[New LWP 47396] [New LWP 47866] [New LWP 24626] [New LWP 47635] [New LWP 47636] [New LWP 47867] [New LWP 33005] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f9c4fd5f7bb in raise () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f9c40cc5f00 (LWP 47396))] Thread 7 (Thread 0x7f9c281cc700 (LWP 33005)): #0 0x00007f9c4f7c535b in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f9c500eb0d8 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x5598d927dc40, pTimeout=pTimeout@entry=0x7f9c281ca640) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:203 ret = tp = {tv_sec = 1628292948, tv_usec = 996513} to = {tv_sec = 1628292950, tv_nsec = 996513000} pCond = 0x5598d927dc40 nRet = 0 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007f9c4eb74ad5 in osl::Condition::wait(TimeValue const*) (pTimeout=0x7f9c281ca640, this=0x7f9c281ca450) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x5598d927dc40}, thread = rtl::Reference to 0x5598d9bc0ef0} #3 0x00007f9c4eb74ad5 in osl::Condition::wait(TimeValue const&) (timeout=..., this=0x7f9c281ca450) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x5598d927dc40}, thread = rtl::Reference to 0x5598d9bc0ef0} #4 0x00007f9c4eb74ad5 in cppu_threadpool::ThreadPool::waitInPool(rtl::Reference const&) (this=0x5598d8376dc0, pThread=rtl::Reference to 0x5598d9bc0ef0) at /home/buildslave/source/libo-core/cppu/source/threadpool/threadpool.cxx:134 waitingThread = {condition = {condition = 0x5598d927dc40}, thread = rtl::Reference to 0x5598d9bc0ef0} #5 0x00007f9c4eb68272 in cppu_threadpool::ORequestThread::run() (this=0x5598d9bc0ef0) at /home/buildslave/source/libo-core/include/salhelper/simplereferenceobject.hxx:73 #6 0x00007f9c4eb69fb3 in osl::threadFunc(void*) (param=0x5598d9bc0f00) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5598d9bc0f00 #7 0x00007f9c50135357 in osl_thread_start_Impl(void*) (pData=0x5598da822bf0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5598da822bf0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f9c4f7befa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007f9c4fe214cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f9c3d222700 (LWP 47867)): #0 0x00007f9c4fe22686 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9c501144d8 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x5598d836df00, pBuffer=pBuffer@entry=0x5598d95d9518, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:439 nRet = 0 #2 0x00007f9c50114d00 in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x5598d836df00, pBuffer=0x5598d95d9518, n=n@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:509 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f9c3f0327ba in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x5598d82edf00) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 0x00007f9c3f0327ba in io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x5598d82eded0, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f9c3efe8792 in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x5598d82edef8, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f9c3efece45 in binaryurp::Reader::execute() (this=0x5598d83752f0) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:104 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x5598d83703f0, state_ = @0x5598d8375338, buffer_ = uno::Sequence of length 1717986918 = {102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 0 '\000', 104 'h', 52 '4', -39 '\331', -104 '\230', 85 'U', 0 '\000', 0 '\000', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 102 'f', 96 '`', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 7 '\a', 17 '\021', 4 '\004', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 1 '\001', 1 '\001', 0 '\000', 2 '\002', 2 '\002', 2 '\002', 0 '\000', 3 '\003', 3 '\003', 3 '\003', 0 '\000', 4 '\004', 4 '\004', 4 '\004', 0 '\000', 5 '\005', 5 '\005', 5 '\005', 0 '\000', 6 '\006', 6 '\006', 6 '\006', 0 '\000', 7 '\a', 7 '\a', 7 '\a', 0 '\000', 8 '\b', 8 '\b', 8 '\b', 0 '\000', 9 '\t', 9 '\t', 9 '\t', 0 '\000', 10 '\n', 10 '\n', 10 '\n', 0 '\000', 11 '\v', 11 '\v', 11 '\v', 0 '\000', 12 '\f', 12 '\f', 12 '\f', 0 '\000', 13 '\r', 13 '\r', 13 '\r', 0 '\000', 14 '\016', 14 '\016', 14 '\016', 0 '\000', 15 '\017', 15 '\017', 15 '\017', 0 '\000', 16 '\020', 