[New LWP 3762466] [New LWP 3762703] [New LWP 3762706] [New LWP 3763172] [New LWP 3799825] [New LWP 3763175] [New LWP 3801862] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f1f2208cebc in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f1f18691e00 (LWP 3762466))] Thread 7 (Thread 0x7f1ef1bfe6c0 (LWP 3801862)): #0 0x00007f1f22087f16 in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f1f2208abaf in pthread_cond_clockwait () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f1f223ce37e in std::__condvar::wait_until(std::mutex&, int, timespec&) (__abs_time=..., __clock=1, __m=, this=0x7f1ee88f8d10) at /usr/include/c++/12/bits/std_mutex.h:169 __s = {__d = {__r = 38062031}} __ts = {tv_sec = 38062031, tv_nsec = 768795054} #3 std::condition_variable::__wait_until_impl > >(std::unique_lock&, std::chrono::time_point > > const&) (this=this@entry=0x7f1ee88f8d10, __lock=..., __atime=...) at /usr/include/c++/12/condition_variable:200 __s = {__d = {__r = 38062031}} __ts = {tv_sec = 38062031, tv_nsec = 768795054} #4 0x00007f1f223cd4dd in std::condition_variable::wait_until > >(std::unique_lock&, std::chrono::time_point > > const&) (__atime=..., __lock=..., this=0x7f1ee88f8d10) at /usr/include/c++/12/condition_variable:108 #5 std::condition_variable::wait_until >, osl_waitCondition(oslCondition, const TimeValue*):: >(std::unique_lock &, const std::chrono::time_point > > &, struct {...}) (this=this@entry=0x7f1ee88f8d10, __lock=..., __atime=..., __p=...) at /usr/include/c++/12/condition_variable:151 #6 0x00007f1f223cd550 in std::condition_variable::wait_for, osl_waitCondition(oslCondition, const TimeValue*):: >(std::unique_lock &, const std::chrono::duration > &, struct {...}) (this=0x7f1ee88f8d10, __lock=..., __rtime=..., __p=__p@entry=...) at /usr/include/c++/12/condition_variable:174 #7 0x00007f1f223cddbd in osl_waitCondition(oslCondition, TimeValue const*) (Condition=, pTimeout=0x7f1ef1bfc730) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:119 duration = {__r = 2000000000} g = {_M_device = 0x7f1ee88f8d40, _M_owns = true} pCond = 0x7f1ee88f8d10 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #8 0x00007f1f219b7aff in osl::Condition::wait(TimeValue const*) (pTimeout=0x7f1ef1bfc730, this=0x7f1ef1bfc6a0) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 waitingThread = {condition = {condition = 0x7f1ee88f8d10}, thread = rtl::Reference to 0x7f1efc00e3f0} #9 osl::Condition::wait(TimeValue const&) (timeout=..., this=0x7f1ef1bfc6a0) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x7f1ee88f8d10}, thread = rtl::Reference to 0x7f1efc00e3f0} #10 cppu_threadpool::ThreadPool::waitInPool(rtl::Reference const&) (this=this@entry=0x7f1f08001200, pThread=rtl::Reference to 0x7f1efc00e3f0) at /home/buildslave/source/libo-core/cppu/source/threadpool/threadpool.cxx:122 waitingThread = {condition = {condition = 0x7f1ee88f8d10}, thread = rtl::Reference to 0x7f1efc00e3f0} #11 0x00007f1f219b0a4f in cppu_threadpool::ORequestThread::run() (this=0x7f1efc00e3f0) at /home/buildslave/source/libo-core/cppu/source/threadpool/thread.cxx:185 #12 0x00007f1f219b0f03 in osl::threadFunc(void*) (param=0x7f1efc00e400) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f1efc00e400 #13 0x00007f1f223f1511 in osl_thread_start_Impl(void*) (pData=0x7f1efc016890) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f1efc016890 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #14 0x00007f1f2208b1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #15 0x00007f1f2210b85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f1f1186b6c0 (LWP 3763175)): #0 0x00007f1f2210c8e4 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f1f223e0845 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x7f1f08000f20, pBuffer=pBuffer@entry=0x7f1ee5161338, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:444 nRet = 0 #2 0x00007f1f223e0afc in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x7f1f08000f20, pBuffer=0x7f1ee5161338, n=) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:514 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f1f12fb2875 in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x7f1f08001550) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x7f1f08001520, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f1f12f4dd1f in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f1f08001548, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:70 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f1f12f4fd42 in binaryurp::Reader::execute() (this=0x7f1f08006b00) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:105 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x7f1f08000fa0, state_ = @0x7f1f08006b48, buffer_ = uno::Sequence of length 32539 = {-9 '\367', 53 '5', 25 '\031', 29 '\035', 10 '\n', 1 '\001', -67 '\275', -27 '\345', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 115 's', 0 '\000', 0 '\000', 0 '\000', 33 '!', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -112 '\220', 0 '\000', 0 '\000', 0 '\000', 25 '\031', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -47 '\321', 6 '\006', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -128 '\200', -122 '\206', 64 '@', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -128 '\200', -122 '\206', 64 '@', 3 '\003', 0 '\000', 0 '\000', 0 '\000', 8 '\b', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -128 '\200', -122 '\206', 64 '@', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -128 '\200', -122 '\206', 64 '@', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -128 '\200', -122 '\206', 64 '@', 3 '\003', 0 '\000', 0 '\000', 0 '\000', 8 '\b', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -128 '\200', -106 '\226', 64 '@', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'...