[New LWP 621169] [New LWP 621347] [New LWP 621642] [New LWP 661514] [New LWP 621647] [New LWP 621352] [New LWP 623536] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007ff30e379eec in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7ff305021e00 (LWP 621169))] Thread 7 (Thread 0x7ff2deffe6c0 (LWP 623536)): #0 0x00007ff30e37512b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007ff30e37b4da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007ff30e6e1657 in osl_acquireMutex(oslMutex) (pMutex=0x55f1a7d37130) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007ff30863ed21 in osl::Mutex::acquire() (this=0x55f1a7d37438) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x55f1a7d37300 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x55f1a7d37430, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x55f1a7d37300 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007ff30d19d42c in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007ff30d19d5ed in osl::Guard::Guard(comphelper::SolarMutex*) (this=, pT_=) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:137 #7 0x00007ff30d19cc83 in drawinglayer::primitive2d::BufferedDecompositionFlusher::run() (this=0x7ff2e06a8dc0) at /home/buildslave/source/libo-core/drawinglayer/source/primitive2d/BufferedDecompositionFlusher.cxx:155 aGuard = {pT = 0x55f1a7d37430} aNow = {__d = {__r = 57047906168509596}} aRemoved1 = std::__debug::vector of length 0, capacity 0 aRemoved2 = std::__debug::vector of length 0, capacity 0 #8 0x00007ff30d19d265 in osl::threadFunc(void*) (param=0x7ff2e06a8dc0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7ff2e06a8dc0 #9 0x00007ff30e6f3f19 in osl_thread_start_Impl(void*) (pData=0x7ff2e06809c0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7ff2e06809c0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007ff30e3781f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007ff30e3f889c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7ff2fe9656c0 (LWP 621352)): #0 0x00007ff30e3f96df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007ff30e6e2c7e in osl_acceptPipe(oslPipe) (pPipe=0x7ff2f4001570) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:395 s = pAcceptedPipe = socket = 12 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x7ff2f4001570, _M_owns = false} flags = #2 0x00007ff2fe9ffbb1 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x7ff2fe9634f8, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007ff2fe9ff8eb in io_acceptor::PipeAcceptor::accept() (this=0x7ff2f4000d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x7ff2f4001570} pConn = rtl::Reference to 0x7ff2f4009530 status = #4 0x00007ff2fea055b8 in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x55f1a8cf7ab0, sConnectionDescription="pipe,name=pytest98abd154-6589-11f0-b67c-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:198 guard = {m_pFlag = 0x55f1a8cf7b28} r = empty uno::Reference #5 0x00007ff2fea50a6d in desktop::Acceptor::run() (this=this@entry=0x55f1a8cf86e0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:110 g = {_M_device = 0x55f1a8cf8718, _M_owns = true} rConnection = empty uno::Reference aDescription = "pipe,name=pytest98abd154-6589-11f0-b67c-98f2b32c495c,uniqueValue=140681452459344" rInstanceProvider = uno::Reference to (desktop::AccInstanceProvider *) 0x7ff2f4000d38 #6 0x00007ff2fea50f19 in desktop::offacc_workerfunc(void*) (acc=0x55f1a8cf86e0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:46 #7 0x00007ff30e6f3f19 in osl_thread_start_Impl(void*) (pData=0x55f1a8cfdd50) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x55f1a8cfdd50 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007ff30e3781f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #9 0x00007ff30e3f889c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7ff2fcaa96c0 (LWP 621647)): #0 0x00007ff30e3f9924 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007ff30e6e3155 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x7ff2f4000f00, pBuffer=pBuffer@entry=0x7ff2c054bdf8, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:460 socket = 13 nRet = #2 0x00007ff30e6e343a in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x7ff2f4000f00, pBuffer=0x7ff2c054bdf8, n=) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:534 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007ff2fe9ff683 in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x7ff2f4001550) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x7ff2f4001520, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007ff2fe99760b in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7ff2f4001548, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:70 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007ff2fe9995ae in binaryurp::Reader::execute() (this=0x7ff2f4006a80) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:105 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x7ff2f4000fb0, state_ = @0x7ff2f4006ac8, buffer_ = uno::Sequence of length 32759 = {-85 '\253', -38 '\332', -76 '\264', 117 'u', -128 '\200', -50 '\316', -82 '\256', -112 '\220', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 115 's', 0 '\000', 0 '\000', 0 '\000', 33 '!', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 87 'W', 71 'G', 27 '\033', -73 '\267', -9 '\367', 127 '\177', 0 '\000', 0 '\000', -85 '\253', -38 '\332', -76 '\264', 117 'u', -128 '\200', -50 '\316', -82 '\256', -112 '\220', -112 '\220', 89 'Y', -37 '\333', -87 '\251', -15 '\361', 85 'U', 0 '\000', 0 '\000', 33 '!', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -48 '\320', -84 '\254', 18 '\022', 9 '\t', -13 '\363', 127 '\177', 0 '\000', 0 '\000', -64 '\300', 51 '3', 65 'A', -83 '\255', -15 '\361', 85 'U', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -79 '\261', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', -103 '\231', 0 '\000', 0 '\000', 0 '\000', 83 'S', 119 'w', 79 'O', 98 'b', 106 'j', 101 'e', 99 'c', 116 't', 70 'F', 111 'o', 114 'r', 109 'm', 97 'a', 116 't', 116 't', 101 'e', 114 'r', 84 'T', 101 'e', 120 'x', 116 't', 70 'F', 114 'r', 97 'a', 109 'm', 101 'e', 58 ':', 58 ':', 68 'D', 111 'o', 70 'F', 111 'o', 114 'r', 109 'm', 97 'a', 116 't', 79 'O', 98 'b', 106 'j', 40 '(', 83 'S', 119 'w', 65 'A', 110 'n', 99 'c', 104 'h', 111 'o', 114 'r', 101 'e', 100 'd', 79 'O', 98 'b', 106 'j', 101 'e', 99 'c', 116 't', 38 '&', 44 ',', 32 ' ', 98 'b', 111 'o', 111 'o', 108 'l', 41 ')', 32 ' ', 97 'a', 116 't', 32 ' ', 47 '/', 104 'h', 111 'o', 109 'm', 101 'e', 47 '/', 98 'b', 117 'u', 105 'i', 108 'l', 100 'd', 115 's', 108 'l', 97 'a', 118 'v', 101 'e', 47 '/', 115 's', 111 'o', 117 'u', 114 'r', 99 'c', 101 'e', 47 '/', 108 'l', 105 'i', 98 'b', 111 'o', 45 '-', 99 'c', 111 'o', 114 'r', 101 'e', 47 '/', 115 's', 119 'w'...