000000000000001, 0x000000019cc54bb8

Termination Reason:    Namespace SIGNAL, Code 6 Abort trap: 6
Terminating Process:   soffice [1495]

Application Specific Information:
BUG IN LIBDISPATCH: Unexpected event
Abort Cause 7
abort() called


Thread 0 Crashed::  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib                     0x19cdaa600 __pthread_kill + 8
1   libsystem_pthread.dylib                    0x19cde2f70 pthread_kill + 288
2   libsystem_c.dylib                          0x19ccef908 abort + 128
3   libuno_sal.dylib.3                         0x1026b8298 (anonymous
namespace)::signalHandlerFunction(int, __siginfo*, void*) (.cold.1) + 28
4   libuno_sal.dylib.3                         0x1026acd08 (anonymous
namespace)::signalHandlerFunction(int, __siginfo*, void*) + 1056
5   libsystem_platform.dylib                   0x19ce18184 _sigtramp + 56
6   libsclo.dylib                              0x38cb42a14
ScDocFunc::SetEditCell(ScAddress const&, EditTextObject const&, bool) + 196
7   libsclo.dylib                              0x38cf1b06c (anonymous
namespace)::finalizeFormulaProcessing(std::__1::shared_ptr<(anonymous
namespace)::FormulaProcessingContext>) + 1016
8   libsclo.dylib                              0x38cf1b7f8
std::__1::__function::__func<(anonymous
namespace)::runAutoCorrectQueryAsync(std::__1::shared_ptr<(anonymous
namespace)::FormulaProcessingContext>)::$_0, std::__1::allocator<(anonymous
namespace)::runAutoCorrectQueryAsync(std::__1::shared_ptr<(anonymous
namespace)::FormulaProcessingContext>)::$_0>, void (int)>::operator()(int&&) +
212
9   libmergedlo.dylib                          0x10c59a8ec
Dialog::EndDialog(long) + 844
10  libmergedlo.dylib                          0x10c654d98
Control::ImplCallEventListenersAndHandler(VclEventId, std::__1::function<void
()> const&) + 100
11  libmergedlo.dylib                          0x10c6385f8 Button::Click() + 64
12  libmergedlo.dylib                          0x10c63be78
PushButton::Tracking(TrackingEvent const&) + 640
13  libmergedlo.dylib                          0x10c61ae1c
vcl::Window::EndTracking(TrackingEventFlags) + 624
14  libmergedlo.dylib                          0x10c62e89c
ImplHandleMouseEvent(VclPtr<vcl::Window> const&, NotifyEventType, bool, long,
long, unsigned long, unsigned short, MouseEventModifiers) + 3540
15  libmergedlo.dylib                          0x10c630ebc
ImplHandleSalMouseButtonUp(vcl::Window*, SalMouseEvent const*) + 160
16  libmergedlo.dylib                          0x10c630648
ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) + 788
17  libvclplug_osxlo.dylib                     0x106158f5c -[SalFrameView
sendMouseEventToFrame:button:eventtype:] + 456
18  AppKit                                     0x1a1542b50 _routeMouseUpEvent +
132
19  AppKit                                     0x1a0b33058
-[NSWindow(NSEventRouting) _reallySendEvent:isDelayedEvent:] + 404
20  AppKit                                     0x1a0b32cf4
-[NSWindow(NSEventRouting) sendEvent:] + 284
21  AppKit                                     0x1a133059c
-[NSApplication(NSEventRouting) sendEvent:] + 1656
22  libvclplug_osxlo.dylib                     0x10615e5c4 -[VCL_NSApplication
sendEvent:] + 1112
23  libvclplug_osxlo.dylib                     0x10612bbe4
AquaSalInstance::DoYield(bool, bool) + 672
24  libmergedlo.dylib                          0x10c8fd580 Application::Yield()
+ 96
25  libmergedlo.dylib                          0x10c8fd474
Application::Execute() + 176
26  libmergedlo.dylib                          0x10b977d78
desktop::Desktop::Main() + 2660
27  libmergedlo.dylib                          0x10c905108 ImplSVMain() + 392
28  libvclplug_osxlo.dylib                     0x10612b548
AquaSalInstance::handleAppDefinedEvent(NSEvent*) + 96
29  libvclplug_osxlo.dylib                     0x10615e1c8 -[VCL_NSApplication
sendEvent:] + 92
30  AppKit                                     0x1a0f43984 -[NSApplication
_handleEvent:] + 60
31  AppKit                                     0x1a09feba4 -[NSApplication run]
+ 520
32  AppKit                                     0x1a09d544c NSApplicationMain +
888
33  libvclplug_osxlo.dylib                     0x10612d658
AquaSalInstance::SVMainHook(int*) + 152
34  libmergedlo.dylib                          0x10c9050e4 ImplSVMain() + 356
35  libmergedlo.dylib                          0x10b993628 soffice_main + 200
36  soffice                                    0x1025eff6c main + 20
37  dyld                                       0x19ca60274 start + 2840


Expected Results:
Libreoffice should not crash, and the cell should keep the value of -(!1)


Reproducible: Always


User Profile Reset: No

Additional Info:
Version: 24.8.2.1 (AARCH64) / LibreOffice Community
Build ID: 0f794b6e29741098670a3b95d60478a65d05ef13
CPU threads: 10; OS: macOS 15.0; UI render: Skia/Metal; VCL: osx
Locale: en-GB (en_NO.UTF-8); UI: en-US
Calc: threaded

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to