16 '\020', 16 '\020', 0 '\000', 17 '\021', 17 '\021', 17 '\021', 0 '\000', 18 '\022', 18 '\022', 18 '\022', 0 '\000', 19 '\023', 19 '\023', 19 '\023', 0 '\000', 20 '\024', 20 '\024', 20 '\024', 0 '\000', 21 '\025', 21 '\025', 21 '\025', 0 '\000', 22 '\026', 22 '\026', 22 '\026', 0 '\000', 23 '\027', 23 '\027', 23 '\027', 0 '\000', 24 '\030', 24 '\030', 24 '\030', 0 '\000', 25 '\031', 25 '\031', 25 '\031', 0 '\000', 26 '\032', 26 '\032', 26 '\032', 0 '\000', 27 '\033', 27 '\033', 27 '\033', 0 '\000', 28 '\034', 28 '\034', 28 '\034', 0 '\000', 29 '\035', 29 '\035', 29 '\035', 0 '\000', 30 '\036', 30 '\036', 30 '\036', 0 '\000', 31 '\037', 31 '\037', 31 '\037', 0 '\000'...}, data_ = 0x5598d95390e5 "", end_ = 0x5598d95390e5 ""} header = {bridge_ = rtl::Reference to 0x5598d83703f0, state_ = @0x5598d8375338, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x5598d95d9520 "\022\377\377", end_ = 0x5598d95d9520 "\022\377\377"} size = con = uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x5598d82edef8 #7 0x00007f9c4de32608 in salhelper::Thread::run() (this=0x5598d83752f0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #8 0x00007f9c4de32e95 in osl::threadFunc(void*) (param=0x5598d8375300) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5598d8375300 #9 0x00007f9c50135357 in osl_thread_start_Impl(void*) (pData=0x5598d8374ac0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5598d8374ac0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f9c4f7befa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #11 0x00007f9c4fe214cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f9c3efa5700 (LWP 47636)): #0 0x00007f9c4fe22437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9c50114ddd in osl_acceptPipe(oslPipe) (pPipe=pPipe@entry=0x5598d82ed710) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007f9c3f032d77 in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x7f9c3efa3250) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 pipe = {m_handle = 0x5598d82ed710} pConn = rtl::Reference to 0x5598d8379120 status = #3 0x00007f9c3f032d77 in io_acceptor::PipeAcceptor::accept() (this=0x5598d8370d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x5598d82ed710} pConn = rtl::Reference to 0x5598d8379120 status = #4 0x00007f9c3f03aeac in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x5598d81e6250, sConnectionDescription="pipe,name=pytest3b66886a-f70e-11eb-a9f6-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:199 guard = {m_pFlag = 0x5598d81e62a8} r = empty uno::Reference #5 0x00007f9c400b406e in desktop::Acceptor::run() (this=this@entry=0x5598d81e5310) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 aDescription = "pipe,name=pytest3b66886a-f70e-11eb-a9f6-98f2b32c495c,uniqueValue=94114950340352" rInstanceProvider = uno::Reference to (class desktop::AccInstanceProvider *) 0x5598d836d268 rConnection = empty uno::Reference #6 0x00007f9c400b5479 in desktop::offacc_workerfunc(void*) (acc=0x5598d81e5310) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:44 #7 0x00007f9c50135357 in osl_thread_start_Impl(void*) (pData=0x5598d81e74e0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5598d81e74e0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f9c4f7befa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007f9c4fe214cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7f9c3f894700 (LWP 47635)): #0 0x00007f9c4fe22437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9c50114ddd in osl_acceptPipe(oslPipe) (pPipe=0x5598d81daa70) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007f9c4ff802c1 in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x5598d81da8e0) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #3 0x00007f9c4ff802c1 in desktop::PipeIpcThread::execute() (this=0x5598d81da8b0) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1138 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007f9c4de32608 in salhelper::Thread::run() (this=0x5598d81da8b0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007f9c4de32e95 in osl::threadFunc(void*) (param=0x5598d81da8c0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5598d81da8c0 #6 0x00007f9c50135357 in