[libreoffice/f20] Resolves: fdo#1167250 Crash in clipboard code

[sbergmann]

commit dbdd811a4642528ab6ebe988e4d162fe8d9d7577
Author: Stephan Bergmann <sbergman at redhat.com>
Date:   Mon Nov 24 14:37:30 2014 +0100

    Resolves: fdo#1167250 Crash in clipboard code

 ...0-Avoid-X11Clipboard-already-being-destro.patch |   99 ++++++++++++++++++++
 libreoffice.spec                                   |    6 +-
 2 files changed, 104 insertions(+), 1 deletions(-)
---
diff --git a/0001-rhbz-1167250-Avoid-X11Clipboard-already-being-destro.patch b/0001-rhbz-1167250-Avoid-X11Clipboard-already-being-destro.patch
new file mode 100644
index 0000000..efec642
--- /dev/null
+++ b/0001-rhbz-1167250-Avoid-X11Clipboard-already-being-destro.patch
@@ -0,0 +1,99 @@
+From b604509093dc70914e3ad60d178098dafd26b021 Mon Sep 17 00:00:00 2001
+From: Stephan Bergmann <sbergman at redhat.com>
+Date: Mon, 24 Nov 2014 14:00:30 +0100
+Subject: [PATCH] rhbz#1167250: Avoid X11Clipboard already being destroyed in
+ constructor
+
+...via SelectionManager::run's aKeep acquring and releasing getReference()
+
+Change-Id: I18696d30c41ca9ae101261668cbf54cb0a6c45fc
+(cherry picked from commit 94d2de0ba1f010be7acf0d00ce5b2ed4ed2b895b)
+---
+ vcl/unx/generic/dtrans/X11_clipboard.cxx | 15 +++++++++++----
+ vcl/unx/generic/dtrans/X11_clipboard.hxx |  6 +++++-
+ vcl/unx/generic/dtrans/X11_service.cxx   |  4 ++--
+ 3 files changed, 18 insertions(+), 7 deletions(-)
+
+diff --git a/vcl/unx/generic/dtrans/X11_clipboard.cxx b/vcl/unx/generic/dtrans/X11_clipboard.cxx
+index 10863b2..6280526 100644
+--- a/vcl/unx/generic/dtrans/X11_clipboard.cxx
++++ b/vcl/unx/generic/dtrans/X11_clipboard.cxx
+@@ -30,6 +30,7 @@
+ #include <uno/mapping.hxx>
+ #include <cppuhelper/factory.hxx>
+ #include <cppuhelper/supportsservice.hxx>
++#include <rtl/ref.hxx>
+ #include <rtl/tencinfo.h>
+ 
+ #if OSL_DEBUG_LEVEL > 1
+@@ -59,16 +60,22 @@ X11Clipboard::X11Clipboard( SelectionManager& rManager, Atom aSelection ) :
+ #if OSL_DEBUG_LEVEL > 1
+     fprintf( stderr, "creating instance of X11Clipboard (this=%p)\n", this );
+ #endif
++}
+ 
+-    if( m_aSelection != None )
++css::uno::Reference<css::datatransfer::clipboard::XClipboard>
++X11Clipboard::create( SelectionManager& rManager, Atom aSelection )
++{
++    rtl::Reference<X11Clipboard> cb(new X11Clipboard(rManager, aSelection));
++    if( aSelection != None )
+     {
+-        m_rSelectionManager.registerHandler( m_aSelection, *this );
++        rManager.registerHandler( aSelection, *cb.get() );
+     }
+     else
+     {
+-        m_rSelectionManager.registerHandler( XA_PRIMARY, *this );
+-        m_rSelectionManager.registerHandler( m_rSelectionManager.getAtom( OUString("CLIPBOARD") ), *this );
++        rManager.registerHandler( XA_PRIMARY, *cb.get() );
++        rManager.registerHandler( rManager.getAtom( OUString("CLIPBOARD") ), *cb.get() );
+     }
++    return cb.get();
+ }
+ 
+ // ------------------------------------------------------------------------
+diff --git a/vcl/unx/generic/dtrans/X11_clipboard.hxx b/vcl/unx/generic/dtrans/X11_clipboard.hxx