}, data_ = 0x561314d9cd10 "", end_ = 0x561314d9cd10 ""} header = {bridge_ = rtl::Reference to 0x7f1f08000fa0, state_ = @0x7f1f08006b48, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x7f1ee5161340 " ", end_ = 0x7f1ee5161340 " "} size = con = uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f1f08001548 #7 0x00007f1f21e350d1 in salhelper::Thread::run() (this=0x7f1f08006b00) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7f1f08006b00}, m_bDismissed = false} #8 0x00007f1f21e35379 in osl::threadFunc(void*) (param=0x7f1f08006b10) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f1f08006b10 #9 0x00007f1f223f1511 in osl_thread_start_Impl(void*) (pData=0x7f1f08008d60) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f1f08008d60 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f1f2208b1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f1f2210b85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f1ef13fd6c0 (LWP 3799825)): #0 0x00007f1f2208812b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f1f2208e4aa in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f1f223dee97 in osl_acquireMutex(oslMutex) (pMutex=0x561312bca7a0) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f1f1c77ab93 in osl::Mutex::acquire() (this=0x561312bcb888) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x561312bcb750 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x561312bcb880, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:328 pInst = 0x561312bcb750 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f1f20ad934a in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f1f20ad9387 in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7f1ef13fa590) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1340 #8 0x00007f1f20bda816 in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x7f1ee9645020) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:839 g = {> = {pT = 0x561312bcb880}, } #9 0x00007f1f20bbddd0 in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f1ef13fa9e0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1595 xWindow = uno::Reference to (com::sun::star::uno::XInterface *) 0x7f1f3f800000 bHidden = bMinimized = pFrameName = {, true>> = {_M_cur = 0x1d}, } aReadLock = {pT = 0x7f1ef13fa9e0} aRequest = bThrow = #10 0x00007f1f20bbe379 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f1ef13fa9e0, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:532 g = {pT = 0x7f1ef13fa9e0} #11 0x00007f1f20bc2faf in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f1ef13fa9e0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1179 xTargetFrameProps = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f1ee96450e0 bResult = aWriteLock = {pT = 0x7f1ef13fa9e0} sTarget = "_blank" xTargetFrame = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f1ee9645090 xTargetLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f1ee96450b8 bHidden = bMinimized = false bPreview = lDescriptor = uno::Sequence of length 12 = {{Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x5613158ba1d8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f1efc0088f8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f1efc0088f8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x7f1ee401d2e8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_OOXML"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AbortOnLoadFailure", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "Office Open XML Text"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx" xLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f1ee4013ca0 xAsyncLoader = empty uno::Reference xSyncLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f1ee4013cc8 #12 0x00007f1f20bc328a in framework::LoadEnv::start() (this=this@entry=0x7f1ef13fa9e0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:412 bStarted = #13 0x00007f1f20bc397b in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f1ef13fa9e0, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx", lMediaDescriptor=uno::Sequence of length 3 = {...}, xBaseFrame=uno::Reference to (framework::Desktop *) 0x561312e7b6b8, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:308 g = {pT = 0x7f1ef13fa9e0} aRealURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx" xParser = uno::Reference to ((anonymous namespace)::URLTransformer *) 0x7f1ee403b518 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007f1f20bc3b84 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x561312e7b6c8, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x561312bca148, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx", sTarget="_blank", nSearchFlags=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:168 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7f1ee403c600}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x561312bca148, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x561312e7b6b8, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x7f1ee9645090, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 12 elements}, static PROP_ABORTED = {pData = 0x7f1f20dce390