osl_thread_start_Impl(void*) (pData=0x5598d81db6b0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5598d81db6b0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f9c4f7befa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007f9c4fe214cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7f9c2b942700 (LWP 24626)): #0 0x00007f9c4f7c829c in __lll_lock_wait () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f9c4f7c17d1 in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f9c5011231a in osl_acquireMutex(oslMutex) (pMutex=0x5598d73b01a0) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:100 nRet = #3 0x00007f9c4a399939 in osl::Mutex::acquire() (this=0x5598d73b0b98) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:61 pInst = 0x5598d73b1790 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 0x00007f9c4a399939 in SvpSalYieldMutex::doAcquire(unsigned int) (this=0x5598d73b0b90, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:383 pInst = 0x5598d73b1790 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f9c4e1626ac in comphelper::SolarMutex::acquire(unsigned int) (nLockCount=1, this=0x5598d73b0b90) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 g = {> = {pT = 0x5598d73b0b90}, } #6 0x00007f9c4e1626ac in osl::Guard::Guard(comphelper::SolarMutex&) (t=..., this=0x7f9c2b93eee8) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:142 g = {> = {pT = 0x5598d73b0b90}, } #7 0x00007f9c4e1626ac in SolarMutexGuard::SolarMutexGuard() (this=0x7f9c2b93eee8) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1352 g = {> = {pT = 0x5598d73b0b90}, } #8 0x00007f9c4e1626ac in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x5598d9af7740) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:846 g = {> = {pT = 0x5598d73b0b90}, } #9 0x00007f9c4e109ebf in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f9c2b93f550) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 xWindow = uno::Reference to (class com::sun::star::uno::XInterface *) 0x5598d73ce700 bHidden = bMinimized = pFrameName = {, true>> = {_M_cur = 0x7f9c00000000}, } aReadLock = {pT = 0x7f9c2b93f550} aRequest = bThrow = #10 0x00007f9c4e10a860 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f9c2b93f550, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:515 #11 0x00007f9c4e112f23 in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f9c2b93f550) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1163 bResult = aWriteLock = {pT = 0x7f9c2b93f550} sTarget = "_blank" xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5598d9af77b0 xTargetLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5598d9af77d8 bHidden = bMinimized = bPreview = lDescriptor = uno::Sequence of length 11 = {{Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x5598d985dbf8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x5598db53aa58}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x5598d9594b78}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_Rich_Text_Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x5598d985dbf8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "Rich Text Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xLoader = uno::Reference to (class (anonymous namespace)::SfxFrameLoader_Impl *) 0x5598da5b8f30 #12 0x00007f9c4e1131a0 in framework::LoadEnv::start() (this=this@entry=0x7f9c2b93f550) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:395 bStarted = #13 0x00007f9c4e114209 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f9c2b93f550, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", lMediaDescriptor=uno::Sequence of length 2 = {...}, xBaseFrame=uno::Reference to (class framework::Desktop *) 0x5598d825dd68, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:300 g = {pT = 0x7f9c2b93f550} aRealURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xParser = uno::Reference to (class (anonymous namespace)::URLTransformer *) 0x5598da8ddcf8 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007f9c4e1145c4 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (class framework::Desktop *) 0x5598d825dd78, xContext=uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x5598d73ca820, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 2 = {...