[New LWP 20437] [New LWP 1315] [New LWP 12945] [New LWP 20971] [New LWP 20975] [New LWP 20679] [New LWP 20677] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f9412c3b7bb in raise () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f9403b91040 (LWP 20437))] Thread 7 (Thread 0x7f940275f700 (LWP 20677)): #0 0x00007f9412cfe437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9412feeddd in osl_acceptPipe(oslPipe) (pPipe=0x557e28e613d0) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007f9412e5bd4e in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x557e28e61350) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #3 0x00007f9412e5bd4e in desktop::PipeIpcThread::execute() (this=0x557e28e61320) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1133 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007f9410cf6608 in salhelper::Thread::run() (this=0x557e28e61320) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007f9410cf6e95 in osl::threadFunc(void*) (param=0x557e28e61330) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x557e28e61330 #6 0x00007f941300f357 in osl_thread_start_Impl(void*) (pData=0x557e28e627e0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x557e28e627e0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f941269afa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007f9412cfd4cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f9401e70700 (LWP 20679)): #0 0x00007f9412cfe437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9412feeddd in osl_acceptPipe(oslPipe) (pPipe=pPipe@entry=0x557e28ffab00) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007f9401efddb7 in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x7f9401e6e110) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 pipe = {m_handle = 0x557e28ffab00} pConn = rtl::Reference to 0x557e2901de70 status = #3 0x00007f9401efddb7 in io_acceptor::PipeAcceptor::accept() (this=0x557e28ff72b0) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x557e28ffab00} pConn = rtl::Reference to 0x557e2901de70 status = #4 0x00007f9401f05eec in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x557e28e6d520, sConnectionDescription="pipe,name=pytest8ae9701c-0679-11ec-bb94-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:199 guard = {m_pFlag = 0x557e28e6d578} r = empty uno::Reference #5 0x00007f9402f7f06e in desktop::Acceptor::run() (this=this@entry=0x557e28e6c6f0) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 aDescription = "pipe,name=pytest8ae9701c-0679-11ec-bb94-98f2b32c495c,uniqueValue=94000342118576" rInstanceProvider = uno::Reference to (class desktop::AccInstanceProvider *) 0x557e29016828 rConnection = empty uno::Reference #6 0x00007f9402f80479 in desktop::offacc_workerfunc(void*) (acc=0x557e28e6c6f0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:44 #7 0x00007f941300f357 in osl_thread_start_Impl(void*) (pData=0x557e28e6f530) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x557e28e6f530 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f941269afa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007f9412cfd4cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f93ffff2700 (LWP 20975)): #0 0x00007f9412cfe686 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9412fee4d8 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x557e28ff61a0, pBuffer=pBuffer@entry=0x557e2a1a35f8, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:439 nRet = 0 #2 0x00007f9412feed00 in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x557e28ff61a0, pBuffer=0x557e2a1a35f8, n=n@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:509 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f9401efd7fa in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x557e290030b0) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 0x00007f9401efd7fa in io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x557e29003080, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f9401eb3792 in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x557e290030a8, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f9401eb7e45 in binaryurp::Reader::execute() (this=0x557e2901a000) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:104 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x557e28ffbe90, state_ = @0x557e2901a048, buffer_ = uno::Sequence of length 1717986918 = {102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', -16 '\360', -94 '\242', 46 '.', 45 '-', 126 '~', 85 'U', 0 '\000', 0 '\000', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 61 '=', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 7 '\a', 49 '1', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 8 '\b', 98 'b', -127 '\201', 17 '\021', -108 '\224', 127 '\177', 0 '\000', 0 '\000', 3 '\003', 0 '\000', 0 '\000', 0 '\000', -59 '\305', 15 '\017', 0 '\000', 102 'f', -20 '\354', -1 '\377', 100 'd', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 51 '3', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -52 '\314', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 15 '\017', 49 '1', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 112 'p', 109 'm', 99 'c', 99 'c', 2 '\002', 0 '\000', 0 '\000', 0 '\000', -1 '\377', -1 '\377', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 0 '\000', 0 '\000', 6 '\006', 0 '\000', 0 '\000', 0 '\000', 110 'n', 114 'r', 101 'e', 107 'k', -1 '\377', -1 '\377', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 0 '\000', 0 '\000', 6 '\006', 0 '\000', 0 '\000', 0 '\000', 97 'a', 103 'g', 105 'i', 108 'l', 4 '\004', 0 '\000', 0 '\000', 0 '\000'...