Bug 70617

Summary: SEGV on Mac in COMMAND_WHEEL "Mobile / touch scrolling section" branch with null pHScrl
Product: LibreOffice Reporter: Stephan Bergmann <sbergman>
Component: UIAssignee: Not Assigned <libreoffice-bugs>
Status: RESOLVED INVALID QA Contact:
Severity: normal    
Priority: medium CC: ptyl, tml
Version: 4.2.0.0.alpha0+ Master   
Hardware: Other   
OS: Mac OS X (All)   
Whiteboard:
i915 platform: i915 features:
Attachments: dialog screenshot

Description Stephan Bergmann 2013-10-18 13:15:39 UTC
Created attachment 87823 [details]
dialog screenshot

With local build of current master on Mac OS X 10.8, with a "Download and Installation" dialog open that has a text box with just a vertical scrollbar (see attached screenshot.png), I somehow managed to get into the branch labeled "Mobile / touch scrolling section" (introduced by <http://cgit.freedesktop.org/libreoffice/core/commit/?id=4e7495ac2cb6b015ad492def45fd24f4ba0f54f8> "Fix for iOS scroll by pixels, and pinch to zoom") in the COMMAND_WHEEL case of Window::HandleScrollCommand (vcl/source/window/window2.cxx) with pHScrl = 0, which causes a SEGV:

> #0  ScrollBar::GetVisibleSize (this=0x0) at scrbar.hxx:133
> #1  0x0489e13e in Window::HandleScrollCommand (this=0x6dc5c730, rCmd=@0xbff441a0, pHScrl=0x0, pVScrl=0x6dc5e170) at core/vcl/source/window/window2.cxx:1217
> #2  0x0437f9af in ImpVclMEdit::HandleCommand (this=0x6dc5c6b0, rCEvt=@0xbff441a0) at core/vcl/source/edit/vclmedit.cxx:702
> #3  0x043835ff in VclMultiLineEdit::Notify (this=0xb01025f8, rNEvt=@0xbff43f90) at core/vcl/source/edit/vclmedit.cxx:1411
> #4  0x048c1233 in Window::Notify (this=0x6dc5c730, rNEvt=@0xbff43f90) at core/vcl/source/window/window.cxx:5270
> #5  0x048bfc84 in Window::Command (this=0x6dc5c730, rCEvt=@0xbff441a0) at core/vcl/source/window/window.cxx:4960
> #6  0x04380b57 in TextWindow::Command (this=0x6dc5c730, rCEvt=@0xbff441a0) at core/vcl/source/edit/vclmedit.cxx:899
> #7  0x048e4305 in ImplCallWheelCommand (pWindow=0x6dc5c730, rPos=@0xbff44318, pWheelData=0xbff44358) at core/vcl/source/window/winproc.cxx:1420
> #8  0x048e1f82 in ImplHandleWheelEvent (pWindow=0xb0101f88, rEvt=@0xbff44748, scaleDirectly=false) at core/vcl/source/window/winproc.cxx:1496
> #9  0x048dfa3f in ImplWindowFrameProc (pWindow=0xb0101f88, nEvent=21, pEvent=0xbff44748) at core/vcl/source/window/winproc.cxx:2502
> #10 0x04903176 in SalFrame::CallCallback (this=0x6dc5abe0, nEvent=21, pEvent=0xbff44748) at salframe.hxx:243
> #11 0x0497cab5 in -[SalFrameView scrollWheel:] (self=0x6dc59910, _cmd=0x99fd6771, pEvent=0x81229800) at core/vcl/aqua/source/window/salframeview.mm:913
> #12 0x99841af1 in -[NSWindow sendEvent:] ()
> #13 0x9983c90f in -[NSApplication sendEvent:] ()
> #14 0x0496515b in -[VCL_NSApplication sendEvent:] (self=0x7c62f900, _cmd=0x99fbcdb1, pEvent=0x81229800) at core/vcl/aqua/source/app/vclnsapp.mm:200
> #15 0x049007c0 in AquaSalInstance::Yield (this=0x7c22af60, bWait=true, bHandleAllCurrentEvents=false) at core/vcl/aqua/source/app/salinst.cxx:702
> #16 0x042a46d2 in ImplYield (i_bWait=true, i_bAllEvents=false) at core/vcl/source/app/svapp.cxx:364
> #17 0x0429ff4a in Application::Yield () at core/vcl/source/app/svapp.cxx:396
> #18 0x0429ff0b in Application::Execute () at core/vcl/source/app/svapp.cxx:345
> #19 0x001c56ed in desktop::Desktop::Main (this=0xbff45b38) at core/desktop/source/app/app.cxx:1670
> #20 0x042b034b in ImplSVMain () at core/vcl/source/app/svmain.cxx:162
> #21 0x048ffd43 in AquaSalInstance::handleAppDefinedEvent (pEvent=0x7c22b2a0) at core/vcl/aqua/source/app/salinst.cxx:528
> #22 0x0496496f in -[VCL_NSApplication sendEvent:] (self=0x7c62f900, _cmd=0x99fbcdb1, pEvent=0x7c22b2a0) at core/vcl/aqua/source/app/vclnsapp.mm:64
> #23 0x9975662c in -[NSApplication run] ()
> #24 0x996f95f6 in NSApplicationMain ()
> #25 0x048feab3 in ImplSVMainHook (pnInit=0xbff45ad0) at core/vcl/aqua/source/app/salinst.cxx:221
> #26 0x042b1a8e in SVMain () at core/vcl/source/app/svmain.cxx:195
> #27 0x00228978 in soffice_main () at core/desktop/source/app/sofficemain.cxx:85
> #28 0x000bbf5b in sal_main () at core/desktop/source/app/main.c:48
> #29 0x000bbf40 in main (argc=1, argv=0xbff45be4) at core/desktop/source/app/main.c:47
Comment 1 foss 2013-11-22 19:53:31 UTC
Stephan does this persist with the latest nightly? http://dev-builds.libreoffice.org/daily/master/MacOSX-x86@49-TDF/current/