}) at /home/buildslave/build/workdir/UnoApiHeadersTarget/offapi/normal/com/sun/star/frame/XFrame.hpp:25 aEnv = {m_mutex = {mutex = 0x5598d97cecc0}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x5598d73ca820, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x5598d825dd68, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5598d9af77b0, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 11 elements}, }, m_aURL = {Complete = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Main = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Protocol = "file://", User = "", Password = "", Server = "", Port = 0, Path = "/srv/crashtestdata/files/caolan/", Name = "swfntobj_drawtext_heap_buffer_overflow.sample", Arguments = "", Mark = ""}, m_eFeature = LoadEnvFeatures::NONE, m_eContentType = framework::LoadEnv::E_CAN_BE_LOADED, m_bCloseFrameOnError = true, m_bReactivateControllerOnError = false, m_xAsynchronousJob = empty uno::Reference, m_bLoaded = true, m_aTargetLock = {m_mutex = {mutex = 0x5598d95d1540}, m_xActionLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5598d9af77d8, m_bActionLocked = true}, m_pQuietInteraction = rtl::Reference to 0x5598d985dbd0} loadEnvFeatures = LoadEnvFeatures::NONE aDescriptor = {maValues = std::__debug::unordered_map with 2 elements} xComponent = empty uno::Reference aZone = { = { = {static s_nBufferSize = 0, static s_pBufferFullCallback = 0x0, static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 47396, m_sArgs = ""}, m_sName = 0x7f9c4e30d5f1 "loadComponentFromURL"}, m_nCreateTime = 0, m_nNesting = -1} #15 0x00007f9c4e156c83 in framework::Desktop::loadComponentFromURL(rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (this=0x5598d825dd00, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTargetFrameName="_blank", nSearchFlags=0, lArguments=uno::Sequence of length 2 = {...}) at /home/buildslave/source/libo-core/framework/source/services/desktop.cxx:605 aDescriptor = { = {m_aMap = std::__debug::unordered_map with 2 elements}, } bOnMainThread = false xThis = uno::Reference to (class framework::Desktop *) 0x5598d825dd78 #16 0x00007f9c409c6707 in gcc3::callVirtualMethod(void*, unsigned int, void*, _typelib_TypeDescriptionReference*, bool, unsigned long*, unsigned int, unsigned long*, double*) (pThis=0x5598d825dd78, nVtableIndex=3, pRegisterReturn=0x7f9c2b93fb50, pReturnTypeRef=0x5598d74f66a0, bSimpleReturn=false, pStack=0x7f9c2b93fb60, nStack=0, pGPR=0x7f9c2b93fcf0, pFPR=0x7f9c2b93fd20) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/callvirtualmethod.cxx:133 data = {pMethod = 140309301652743, pStack = 0x7f9c2b93fb60, nStack = 0, pGPR = 0x7f9c2b93fcf0, pFPR = 0x7f9c2b93fd20, rax = 94114974372072, rdx = 140308722744000, xmm0 = 4.6498963718317773e-310, xmm1 = 1.4821969375237396e-323} pMethod = 140309305765824 #17 0x00007f9c409c4f5e in cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**) (pThis=pThis@entry=0x5598dadc0980, aVtableSlot=..., aVtableSlot@entry=..., pReturnTypeRef=0x5598d74f66a0, nParams=4, pParams=0x5598d97f45e0, pUnoReturn=pUnoReturn@entry=0x5598d9587f00, pUnoArgs=0x5598db0149b0, ppUnoExc=0x7f9c2b93ff70) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:233 pStack = 0x7f9c2b93fb60 pStackStart = 0x7f9c2b93fb60 pGPR = {140308722744144, 94114949750136, 94114974372000, 94114974372024, 0, 140308722744000} nGPR = 6 pFPR = {1.4821969375237396e-323, 6.3659873748720795e-314, 1.9762625833649862e-323, 4.6498963436245815e-310, 6.932171972003839e-310, 6.9321894076371007e-310, 4.6498976658011661e-310, 0} nFPR = 0 pReturnTypeDescr = 0x5598d74f66a0 __PRETTY_FUNCTION__ = "void cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**)" pCppReturn = 0x7f9c2b93fb50 bSimpleReturn = false pAdjustedThisPtr = 0x5598d825dd78 pCppArgs = 0x7f9c2b93fae0 pTempIndices = 0x7f9c2b93fb00 ppTempParamTypeDescr = 0x7f9c2b93fb20 nTempIndices = 1 #18 0x00007f9c409c5752 in bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, typelib_TypeDescription const*, void*, void**, uno_Any**) (pUnoI=0x5598dadc0980, pMemberDescr=0x5598d9be59d0, pReturn=0x5598d9587f00, pArgs=0x5598db0149b0, ppException=0x7f9c2b93ff70) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:413 aVtableSlot = pThis = 0x5598dadc0980 __PRETTY_FUNCTION__ = "void bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, const typelib_TypeDescription*, void*, void**, uno_Any**)" #19 0x00007f9c3efd15fd in binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector >*) const (this=this@entry=0x5598da13e640, returnValue=returnValue@entry=0x7f9c2b940320, outArguments=outArguments@entry=0x7f9c2b9403e0) at /home/buildslave/source/libo-core/include/uno/dispatcher.hxx:72 exc = pexc = 0x7f9c2b93ff80 retType = {_pTypeDescr = 0x5598d74f66a0} nSize = 8 retBuf = std::__debug::vector of length 8, capacity 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} outBufs = std::__debug::vector of length 0, capacity 0 args = std::__debug::vector of length 4, capacity 4 = {0x5598d99d90a0, 0x5598d99d90b8, 0x5598d99d90d0, 0x5598d99d90e8} __PRETTY_FUNCTION__ = "bool binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector*) const" isExc = false #20 0x00007f9c3efd2db7 in binaryurp::IncomingRequest::execute() const (this=this@entry=0x5598da13e640) at /home/buildslave/source/libo-core/binaryurp/source/incomingrequest.cxx:78 resetCc = true oldCc = {m_pUnoI = 0x0} ret = {data_ = _uno_Any(void)} outArgs = std::__debug::vector of length 0, capacity 0 isExc = #21 0x00007f9c3efe8bad in binaryurp::(anonymous namespace)::request(void*) (pThreadSpecificData=pThreadSpecificData@entry=0x5598da13e640) at /usr/include/c++/8/bits/unique_ptr.h:149 __PRETTY_FUNCTION__ = "void binaryurp::{anonymous}::request(void*)" #22 0x00007f9c4eb6612c in cppu_threadpool::JobQueue::enter(void const*, bool) (this=0x5598d9b316a0, nDisposeId=, nDisposeId@entry=0x5598d95c7af0, bReturnWhenNoJob=bReturnWhenNoJob@entry=true) at /home/buildslave/source/libo-core/cppu/source/threadpool/jobqueue.cxx:100 pReturn = 0x0 __PRETTY_FUNCTION__ = "void* cppu_threadpool::JobQueue::enter(const void*, bool)" #23 0x00007f9c4eb6817b in cppu_threadpool::ORequestThread::run() (this=0x5598d95c7af0) at /home/buildslave/source/libo-core/cppu/source/threadpool/thread.cxx:164 #24 0x00007f9c4eb69fb3 in osl::threadFunc(void*) (param=0x5598d95c7b00) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5598d95c7b00 #25 0x00007f9c50135357 in osl_thread_start_Impl(void*) (pData=0x5598d9bcb000) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5598d9bcb000 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #26 0x00007f9c4f7befa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #27 0x00007f9c4fe214cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 2 (Thread 0x7f9c3da23700 (LWP 47866)): #0 0x00007f9c4f7c500c in pthread_cond_wait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f9c500eb126 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x5598d836f540, pTimeout=pTimeout@entry=0x0) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:228 pCond = 0x5598d836f540 nRet = __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007f9c3eff6997 in osl::Condition::wait(TimeValue const*) (pTimeout=0x0, this=0x5598d8376d30) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 item = {request = true, tid = {_pSequence = 0x5598d83782a0}, oid = "557e655a1ed0;uno[0];b73c;80fbe29ba11f4fd8a2d69453c4dd60f8", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x5598dc17e550}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #3 0x00007f9c3eff6997 in binaryurp::Writer::execute() (this=0x5598d8376b50) at /home/buildslave/source/libo-core/binaryurp/source/writer.cxx:150 item = {request = true, tid = {_pSequence = 0x5598d83782a0}, oid = "557e655a1ed0;uno[0];b73c;80fbe29ba11f4fd8a2d69453c4dd60f8", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x5598dc17e550}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #4 0x00007f9c4de32608 in salhelper::Thread::run() (this=0x5598d8376b50) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007f9c4de32e95 in osl::threadFunc(void*) (param=0x5598d8376b60) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5598d8376b60 #6 0x00007f9c50135357 in osl_thread_start_Impl(void*) (pData=0x5598d8374a30) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5598d8374a30 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f9c4f7befa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007f9c4fe214cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 1 (Thread 0x7f9c40cc5f00 (LWP 47396)): #0 0x00007f9c4fd5f7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9c4fd4a535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f9c5012842a in (anonymous