Issue 123745 - [IA2] Eventual crash in Writer documents containing cross-references
Summary: [IA2] Eventual crash in Writer documents containing cross-references
Status: CLOSED FIXED
Alias: None
Product: General
Classification: Code
Component: accessibility (show other issues)
Version: 4.1.0-dev
Hardware: All Windows, all
: P3 Normal (vote)
Target Milestone: 4.1.0
Assignee: AOO issues mailing list
QA Contact:
URL:
Keywords:
Depends on:
Blocks: winA11y
  Show dependency tree
 
Reported: 2013-11-25 00:53 UTC by Michael Curran
Modified: 2014-02-10 09:37 UTC (History)
3 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments
A writer document containing 3 headings and two paragraphs. The last paragraph contains a crosss-reference to the second heading. (9.17 KB, application/vnd.oasis.opendocument.text)
2013-11-25 00:53 UTC, Michael Curran
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description Michael Curran 2013-11-25 00:53:24 UTC
Created attachment 81988 [details]
A writer document containing 3 headings and two paragraphs. The last paragraph contains a crosss-reference to the second heading.

Open Office Writer becomes unstable and eventually crashes when arrowing through a document containing a cross-reference, while running NVDA or AccProbe testing tool with focus tracking enabled.
Steps to reproduce:
1. Open the attached testcase in Open Office Writer.
2. Start NVDA screen reader; or
3. Start accProbe, anble focus tracking, and choose ti view all available IA2 properties.
4. Move back to Open Office Writer and arrow down to the line below "test 2" which contains a cross-reference to the "test 1" heading.
5. Move back and forth over the line with right and left arrow keys for a while. Possibly constantly wrapping off the edge of this line onto the next (blank) line and back again may also cause the issue.
6. Open Office Writer will either:
 * Close  automatically with no message; or
 * Freeze, such that the caret no longer moves; or
 * Report an unknown exception to the user and then close.

Debugging with windbg certainly detects exceptions pretty quickly, though with out debug symbols the symbols it does show are rather meaningless.

Some extra notes:
 * Sometimes before the crash, random data starts getting exposed by IAccessibleTextOne example is in the testcase, a 'A' is reported to exist at the end of the document. Another example, though not covered by the test case, is other text such as a random language name appearing where normal text should be.
 * Sometimes the title and message of the unknown exception crash dialog contains garbage text.
Comment 1 Michael Curran 2013-11-25 00:57:06 UTC
This bug is certainly not new to this code. I'm pretty sure we experienced very similar in IBM Lotus Symphony.
Comment 2 James Teh 2013-11-25 02:31:56 UTC
Confirmed with AOO410m1(Build:9750)  -  Rev. 1544479. I've seen both the freeze and exception dialogs here.
Comment 3 James Teh 2014-01-18 11:13:30 UTC
Steve, I just wanted to make sure you hadn't missed this, as it's pretty nasty. :)
Comment 4 Steve Yin 2014-01-18 16:37:19 UTC
(In reply to James Teh from comment #3)
> Steve, I just wanted to make sure you hadn't missed this, as it's pretty
> nasty. :)

Jamie, thanks for your reminder. You may rest assured that I am still working on these critical bugs. :)
Comment 5 Steve Yin 2014-01-24 08:10:50 UTC
Lack of accessibility support for toc link.
Comment 6 Steve Yin 2014-01-27 10:50:57 UTC
A simple mistake, rValue is a reference!
Comment 7 SVN Robot 2014-01-27 10:52:11 UTC
"steve_y" committed SVN revision 1561632 into trunk:
Bug 123745 - [IA2] Eventual crash in Writer documents containing cross-refere...
Comment 8 Steve Yin 2014-01-27 10:52:32 UTC
UT passed.
Comment 9 Michael Curran 2014-01-27 23:41:02 UTC
Verified fixed in svn rev 1551541. Thanks!
Comment 10 Michael Curran 2014-01-27 23:59:58 UTC
(In reply to Michael Curran from comment #9)
Sorry, verified fixed in svn rev 1561756
Comment 11 Steve Yin 2014-01-28 07:52:02 UTC
Thanks for verifying it. Closed.