Also can you provide any steps to reproduce this issue?
Comment 2 QA Administrators 2014-06-01 21:30:11 UTC
Dear Bug Submitter,

This bug has been in NEEDINFO status with no change for at least 6 months. Please provide the requested information as soon as possible and mark the bug as UNCONFIRMED. Due to regular bug tracker maintenance, if the bug is still in NEEDINFO status with no change in 30 days the QA team will close the bug as INVALID due to lack of needed information.

For more information about our NEEDINFO policy please read the wiki located here: 
https://wiki.documentfoundation.org/QA/FDO/NEEDINFO

If you have already provided the requested information, please mark the bug as UNCONFIRMED so that the QA team knows that the bug is ready to be confirmed.


Thank you for helping us make LibreOffice even better for everyone!


Warm Regards,
QA Team
Comment 3 QA Administrators 2014-07-08 17:17:55 UTC
Dear Bug Submitter,

Please read this message in its entirety before proceeding.

Your bug report is being closed as INVALID due to inactivity and a lack of information which is needed in order to accurately reproduce and confirm the problem. We encourage you to retest your bug against the latest release. If the issue is still present in the latest stable release, we need the following information (please ignore any that you've already provided):

a) Provide details of your system including your operating system and the latest version of LibreOffice that you have confirmed the bug to be present

b) Provide easy to reproduce steps – the simpler the better

c) Provide any test case(s) which will help us confirm the problem

d) Provide screenshots of the problem if you think it might help

e) Read all comments and provide any requested information

Once all of this is done, please set the bug back to UNCONFIRMED and we will attempt to reproduce the issue. 
Please do not:
a) respond via email 
b) update the version field in the bug or any of the other details on the top section of FDO

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.