}, data_ = 0x55f1a9d57590 "", end_ = 0x55f1a9d57590 ""} header = {bridge_ = rtl::Reference to 0x7ff2f4000fb0, state_ = @0x7ff2f4006ac8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x7ff2c054be00 "", end_ = 0x7ff2c054be00 ""} size = con = uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7ff2f4001548 #7 0x00007ff30dd226b1 in salhelper::Thread::run() (this=0x7ff2f4006a80) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7ff2f4006a80}, m_bDismissed = false} #8 0x00007ff30dd22959 in osl::threadFunc(void*) (param=0x7ff2f4006a90) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7ff2f4006a90 #9 0x00007ff30e6f3f19 in osl_thread_start_Impl(void*) (pData=0x7ff2f4008f70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7ff2f4008f70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007ff30e3781f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007ff30e3f889c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7ff2cf7fe6c0 (LWP 661514)): #0 0x00007ff30e37512b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007ff30e37b4da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007ff30e6e1657 in osl_acquireMutex(oslMutex) (pMutex=0x55f1a7d37130) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007ff30863ed21 in osl::Mutex::acquire() (this=0x55f1a7d37438) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x55f1a7d37300 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x55f1a7d37430, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x55f1a7d37300 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007ff30cd20320 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007ff30cd2035d in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7ff2cf7fb570) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1340 #8 0x00007ff30ce237fc in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x7ff2c0110570) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:840 g = {> = {pT = 0x55f1a7d37430}, } #9 0x00007ff30ce06be0 in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7ff2cf7fb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1600 bMinimized = bStartPres = pFrameName = xWindow = uno::Reference to (com::sun::star::uno::XInterface *) 0x1d bHidden = pWindow = {m_rInnerRef = empty rtl::Reference} aReadLock = {pT = 0x7ff2cf7fb9f0} aRequest = Python Exception : bThrow = #10 0x00007ff30ce071b1 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7ff2cf7fb9f0, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:535 g = {pT = 0x7ff2cf7fb9f0} #11 0x00007ff30ce0c04c in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7ff2cf7fb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1183 xTargetFrameProps = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7ff2c0110630 bResult = aWriteLock = {pT = 0x7ff2cf7fb9f0} sTarget = "_blank" xTargetFrame = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7ff2c01105e0 xTargetLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7ff2c0110608 bHidden = bMinimized = false bPreview = false bStartPres = lDescriptor = uno::Sequence of length 12 = {{Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x7ff2c004cf68}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7ff2ec00b918}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7ff2ec00b918}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x7ff2c0068a18}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_MS_Word_2007"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AbortOnLoadFailure", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "MS Word 2007 XML"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx" xLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7ff2c034db20 xAsyncLoader = empty uno::Reference xSyncLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7ff2c034db48 #12 0x00007ff30ce0c328 in framework::LoadEnv::start() (this=this@entry=0x7ff2cf7fb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:415 bStarted = #13 0x00007ff30ce0ca31 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7ff2cf7fb9f0, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx", lMediaDescriptor=uno::Sequence of length 3 = {...}, xBaseFrame=uno::Reference to (framework::Desktop *) 0x55f1a7ff1988, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:311 g = {pT = 0x7ff2cf7fb9f0} aRealURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx" xParser = uno::Reference to ((anonymous namespace)::URLTransformer *) 0x7ff2c0025838 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007ff30ce0cc7b in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x55f1a7ff1998, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x55f1a7d33a48, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:167 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7ff2c00e5ff0}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x55f1a7d33a48, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x55f1a7ff1988, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x7ff2c01105e0, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 12 elements}, static PROP_ABORTED = {pData = 0x7ff30d01c710