}, data_ = 0x557e2afbfa65 "", end_ = 0x557e2afbfa65 ""} header = {bridge_ = rtl::Reference to 0x557e28ffbe90, state_ = @0x557e2901a048, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x557e2a1a3600 "\372\377\377", end_ = 0x557e2a1a3600 "\372\377\377"} size = con = uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x557e290030a8 #7 0x00007f9410cf6608 in salhelper::Thread::run() (this=0x557e2901a000) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #8 0x00007f9410cf6e95 in osl::threadFunc(void*) (param=0x557e2901a010) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x557e2901a010 #9 0x00007f941300f357 in osl_thread_start_Impl(void*) (pData=0x557e290197d0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x557e290197d0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f941269afa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #11 0x00007f9412cfd4cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7f94007f3700 (LWP 20971)): #0 0x00007f94126a100c in pthread_cond_wait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f9412fc5126 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x557e28ffc180, pTimeout=pTimeout@entry=0x0) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:228 pCond = 0x557e28ffc180 nRet = __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007f9401ec1997 in osl::Condition::wait(TimeValue const*) (pTimeout=0x0, this=0x557e2901ba40) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 item = {request = true, tid = {_pSequence = 0x557e2901c840}, oid = "55cd1660bcc0;uno[0];4c23;7b449e3a31b4b4584a8a7a4b16ca54", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x557e2a23dc70}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #3 0x00007f9401ec1997 in binaryurp::Writer::execute() (this=0x557e2901b860) at /home/buildslave/source/libo-core/binaryurp/source/writer.cxx:150 item = {request = true, tid = {_pSequence = 0x557e2901c840}, oid = "55cd1660bcc0;uno[0];4c23;7b449e3a31b4b4584a8a7a4b16ca54", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x557e2a23dc70}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #4 0x00007f9410cf6608 in salhelper::Thread::run() (this=0x557e2901b860) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007f9410cf6e95 in osl::threadFunc(void*) (param=0x557e2901b870) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x557e2901b870 #6 0x00007f941300f357 in osl_thread_start_Impl(void*) (pData=0x557e29019740) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x557e29019740 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f941269afa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007f9412cfd4cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7f93eb022700 (LWP 12945)): #0 0x00007f94126a135b in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f9412fc50d8 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x557e2a3469d0, pTimeout=pTimeout@entry=0x7f93eb020500) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:203 ret = tp = {tv_sec = 1629988307, tv_usec = 308398} to = {tv_sec = 1629988309, tv_nsec = 308398000} pCond = 0x557e2a3469d0 nRet = 0 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007f9411a35ad5 in osl::Condition::wait(TimeValue const*) (pTimeout=0x7f93eb020500, this=0x7f93eb020310) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x557e2a3469d0}, thread = rtl::Reference to 0x557e2af9f970} #3 0x00007f9411a35ad5 in osl::Condition::wait(TimeValue const&) (timeout=..., this=0x7f93eb020310) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x557e2a3469d0}, thread = rtl::Reference to 0x557e2af9f970} #4 0x00007f9411a35ad5 in cppu_threadpool::ThreadPool::waitInPool(rtl::Reference const&) (this=0x557e2901bad0, pThread=rtl::Reference to 0x557e2af9f970) at /home/buildslave/source/libo-core/cppu/source/threadpool/threadpool.cxx:122 waitingThread = {condition = {condition = 0x557e2a3469d0}, thread = rtl::Reference to 0x557e2af9f970} #5 0x00007f9411a29272 in cppu_threadpool::ORequestThread::run() (this=0x557e2af9f970) at /home/buildslave/source/libo-core/include/salhelper/simplereferenceobject.hxx:73 #6 0x00007f9411a2afb3 in osl::threadFunc(void*) (param=0x557e2af9f980) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x557e2af9f980 #7 0x00007f941300f357 in osl_thread_start_Impl(void*) (pData=0x557e2bfee2b0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x557e2bfee2b0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f941269afa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007f9412cfd4cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 2 (Thread 0x7f93e881d700 (LWP 1315)): #0 0x00007f94126a429c in __lll_lock_wait () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f941269d7d1 in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f9412fec31a in