Gnumeric crashes when formatting cells with text that already has formatting

[Jon Tai]

Binary package hint: gnumeric

Steps to reproduce:
1. Open gnumeric or use File => New to get a blank spreadsheet.
2. In one of the cells, type "ab".
3. Highlight "b" in the equation bar at the top and press CTRL+B to make just the "b" bold.
4. Press Enter to stop editing that cell.
5. Right click the cell with "ab" in it and select Format Cells in the menu.
6. gnumeric crashes.

When I initially hit this bug, Ubuntu's crash reporting tool came up and asked if I wanted to report the crash, but I wanted to get a simpler test case, so I tried it a few more times. Unfortunately, after a few crashes, the crash reporting tool no longer appears for me. Hopefully my steps to reproduce are easy/clear enough that someone else can provide a stack trace.

[Jon Tai (jontai)]

I forgot to mention that I'm running Gutsy + latest updates, gnumeric is Version: 1.7.11-1ubuntu2.

[Pedro Villavicencio (pedro)]

Thanks for your report.

[Pedro Villavicencio (pedro)]

trace as follow

The program is running. Exit anyway? (y or n)
Thread 1 (Thread -1231054656 (LWP 8628)):
#0 find_builtin (fmtstr=0x85e51e0 "@[bold=1:1:2]", page=11, def=0) at ../../../goffice/gtk/go-format-sel.c:551
 list_elem = <value optimized out>
 candidates = (const char * const *) 0x0
#1 0xb7b0395d in study_format (gfs=0x824f730) at ../../../goffice/gtk/go-format-sel.c:1139
 elem = <value optimized out>
 fmt = (const GOFormat *) 0x85e52e0
 str = 0x85e51e0 "@[bold=1:1:2]"
 newstr = 0x85e52e0 "\005\004"
 typ = GO_FORMAT_MARKUP
#2 0xb7b04a00 in go_format_sel_set_style_format (gfs=0x824f730, style_format=0x85e52e0) at ../../../goffice/gtk/go-format-sel.c:1543
 __PRETTY_FUNCTION__ = "go_format_sel_set_style_format"
#3 0xb7ddd9b1 in fmt_dialog_impl (state=0x866eb00, pageno=FD_CURRENT) at ../../../src/dialogs/dialog-cell-format.c:477
 i = <value optimized out>
 selected = <value optimized out>
 name = <value optimized out>
 has_back = <value optimized out>
 default_border_color = <value optimized out>
 default_border_style = <value optimized out>
 tmp = <value optimized out>
 dialog = (GtkWidget *) 0x8621028
 line_pattern_buttons = {{name = 0xb7f2230b "line_pattern_none", pattern = GNM_STYLE_BORDER_NONE}, {name = 0xb7ec93b8 "line_pattern_medium_dash_dot_dot",
    pattern = GNM_STYLE_BORDER_MEDIUM_DASH_DOT_DOT}, {name = 0xb7ec8cdc "line_pattern_hair", pattern = GNM_STYLE_BORDER_HAIR}, {
    name = 0xb7ec8d38 "line_pattern_slant", pattern = GNM_STYLE_BORDER_SLANTED_DASH_DOT}, {name = 0xb7ec8cb4 "line_pattern_dotted",
    pattern = GNM_STYLE_BORDER_DOTTED}, {name = 0xb7ec8d1b "line_pattern_medium_dash_dot", pattern = GNM_STYLE_BORDER_MEDIUM_DASH_DOT}, {
    name = 0xb7ec8c86 "line_pattern_dash_dot_dot", pattern = GNM_STYLE_BORDER_DASH_DOT_DOT}, {name = 0xb7ec8d02 "line_pattern_medium_dash",
    pattern = GNM_STYLE_BORDER_MEDIUM_DASH}, {name = 0xb7ec8c70 "line_pattern_dash_dot", pattern = GNM_STYLE_BORDER_DASH_DOT}, {
    name = 0xb7ec8cee "line_pattern_medium", pattern = GNM_STYLE_BORDER_MEDIUM}, {name = 0xb7ec8ca0 "line_pattern_dashed", pattern = GNM_STYLE_BORDER_DASHED}, {
    name = 0xb7ec8d4b "line_pattern_thick", pattern = GNM_STYLE_BORDER_THICK}, {name = 0xb7ec8d5e "line_pattern_thin", pattern = GNM_STYLE_BORDER_THIN}, {
    name = 0xb7ec8cc8 "line_pattern_double", pattern = GNM_STYLE_BORDER_DOUBLE}, {name = 0x0, pattern = GNM_STYLE_BORDER_NONE}}
 pattern_buttons = {0xb7ec8be1 "gp_solid", 0xb7ec8b5e "gp_75grey", 0xb7ec8b49 "gp_50grey", 0xb7ec8b3f "gp_25grey", 0xb7ec8b34 "gp_125grey",
  0xb7ec8b53 "gp_625grey", 0xb7ec8b9c "gp_horiz", 0xb7ec8c68 "gp_vert", 0xb7ec8b72 "gp_diag", 0xb7ec8bb6 "gp_rev_diag", 0xb7ec8b7a "gp_diag_cross",
  0xb7ec8bf4 "gp_thick_diag_cross", 0xb7ec8c28 "gp_thin_horiz", 0xb7ec8c5b "gp_thin_vert", 0xb7ec8c4a "gp_thin_rev_diag", 0xb7ec8c08 "gp_thin_diag",
  0xb7ec8c36 "gp_thin_horiz_cross", 0xb7ec8c15 "gp_thin_diag_cross", 0xb7ec8bd1 "gp_small_circle", 0xb7ec8bc2 "gp_semi_circle", 0xb7ec8bea "gp_thatch",
  0xb7ec8ba5 "gp_large_circles", 0xb7ec8b68 "gp_bricks", 0xb7ec8b88 "gp_foreground_solid", 0x0}
 border_buttons = {0xb7ec8df5 "top_border", 0xb7ec8d70 "bottom_border", 0xb7ec8db3 "left_border", 0xb7ec8de8 "r...

[Pedro Villavicencio (pedro)]

Thanks for your bug report. This bug has been reported to the developers of the software. You can track it and make comments here: http://bugzilla.gnome.org/show_bug.cgi?id=480971

[Pedro Villavicencio (pedro)]

Fixed upstream, thanks for your report.

[Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount)]

Setting the package to goffice as this is a bug in goffice.

[Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount)]

Patch to process SRU once this gets into hardy :

http://svn.gnome.org/viewvc/goffice/trunk/goffice/utils/formats.c?r1=1755&r2=1897

[Greg A (etulfetulf)]

Marking as fixed, unable to reproduce in Ubuntu Intrepid (and marked fixed upstream).