+index eaff171..a18e279 100644
+--- a/vcl/unx/generic/dtrans/X11_clipboard.hxx
++++ b/vcl/unx/generic/dtrans/X11_clipboard.hxx
+@@ -48,6 +48,8 @@ namespace x11 {
+         ::std::list< com::sun::star::uno::Reference< ::com::sun::star::datatransfer::clipboard::XClipboardListener > > m_aListeners;
+         Atom                                                    m_aSelection;
+ 
++        X11Clipboard( SelectionManager& rManager, Atom aSelection );
++
+     protected:
+ 
+ 
+@@ -58,7 +60,9 @@ namespace x11 {
+ 
+     public:
+ 
+-        X11Clipboard( SelectionManager& rManager, Atom aSelection );
++        static css::uno::Reference<css::datatransfer::clipboard::XClipboard>
++        create( SelectionManager& rManager, Atom aSelection );
++
+         virtual ~X11Clipboard();
+ 
+         static X11Clipboard* get( const OUString& rDisplayName, Atom aSelection );
+diff --git a/vcl/unx/generic/dtrans/X11_service.cxx b/vcl/unx/generic/dtrans/X11_service.cxx
+index 644e88d..545e66c 100644
+--- a/vcl/unx/generic/dtrans/X11_service.cxx
++++ b/vcl/unx/generic/dtrans/X11_service.cxx
+@@ -80,10 +80,10 @@ css::uno::Reference< XInterface > X11SalInstance::CreateClipboard( const Sequenc
+     if( it != m_aInstances.end() )
+         return it->second;
+ 
+-    X11Clipboard* pClipboard = new X11Clipboard( rManager, nSelection );
++    css::uno::Reference<css::datatransfer::clipboard::XClipboard> pClipboard = X11Clipboard::create( rManager, nSelection );
+     m_aInstances[ nSelection ] = pClipboard;
+ 
+-    return static_cast<OWeakObject*>(pClipboard);
++    return pClipboard;
+ }
+ 
+ // ------------------------------------------------------------------------
+-- 
+1.9.3
+
diff --git a/libreoffice.spec b/libreoffice.spec
index 66bcc00..f219f09 100644
--- a/libreoffice.spec
+++ b/libreoffice.spec
@@ -36,7 +36,7 @@ Summary:        Free Software Productivity Suite
 Name:           libreoffice
 Epoch:          1
 Version:        %{libo_version}.2
-Release:        9%{?libo_prerelease}%{?dist}
+Release:        10%{?libo_prerelease}%{?dist}
 License:        (MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and Artistic and MPLv2.0
 Group:          Applications/Productivity
 URL:            http://www.libreoffice.org/
@@ -325,6 +325,7 @@ Patch69: 0001-table-layout-cache-returns-wrong-rectangle.patch
 Patch70: 0001-impress-tables-are-not-interactively-growing.patch
 Patch71: 0001-Resolves-fdo-86449-backport-rtf-fixes.patch
 Patch72: 0002-Resolves-fdo-86451-guard-all-the-tops-post-pop.patch
+Patch73: 0001-rhbz-1167250-Avoid-X11Clipboard-already-being-destro.patch
 
 %define instdir %{_libdir}
 %define baseinstdir %{instdir}/libreoffice
@@ -2266,6 +2267,9 @@ update-desktop-database %{_datadir}/applications &> /dev/null || :
 %endif
 
 %changelog
+* Mon Nov 24 2014 Stephan Bergmann <sbergman at redhat.com>  - 1:4.2.7.2.-10-UNBUILT
+- Resolves: fdo#1167250 Crash in clipboard code
+
 * Wed Nov 19 2014 Caolán McNamara <caolanm at redhat.com> - 1:4.2.7.2-9
 - Resolves: rhbz#1165740 arbitrarily backport some rtf crash fixes