osl_acquireMutex(oslMutex) (pMutex=0x557e28034680) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:100 nRet = #3 0x00007f940d256dcb in osl::Mutex::acquire() (this=0x557e28035078) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:61 pInst = 0x557e28036090 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 0x00007f940d256dcb in SvpSalYieldMutex::doAcquire(unsigned int) (this=0x557e28035070, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:382 pInst = 0x557e28036090 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f9411024f82 in comphelper::SolarMutex::acquire(unsigned int) (nLockCount=1, this=0x557e28035070) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 g = {> = {pT = 0x557e28035070}, } #6 0x00007f9411024f82 in osl::Guard::Guard(comphelper::SolarMutex&) (t=..., this=0x7f93e8819db8) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:142 g = {> = {pT = 0x557e28035070}, } #7 0x00007f9411024f82 in SolarMutexGuard::SolarMutexGuard() (this=0x7f93e8819db8) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1352 g = {> = {pT = 0x557e28035070}, } #8 0x00007f9411024f82 in (anonymous namespace)::XFrameImpl::removeActionLock() (this=0x557e2c343ba0) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:2689 g = {> = {pT = 0x557e28035070}, } #9 0x00007f9410fccf4c in framework::ActionLockGuard::freeResource() (this=0x7f93e881a518) at /home/buildslave/source/libo-core/framework/source/inc/loadenv/actionlockguard.hxx:122 aMutexLock = {pT = 0x0} xLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x557e2c343c38 bLocked = true aReadLock = {pT = 0x7f93e881a410} aRequest = bThrow = #10 0x00007f9410fccf4c in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f93e881a410) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1661 aReadLock = {pT = 0x7f93e881a410} aRequest = bThrow = #11 0x00007f9410fcd352 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f93e881a410, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:515 #12 0x00007f9410fd5a8d in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f93e881a410) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1163 bResult = aWriteLock = {pT = 0x7f93e881a410} sTarget = "_blank" xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x557e2c343c10 xTargetLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x557e2c343c38 bHidden = bMinimized = bPreview = lDescriptor = uno::Sequence of length 11 = {{Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x557e2ab40bb8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x557e2a8dbc18}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x557e2a7a2818}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_Rich_Text_Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x557e2ab40bb8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "Rich Text Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xLoader = uno::Reference to (class (anonymous namespace)::SfxFrameLoader_Impl *) 0x557e2a255770 #13 0x00007f9410fd5d0a in framework::LoadEnv::start() (this=this@entry=0x7f93e881a410) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:395 bStarted = #14 0x00007f9410fd6cf6 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f93e881a410, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", lMediaDescriptor=uno::Sequence of length 2 = {...}, xBaseFrame=uno::Reference to (class framework::Desktop *) 0x557e28ee75b8, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:300 g = {pT = 0x7f93e881a410} aRealURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xParser = uno::Reference to (class (anonymous namespace)::URLTransformer *) 0x557e2a86aab8 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #15 0x00007f9410fd70b2 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (class framework::Desktop *) 0x557e28ee75c8, xContext=uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x557e2804ff40, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 2 = {...}) at /home/buildslave/build/workdir/UnoApiHeadersTarget/offapi/normal/com/sun/star/frame/XFrame.hpp:25 aEnv = {m_mutex = {mutex = 0x557e2a433120}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x557e2804ff40, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x557e28ee75b8, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x557e2c343c10, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 11 elements}, }, m_aURL = {Complete = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Main = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Protocol = "file://", User = "", Password = "", Server = "", Port = 0, Path = "/srv/crashtestdata/files/caolan/", Name = "swfntobj_drawtext_heap_buffer_overflow.sample", Arguments = "", Mark = ""}, m_eFeature = LoadEnvFeatures::NONE, m_eContentType = framework::LoadEnv::E_CAN_BE_LOADED, m_bCloseFrameOnError = true, m_bReactivateControllerOnError = false, m_xAsynchronousJob = empty uno::Reference, m_bLoaded = true, m_aTargetLock = {m_mutex = {mutex = 0x557e299332c0}, m_xActionLock = empty uno::Reference, m_bActionLocked = false}, m_pQuietInteraction = rtl::Reference to 0x557e2ab40b90} loadEnvFeatures = LoadEnvFeatures::NONE aDescriptor = {maValues = std::__debug::unordered_map with 2 elements} xComponent = empty uno::Reference aZone = { = { = {static s_nBufferSize = 0, static s_pBufferFullCallback = 0x0, static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 20437, m_sArgs = ""}, m_sName = 0x7f94111cdfc1 "loadComponentFromURL"}, m_nCreateTime = 0, m_nNesting = -1} #16 0x00007f9411019379 in framework::Desktop::loadComponentFromURL(rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (this=0x557e28ee7550, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTargetFrameName="_blank", nSearchFlags=0, lArguments=uno::Sequence of length 2 = {...}) at /home/buildslave/source/libo-core/framework/source/services/desktop.cxx:604 aDescriptor = { = {m_aMap = std::__debug::unordered_map with 2 elements}, } bOnMainThread = false xThis = uno::Reference to (class framework::Desktop *) 0x557e28ee75c8 #17 0x00007f9403891707 in gcc3::callVirtualMethod(void*, unsigned int, void*, _typelib_TypeDescriptionReference*, bool, unsigned long*, unsigned int, unsigned long*, double*) (pThis=0x557e28ee75c8, nVtableIndex=3, pRegisterReturn=0x7f93e881aa10, pReturnTypeRef=0x557e2817b2a0, bSimpleReturn=false, pStack=0x7f93e881aa20, nStack=0, pGPR=0x7f93e881abb0, pFPR=0x7f93e881abe0) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/callvirtualmethod.cxx:133 data = {pMethod = 140273917203453, pStack = 0x7f93e881aa20, nStack = 0, pGPR = 0x7f93e881abb0, pFPR = 0x7f93e881abe0, rax = 94000350163720, rdx = 140273237731712, xmm0 = 4.64423397776653e-310, xmm1 = 1.4821969375237396e-323} pMethod = 140273921298368 #18 0x00007f940388ff5e in cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**) (pThis=pThis@entry=0x557e2a55de20, aVtableSlot=..., aVtableSlot@entry=..., pReturnTypeRef=0x557e2817b2a0, nParams=4, pParams=0x557e2baab2e0, pUnoReturn=pUnoReturn@entry=0x557e29239cf0, pUnoArgs=0x557e29a41c80, ppUnoExc=0x7f93e881ae30) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:233 pStack = 0x7f93e881aa20 pStackStart = 0x7f93e881aa20 pGPR = {140273237731856, 94000340956616, 94000350163648, 94000350163672, 0, 140273237731712} nGPR = 6 pFPR = {1.4821969375237396e-323, 6.3659873748720795e-314, 1.9762625833649862e-323, 4.6442339164561454e-310, 6.9304187794524635e-310, 6.9304411852912617e-310, 4.6442352042046548e-310, 0} nFPR = 0 pReturnTypeDescr = 0x557e2817b2a0 __PRETTY_FUNCTION__ = "void cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**)" pCppReturn = 0x7f93e881aa10 bSimpleReturn = false pAdjustedThisPtr = 0x557e28ee75c8 pCppArgs = 0x7f93e881a9a0 pTempIndices = 0x7f93e881a9c0 ppTempParamTypeDescr = 0x7f93e881a9e0 nTempIndices = 1 #19 0x00007f9403890752 in bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, typelib_TypeDescription const*, void*, void**, uno_Any**) (pUnoI=0x557e2a55de20, pMemberDescr=0x557e2a7c2fc0, pReturn=0x557e29239cf0, pArgs=0x557e29a41c80, ppException=0x7f93e881ae30) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:413 aVtableSlot = pThis = 0x557e2a55de20 __PRETTY_FUNCTION__ = "void bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, const typelib_TypeDescription*, void*, void**, uno_Any**)" #20 0x00007f9401e9c5fd in binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector >*) const (this=this@entry=0x557e2c1b4900, returnValue=returnValue@entry=0x7f93e881b1e0, outArguments=outArguments@entry=0x7f93e881b2a0) at /home/buildslave/source/libo-core/include/uno/dispatcher.hxx:72 exc = pexc = 0x7f93e881ae40 retType = {_pTypeDescr = 0x557e2817b2a0} nSize = 8 retBuf = std::__debug::vector of length 8, capacity 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} outBufs = std::__debug::vector of length 0, capacity 0 args = std::__debug::vector of length 4, capacity 4 = {0x557e297af2c0, 0x557e297af2d8, 0x557e297af2f0, 0x557e297af308} __PRETTY_FUNCTION__ = "bool binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector*) const" isExc = false #21 0x00007f9401e9ddb7 in binaryurp::IncomingRequest::execute() const (this=this@entry=0x557e2c1b4900) at /home/buildslave/source/libo-core/binaryurp/source/incomingrequest.cxx:78 resetCc = true oldCc = {m_pUnoI = 0x0} ret = {data_ = _uno_Any(void)} outArgs = std::__debug::vector of length 0, capacity 0 isExc = #22 0x00007f9401eb3bad in binaryurp::(anonymous namespace)::request(void*) (pThreadSpecificData=pThreadSpecificData@entry=0x557e2c1b4900) at /usr/include/c++/8/bits/unique_ptr.h:149 __PRETTY_FUNCTION__ = "void binaryurp::{anonymous}::request(void*)" #23 0x00007f9411a2712c in cppu_threadpool::JobQueue::enter(void const*, bool) (this=0x557e2c2551f0, nDisposeId=, nDisposeId@entry=0x557e2b05aa10, bReturnWhenNoJob=bReturnWhenNoJob@entry=true) at /home/buildslave/source/libo-core/cppu/source/threadpool/jobqueue.cxx:100 pReturn = 0x0 __PRETTY_FUNCTION__ = "void* cppu_threadpool::JobQueue::enter(const void*, bool)" #24 0x00007f9411a2917b in cppu_threadpool::ORequestThread::run() (this=0x557e2b05aa10) at /home/buildslave/source/libo-core/cppu/source/threadpool/thread.cxx:164 #25 0x00007f9411a2afb3 in osl::threadFunc(void*) (param=0x557e2b05aa20) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x557e2b05aa20 #26 0x00007f941300f357 in osl_thread_start_Impl(void*) (pData=0x557e29426e50) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x557e29426e50 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #27 0x00007f941269afa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #28 0x00007f9412cfd4cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 1 (Thread 0x7f9403b91040 (LWP 20437)): #0 0x00007f9412c3b7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9412c26535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f941300242a in (anonymous namespace)::callSystemHandler(int, siginfo_t*, void*) (signal=signal@entry=6, info=info@entry=0x7fff27dcaff0, context=context@entry=0x7fff27dcaec0) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:358 act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0 }}, sa_flags = 0, sa_restorer = 0x557e2b01dd20} i = #3 0x00007f9413002534 in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7fff27dcaff0, context=0x7fff27dcaec0) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:454 act = {__sigaction_handler = {sa_handler = 0x557e2c129a20, sa_sigaction = 0x557e2c129a20}, sa_mask = {__val = {140273898810814, 94000392571464, 140733862165480, 94000392571424, 140273399549462, 1, 94000361677792, 12, 90, 94000347126848, 140273898638813, 94000372116448, 0, 94000393656936, 140273898810814, 1}}, sa_flags = 707437536, sa_restorer = 0x7fff27dcaf26} Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #4 0x00007f9412c3b840 in () at /lib/x86_64-linux-gnu/libc.so.6 #5 0x00007f9412c3b7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #6 0x00007f9412c26535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #7 0x00007f940d1fa2fb in SalAbort(rtl::OUString const&, bool) (rErrorText="", bDumpCore=bDumpCore@entry=true) at /home/buildslave/source/libo-core/vcl/source/app/salplug.cxx:350 #8 0x00007f940cfd30ca in Application::Abort(rtl::OUString const&) (rErrorText="") at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:274 #9 0x00007f9412e0ee67 in desktop::Desktop::Exception(ExceptionCategory) (this=0x7fff27dcd760, nCategory=) at /home/buildslave/source/libo-core/include/rtl/ustring.hxx:182 bInException = true nOldMode = rArgs = bRestart = bAllowRecoveryAndSessionManagement = #10 0x00007f940cfe8522 in VCLExceptionSignal_impl(void*, oslSignalInfo*) (pInfo=) at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:169 nOldMode = SystemWindowFlags::DIALOG pSVData = 0x7f940db9cd60 ::get()::instance> aLock = {m_isAcquired = true, m_isChecked = true, m_rSolarMutex = @0x557e28035070} bIn = true nVCLException = #11 0x00007f9412f909f5 in callSignalHandler(oslSignalInfo*) (pInfo=pInfo@entry=0x7fff27dcb770) at /home/buildslave/source/libo-core/sal/osl/all/signalshared.cxx:59 pHandler = 0x557e28e69470 Action = #12 0x00007f94130024ce in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7fff27dcb970, context=0x7fff27dcb840) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:451 Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #13 0x00007f9412c3b840 in () at /lib/x86_64-linux-gnu/libc.so.6 #14 0x00007f9412c3b7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #15 0x00007f9412c26535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #16 0x00007f9412c2640f in () at /lib/x86_64-linux-gnu/libc.so.6 #17 0x00007f9412c34102 in () at /lib/x86_64-linux-gnu/libc.so.6 #18 0x00007f93f213ff3e in SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool) (this=0x557e2a916ed0, _rAnchoredObj=..., _bCheckForMovedFwd=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformattertxtfrm.cxx:229 nIdx = 0 nToPageNum = 0 bDummy = false bPageHasFlysAnchoredBelowThis = false bDoesAnchorHadPrev = bRestart = false bSuccess = true __PRETTY_FUNCTION__ = "virtual bool SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool)" #19 0x00007f93f213c0bd in SwObjectFormatter::FormatObj(SwAnchoredObject&, SwFrame*, SwPageFrame const*) (_rAnchoredObj=..., _pAnchorFrame=, _pPageFrame=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformatter.cxx:190 bSuccess = true rAnchorFrame = @0x557e2b0f2d40: { = {_vptr.SwFrameAreaDefinition = 0x7f93f339b188 , maFrameArea = SwRect = {point = Point = {x = 7554, y = 93660}, size = Size = {width = 3530, height = 1}}, maFramePrintArea = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 3530, height = 1}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5481}, = { = {_vptr.WriterListener = 0x7f93f339b2e0 , m_pLeft = 0x0, m_pRight = 0x557e2c411d80}, m_pRegisteredIn = 0x557e2a2aa3e0}, = {_vptr.SfxBroadcaster = 0x7f93f339b310 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x557e2a406a90, mpRoot = 0x557e2c3396c0, mpUpper = 0x557e2b03f9f0, mpNext = 0x0, mpPrev = 0x0, m_pDrawObjs = std::unique_ptr = {get() = 0x557e2a8de890}, mnFrameType = SwFrameType::Txt, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = true, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = true, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = false, mbCompletePaint = true, mbRetouche = true, mbInfInvalid = false, mbInfBody = true, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = true, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false} rPageFrame = @0x557e29afe100: { = { = { = { = {_vptr.SwFrameAreaDefinition = 0x7f93f33959a0 , maFrameArea = SwRect = {point = Point = {x = 284, y = 80904}, size = Size = {width = 12240, height = 15840}}, maFramePrintArea = SwRect = {point = Point = {x = 1440, y = 720}, size = Size = {width = 9360, height = 14400}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5553}, = { = {_vptr.WriterListener = 0x7f93f3395ae8 , m_pLeft = 0x557e296d7f50, m_pRight = 0x557e29a083e0}, m_pRegisteredIn = 0x557e2c115348}, = {_vptr.SfxBroadcaster = 0x7f93f3395b18 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x557e2a406a90, mpRoot = 0x557e2c3396c0, mpUpper = 0x557e2c3396c0, mpNext = 0x557e2c22ec70, mpPrev = 0x557e2b288650, m_pDrawObjs = std::unique_ptr = {get() = 0x0}, mnFrameType = SwFrameType::Page, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = false, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = false, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = true, mbCompletePaint = true, mbRetouche = false, mbInfInvalid = false, mbInfBody = false, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = false, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false}, m_pLower = 0x557e2c22fa70, m_VertPosOrientFramesFor = std::__debug::vector of length 0, capacity 0}, m_nMaxFootnoteHeight = 9223372036854775807}, m_pSortedObjs = std::unique_ptr = {get() = 0x557e29ad9c40}, m_pDesc = 0x557e2c115130, m_nPhyPageNum = 6, m_bInvalidContent = true, m_bInvalidLayout = true, m_bInvalidFlyContent = true, m_bInvalidFlyLayout = true, m_bInvalidFlyInCnt = false, m_bFootnotePage = false, m_bEmptyPage = false, m_bEndNotePage = false, m_bInvalidSpelling = true, m_bInvalidSmartTags = true, m_bInvalidAutoCmplWrds = true, m_bInvalidWordCount = true, m_bHasGrid = false, static snShadowPxWidth = 9 '\t'} pObjFormatter = std::unique_ptr = {get() = 0x557e2a916ed0} #20 0x00007f93f20e801d in CalcContent(SwLayoutFrame*, bool) (pLay=pLay@entry=0x557e2b298b10, bNoColl=bNoColl@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/fly.cxx:1550 aRect = SwRect = {point = Point = {x = 4407, y = 109607}, size = Size = {width = 8116, height = 1179}} pAnchoredObj = 0x557e2a2049a0 bAgain = false pPageFrame = 0x557e29afe100 i = 0 bRestartLayoutProcess = false nCnt = 6 wasFrameLowerOfLay = pTmpPrev = 0x557e2a4469c0 pTmpPrevFlowFrame = bPrevInvalid = false pTmpFlowFrame = pAgainObj1 = 0x0 nLoopControlMax = 20 pAgainObj2 = 0x0 nLoopControlRuns = pLoopControlCond = pLast = 0x557e2b0f2d40 pRenderContext = pSect = 0x557e2b298b10 bCollect = pFrame = 0x557e2b0f2d40 __PRETTY_FUNCTION__ = "void CalcContent(SwLayoutFrame*, bool)" #21 0x00007f93f217cd49 in SwSectionFrame::CheckClipping(bool, bool) (this=this@entry=0x557e2b298b10, bGrow=bGrow@entry=false, bMaximize=) at /home/buildslave/source/libo-core/sw/source/core/layout/sectfrm.cxx:1153 aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7f93f340b760 } nDiff = nDeadLine = 96024 bCalc = bExtraCalc = false aOldSz = Size = {width = 9360, height = 17584} nTop = bHeightChanged = #22 0x00007f93f217fc67 in SwSectionFrame::Format(OutputDevice*, SwBorderAttrs const*) (this=0x557e2b298b10, pRenderContext=, pAttr=) at /home/buildslave/source/libo-core/sw/inc/viewopt.hxx:472 nWidth = 9360 pSh = aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7f93f340b760 } aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} nOldHeight = bOldLock = false bMaximize = true aExtraFormatToPosObjs = {mpSectFrame = 0x557e2b298b10, mbExtraFormatPerformed = false} bHasColumns = nDiff = #23 0x00007f93f20c77bc in SwLayoutFrame::MakeAll(OutputDevice*) (this=this@entry=0x557e2b298b10) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} aNotify = { = {mpFrame = 0x557e2b298b10, maFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}}, maPrt = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 9360, height = 0}}, mnFlyAnchorOfst = 0, mnFlyAnchorOfstNoWrap = 0, mbHadFollow = false, mbInvaKeep = false, mbValidSize = false}, m_bLowersComplete = false} bVert = false fnRect = 0x7f93f340b760 pAccess = std::unique_ptr = {get() = 0x557e29a1c340} pAttrs = 0x557e2b5f7c50 #24 0x00007f93f2183199 in SwSectionFrame::MakeAll(OutputDevice*) (this=0x557e2b298b10, pRenderContext=0x557e2b037e50) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 pSh = bCanContainSplitSection = #25 0x00007f93f20c52d3 in SwFrame::PrepareMake(OutputDevice*) (this=0x557e2b298b10, pRenderContext=0x557e2b037e50) at /home/buildslave/source/libo-core/sw/source/core/layout/calcmove.cxx:375 __PRETTY_FUNCTION__ = "void SwFrame::PrepareMake(vcl::RenderContext*)" #26 0x00007f93f21afad1 in SwFrame::Calc(OutputDevice*) const (this=, pRenderContext=) at /home/buildslave/source/libo-core/sw/source/core/layout/trvlfrm.cxx:1792 #27 0x00007f93f212206d in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7fff27dccb20, pRenderContext=pRenderContext@entry=0x557e2b037e50, pLay=pLay@entry=0x557e2b298b10, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1228 aDeleteGuard = {m_pForbidFrame = 0x0} aOldFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} aOldRect = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} bNoPaint = bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 12510, y = 140273845870739}, size = Size = {width = 0, height = 0}} pLow = bTabChanged = aBoundRect = SwRect = {point = Point = {x = 0, y = 140273398193623}, size = Size = {width = 94000381021104, height = 94000378383120}} #28 0x00007f93f2122c24 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7fff27dccb20, pRenderContext=pRenderContext@entry=0x557e2b037e50, pLay=pLay@entry=0x557e2b2887e0, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1407 pNext = 0x0 bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 140733862168576, y = 140273398460313}, size = Size = {width = 0, height = 0}} pLow = 0x557e2b298b10 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 0, y = 140273398193623}, size = Size = {width = 94000378700736, height = 94000378316768}} #29 0x00007f93f2122c24 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7fff27dccb20, pRenderContext=pRenderContext@entry=0x557e2b037e50, pLay=0x557e2b288650, bAddRect=false, bAddRect@entry=true) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1407 pNext = 0x0 bChanged = false bAlreadyPainted = true aFrameAtCompletePaint = SwRect = {point = Point = {x = 140273890921336, y = 94000352707392}, size = Size = {width = 12240, height = 15840}} pLow = 0x557e2b2887e0 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 12523, y = 64635}, size = Size = {width = 422, height = 16126}} #30 0x00007f93f2123d14 in SwLayAction::InternalAction(OutputDevice*) (this=this@entry=0x7fff27dccb20, pRenderContext=pRenderContext@entry=0x557e2b037e50) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:575 nLoopControlRuns_1 = 1 bTakeShortcut = false pPage = 0x557e2b288650 nFirstPageNum = 1 rLayoutAccess = @0x557e29350a10: {_vptr.IDocumentLayoutAccess = 0x7f93f335cac0 } bNoLoop = true nPercentPageNum = 0 lcl_isLayoutLooping = {__this = 0x7fff27dccb20, __bNoLoop = @0x7fff27dcc9ff, __rLayoutAccess = @0x557e29350a10} #31 0x00007f93f212501f in SwLayAction::Action(OutputDevice*) (this=this@entry=0x7fff27dccb20, pRenderContext=0x557e2b037e50) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:385 #32 0x00007f93f212556d in SwLayIdle::SwLayIdle(SwRootFrame*, SwViewShellImp*) (this=0x7fff27dccc40, pRt=, pI=) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aAction = {m_pRoot = 0x557e2c3396c0, m_pImp = 0x557e2a4a7180, m_pOptTab = 0x0, m_pWait = std::unique_ptr = {get() = 0x0}, m_aFrameStack = std::__debug::vector of length 2, capacity 2 = {0x557e2b2887e0, 0x557e2b298b10}, m_aFrameDeleteGuards = std::__debug::vector of length 2, capacity 2 = {std::unique_ptr = {get() = 0x557e29fbaf80}, std::unique_ptr = {get() = 0x557e2b4a9c60}}, m_nPreInvaPage = 65535, m_nStartTicks = 428085354, m_nInputType = (VclInputFlags::MOUSE | VclInputFlags::KEYBOARD | VclInputFlags::PAINT | VclInputFlags::OTHER | VclInputFlags::APPEVENT), m_nEndPage = 65535, m_nCheckPageNum = 5, m_bPaint = true, m_bComplete = true, m_bCalcLayout = false, m_bAgain = false, m_bNextCycle = false, m_bInterrupt = false, m_bIdle = true, m_bReschedule = false, m_bCheckPages = true, m_bUpdateExpFields = false, m_bBrowseActionStop = false, m_bWaitAllowed = false, m_bPaintExtraData = false, m_bActionInProgress = true, mbFormatContentOnInterrupt = false} bInterrupt = false bActions = nBoolIdx = rVOpt = aBools = std::__debug::vector of length 1, capacity 64 = {1} bInValid = bWordCount = pPg = pViewShell = bSpell = bACmplWrd = bSmartTags = #33 0x00007f93f2696dd9 in SwViewShell::LayoutIdle() (this=0x557e2b2e63c0) at /home/buildslave/source/libo-core/sw/source/core/view/viewsh.cxx:722 aSaveLRU = {} aIdle = {m_pRoot = 0x557e2c3396c0, m_pImp = 0x557e2a4a7180, m_pContentNode = 0x557e2b8e56d0, m_nTextPos = 0, m_bPageValid = true, m_bIndicator = true} aCurr = {pPrev = 0x557e2b2e63c0, pRoot = 0x557e2c3396c0} #34 0x00007f93f1d909ba in sw::DocumentTimerManager::DoIdleJobs(Timer*) (this=0x557e2c44a560) at /home/buildslave/source/libo-core/sw/source/core/inc/rootfrm.hxx:207 pLayout = __for_range = @0x7fff27dcccf0: {m_vector = std::__debug::vector of length 1, capacity 1 = {0x557e2c3396c0}} __for_begin = 0x557e2c3396c0 __for_end = 0x99999999999999be eJob = sw::DocumentTimerManager::IdleJob::Layout #35 0x00007f93f1d90e2d in sw::DocumentTimerManager::LinkStubDoIdleJobs(void*, Timer*) (instance=, data=) at /home/buildslave/source/libo-core/sw/source/core/doc/DocumentTimerManager.cxx:157 #36 0x00007f940cff08b8 in Link::Call(Timer*) const (data=, this=) at /home/buildslave/source/libo-core/include/tools/link.hxx:110 #37 0x00007f940cff08b8 in Timer::Invoke() (this=) at /home/buildslave/source/libo-core/vcl/source/app/timer.cxx:75 #38 0x00007f940cf9ce5f in Scheduler::CallbackTaskScheduling() () at /home/buildslave/source/libo-core/vcl/source/app/scheduler.cxx:471 bTaskAlive = pTask = 0x557e2c44a578 aZone = { = { = {static s_nBufferSize = 0, static s_pBufferFullCallback = 0x0, static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 20437, m_sArgs = ""}, m_sName = 0x7f93f2c98098 "sw::DocumentTimerManager m_aDocIdle"}, m_nCreateTime = 0, m_nNesting = -1} pSVData = 0x7f940db9cd60 ::get()::instance> rSchedCtx = { STACK, ImplSchedulerDataDEFAULT, ImplSchedulerDataREPAINT, ImplSchedulerData} nTime = 13104703747 pSchedulerData = pPrevSchedulerData = pMostUrgent = pPrevMostUrgent = 0x0 nMostUrgentPriority = 7 nMinPeriod = nReadyPeriod = nTasks = nTaskPriority = 8 __PRETTY_FUNCTION__ = "static void Scheduler::CallbackTaskScheduling()" #39 0x00007f940d25493d in SalTimer::CallCallback() (this=) at /home/buildslave/source/libo-core/vcl/inc/saltimer.hxx:54 aGuard = {pT = 0x557e28035070} pSVData = aTimeOfDay = {tv_sec = 1629988307, tv_usec = 307474} bRet = true #40 0x00007f940d25493d in SvpSalInstance::CheckTimeout(bool) (this=this@entry=0x557e28036090, bExecuteTimers=bExecuteTimers@entry=true) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:214 aGuard = {pT = 0x557e28035070} pSVData = aTimeOfDay = {tv_sec = 1629988307, tv_usec = 307474} bRet = true #41 0x00007f940d254c4c in SvpSalInstance::DoYield(bool, bool) (this=0x557e28036090, bWait=, bHandleAllCurrentEvents=) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:459 __PRETTY_FUNCTION__ = "virtual bool SvpSalInstance::DoYield(bool, bool)" bEvent = false pSVData = 0x7f940db9cd60 ::get()::instance> bTimeout = bSkipPoll = pMutex = #42 0x00007f940cfd60a5 in ImplYield(bool, bool) (i_bWait=i_bWait@entry=true, i_bAllEvents=i_bAllEvents@entry=false) at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:455 pSVData = 0x7f940db9cd60 ::get()::instance> bProcessedEvent = #43 0x00007f940cfd6245 in Application::Yield() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:532 #44 0x00007f940cfd6293 in Application::Execute() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:444 pSVData = 0x7f940db9cd60 ::get()::instance> #45 0x00007f9412e1b421 in desktop::Desktop::Main() (this=0x7fff27dcd760) at /home/buildslave/source/libo-core/desktop/source/app/app.cxx:1602 aOptions = { = { = {_vptr.ConfigurationBroadcaster = 0x7f940e93fca8 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, = {_vptr.ConfigurationListener = 0x7f940e93fcd8 }, }, static sm_pSingleImplConfig = 0x557e28fbd620, static sm_nAccessibilityRefCount = 6} xRestartManager = uno::Reference to (class comphelper::OOfficeRestartManager *) 0x557e28e602e8 bAbort = bExistsRecoveryData = false bExistsSessionData = false pidfileName = "" aTitle = "LibreOfficeDev 7.3.0.0.alpha0 [226ab4d444dbbf8a257b38e08b138713466fe7cd]" aEvent = { = {Source = empty uno::Reference}, EventName = "OnStartApp", ViewController = empty uno::Reference, Supplement = uno::Any(void)} xDesktop = uno::Reference to (class framework::Desktop *) 0x557e28ee75a8 bMustLockProfile = bCrashed = false aAppearanceCfg = { = { = {_vptr.ConfigurationBroadcaster = 0x7f940e93fd30 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, sSubTree = "Office.Common/View", m_xHierarchyAccess = uno::Reference to (class configmgr::RootAccess *) 0x557e28f75d48, xChangeLstnr = empty uno::Reference, m_nMode = ConfigItemMode::NONE, m_bIsModified = false, m_bEnableInternalNotification = false, m_nInValueChange = 0}, nDragMode = DragMode::SystemDep, nSnapMode = SnapType::NONE, nMiddleMouse = MouseMiddleButtonAction::PasteSelection, nAAMinPixelHeight = 8, bFontAntialiasing = true, bMenuMouseFollow = true, static bInitialized = true} layer = {m_aEnvTypeName = "gcc3", m_xPreviousContext = uno::Reference to (class (anonymous namespace)::DesktopEnvironmentContext *) 0x557e28036208} eStatus = rCmdLineArgs = @0x7f9412f72c20: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest8ae9701c-0679-11ec-bb94-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} inst_fin = xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x557e2804ff40 #46 0x00007f940cfef11a in ImplSVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:199 pSVData = 0x7f940db9cd60 ::get()::instance> nReturn = 1 bWasInitVCL = bInit = true nRet = 0 #47 0x00007f940cfef29a in SVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:231 #48 0x00007f9412e65041 in soffice_main() () at /home/buildslave/source/libo-core/desktop/source/app/sofficemain.cxx:98 rCmdLineArgs = @0x7f9412f72c20: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest8ae9701c-0679-11ec-bb94-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} aUnknown = "" bSuccess = aDesktop = { = { = {_vptr.ILibreOfficeKitNotifier = 0x7f9412f66748 }, m_pCallbackData = 0x0, m_pCallback = 0x0}, m_rSplashScreen = empty uno::Reference, m_bCleanedExtensionCache = false, m_bServicesRegistered = true, m_aBootstrapError = desktop::Desktop::BE_OK, m_aBootstrapErrorMessage = "", m_aBootstrapStatus = desktop::Desktop::BS_OK, m_xLockfile = std::unique_ptr = {get() = 0x0}, m_firstRunTimer = { = {_vptr.Task = 0x7f940daef9d0 , mpSchedulerData = 0x0, mpDebugName = 0x7f9412eef558 "desktop::Desktop m_firstRunTimer", mePriority = TaskPriority::DEFAULT, mbActive = false, mbStatic = false}, maInvokeHandler = {function_ = 0x7f9412e13c54 , instance_ = 0x7fff27dcd760, file_ = 0x7f9412eef518 "/home/buildslave/source/libo-core/desktop/source/app/app.cxx", line_ = 430, target_ = 0x7f9412eef4f0 "Desktop::LinkStubAsyncInitFirstRun"}, mnTimeout = 3000, mbAuto = false}, m_aUpdateThread = {_M_id = {_M_thread = 0}}} #49 0x0000557e26b5d8ee in sal_main () at /home/buildslave/source/libo-core/desktop/source/app/main.c:49 ret = #50 0x0000557e26b5d93b in main (argc=, argv=) at /home/buildslave/source/libo-core/desktop/source/app/main.c:47 ret =