namespace)::callSystemHandler(int, siginfo_t*, void*) (signal=signal@entry=6, info=info@entry=0x7ffd06a97b30, context=context@entry=0x7ffd06a97a00) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:358 act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0 }}, sa_flags = 0, sa_restorer = 0x5598d9ef6830} i = #3 0x00007f9c50128534 in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7ffd06a97b30, context=0x7ffd06a97a00) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:454 act = {__sigaction_handler = {sa_handler = 0x5598dc17d878, sa_sigaction = 0x5598dc17d878}, sa_mask = {__val = {0, 94114971693888, 140309283268764, 94115015940216, 140724715226936, 94115015940176, 140308787840802, 1, 94114973775616, 12, 90, 94114962372464, 140309283096763, 94114988830304, 0, 94114971693960}}, sa_flags = 1291643036, sa_restorer = 0x1} Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #4 0x00007f9c4fd5f840 in () at /lib/x86_64-linux-gnu/libc.so.6 #5 0x00007f9c4fd5f7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #6 0x00007f9c4fd4a535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #7 0x00007f9c4a33bd97 in SalAbort(rtl::OUString const&, bool) (rErrorText="", bDumpCore=bDumpCore@entry=true) at /home/buildslave/source/libo-core/vcl/source/app/salplug.cxx:350 #8 0x00007f9c4a122f8e in Application::Abort(rtl::OUString const&) (rErrorText="") at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:274 #9 0x00007f9c4ff32d17 in desktop::Desktop::Exception(ExceptionCategory) (this=0x7ffd06a9a2f0, nCategory=) at /home/buildslave/source/libo-core/include/rtl/ustring.hxx:182 bInException = true nOldMode = rArgs = bRestart = bAllowRecoveryAndSessionManagement = #10 0x00007f9c4a138370 in VCLExceptionSignal_impl(void*, oslSignalInfo*) (pInfo=) at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:169 nOldMode = SystemWindowFlags::DIALOG pSVData = 0x7f9c4acde9a0 ::get()::instance> aLock = {m_isAcquired = true, m_isChecked = true, m_rSolarMutex = @0x5598d73b0b90} bIn = true nVCLException = #11 0x00007f9c500b69f5 in callSignalHandler(oslSignalInfo*) (pInfo=pInfo@entry=0x7ffd06a982b0) at /home/buildslave/source/libo-core/sal/osl/all/signalshared.cxx:59 pHandler = 0x5598d81e2b30 Action = #12 0x00007f9c501284ce in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7ffd06a984b0, context=0x7ffd06a98380) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:451 Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #13 0x00007f9c4fd5f840 in () at /lib/x86_64-linux-gnu/libc.so.6 #14 0x00007f9c4fd5f7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #15 0x00007f9c4fd4a535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #16 0x00007f9c4fd4a40f in () at /lib/x86_64-linux-gnu/libc.so.6 #17 0x00007f9c4fd58102 in () at /lib/x86_64-linux-gnu/libc.so.6 #18 0x00007f9c2f629cac in SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool) (this=0x5598d97763e0, _rAnchoredObj=..., _bCheckForMovedFwd=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformattertxtfrm.cxx:229 nIdx = 0 nToPageNum = 0 bDummy = false bPageHasFlysAnchoredBelowThis = false bDoesAnchorHadPrev = bRestart = false bSuccess = true __PRETTY_FUNCTION__ = "virtual bool SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool)" #19 0x00007f9c2f625e03 in SwObjectFormatter::FormatObj(SwAnchoredObject&, SwFrame*, SwPageFrame const*) (_rAnchoredObj=..., _pAnchorFrame=, _pPageFrame=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformatter.cxx:190 bSuccess = true rAnchorFrame = @0x5598db651b50: { = {_vptr.SwFrameAreaDefinition = 0x7f9c30889f98 , maFrameArea = SwRect = {point = Point = {x = 7554, y = 93660}, size = Size = {width = 3530, height = 1}}, maFramePrintArea = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 3530, height = 1}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5481}, = { = {_vptr.WriterListener = 0x7f9c3088a0f0 , m_pLeft = 0x0, m_pRight = 0x5598d891a3a0}, m_pRegisteredIn = 0x5598d9947700}, = {_vptr.SfxBroadcaster = 0x7f9c3088a120 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x5598d9539730, mpRoot = 0x5598d8aa7ec0, mpUpper = 0x5598db2b0e80, mpNext = 0x0, mpPrev = 0x0, m_pDrawObjs = std::unique_ptr = {get() = 0x5598da4b6c20}, mnFrameType = SwFrameType::Txt, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = true, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = true, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = false, mbCompletePaint = true, mbRetouche = true, mbInfInvalid = false, mbInfBody = true, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = true, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false} rPageFrame = @0x5598db0b0360: { = { = { = { = {_vptr.SwFrameAreaDefinition = 0x7f9c30884900 , maFrameArea = SwRect = {point = Point = {x = 284, y = 80904}, size = Size = {width = 12240, height = 15840}}, maFramePrintArea = SwRect = {point = Point = {x = 1440, y = 720}, size = Size = {width = 9360, height = 14400}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5553}, = { = {_vptr.WriterListener = 0x7f9c30884a48 , m_pLeft = 0x5598db611ef0, m_pRight = 0x5598d991b2f0}, m_pRegisteredIn = 0x5598da8c6808}, = {_vptr.SfxBroadcaster = 0x7f9c30884a78 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x5598d9539730, mpRoot = 0x5598d8aa7ec0, mpUpper = 0x5598d8aa7ec0, mpNext = 0x5598d9db09e0, mpPrev = 0x5598d9a37e00, m_pDrawObjs = std::unique_ptr = {get() = 0x0}, mnFrameType = SwFrameType::Page, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = false, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = false, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = true, mbCompletePaint = true, mbRetouche = false, mbInfInvalid = false, mbInfBody = false, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = false, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false}, m_pLower = 0x5598db352e40, m_VertPosOrientFramesFor = std::__debug::vector of length 0, capacity 0}, m_nMaxFootnoteHeight = 9223372036854775807}, m_pSortedObjs = std::unique_ptr = {get() = 0x5598d8754570}, m_pDesc = 0x5598da8c65f0, m_nPhyPageNum = 6, m_bInvalidContent = true, m_bInvalidLayout = true, m_bInvalidFlyContent = true, m_bInvalidFlyLayout = true, m_bInvalidFlyInCnt = false, m_bFootnotePage = false, m_bEmptyPage = false, m_bEndNotePage = false, m_bInvalidSpelling = true, m_bInvalidSmartTags = true, m_bInvalidAutoCmplWrds = true, m_bInvalidWordCount = true, m_bHasGrid = false, static snShadowPxWidth = 9 '\t'} pObjFormatter = std::unique_ptr = {get() = 0x5598d97763e0} #20 0x00007f9c2f5d1c01 in CalcContent(SwLayoutFrame*, bool) (pLay=pLay@entry=0x5598d8d94420, bNoColl=bNoColl@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/fly.cxx:1550 aRect = SwRect = {point = Point = {x = 4407, y = 109607}, size = Size = {width = 8116, height = 1179}} pAnchoredObj = 0x5598d9667140 bAgain = false pPageFrame = 0x5598db0b0360 i = 0 bRestartLayoutProcess = false nCnt = 6 wasFrameLowerOfLay = pTmpPrev = 0x5598d956de40 pTmpPrevFlowFrame = bPrevInvalid = false pTmpFlowFrame = pAgainObj1 = 0x0 nLoopControlMax = 20 pAgainObj2 = 0x0 nLoopControlRuns = pLoopControlCond = pLast = 0x5598db651b50 pRenderContext = pSect = 0x5598d8d94420 bCollect = pFrame = 0x5598db651b50 __PRETTY_FUNCTION__ = "void CalcContent(SwLayoutFrame*, bool)" #21 0x00007f9c2f666a45 in SwSectionFrame::CheckClipping(bool, bool) (this=this@entry=0x5598d8d94420, bGrow=bGrow@entry=false, bMaximize=) at /home/buildslave/source/libo-core/sw/source/core/layout/sectfrm.cxx:1153 aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7f9c308fa6c0 } nDiff = nDeadLine = 96024 bCalc = bExtraCalc = false aOldSz = Size = {width = 9360, height = 17584} nTop = bHeightChanged = #22 0x00007f9c2f669963 in SwSectionFrame::Format(OutputDevice*, SwBorderAttrs const*) (this=0x5598d8d94420, pRenderContext=, pAttr=) at /home/buildslave/source/libo-core/sw/inc/viewopt.hxx:472 nWidth = 9360 pSh = aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7f9c308fa6c0 } aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} nOldHeight = bOldLock = false bMaximize = true aExtraFormatToPosObjs = {mpSectFrame = 0x5598d8d94420, mbExtraFormatPerformed = false} bHasColumns = nDiff = #23 0x00007f9c2f5b130e in SwLayoutFrame::MakeAll(OutputDevice*) (this=this@entry=0x5598d8d94420) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} aNotify = { = {mpFrame = 0x5598d8d94420, maFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}}, maPrt = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 9360, height = 0}}, mnFlyAnchorOfst = 0, mnFlyAnchorOfstNoWrap = 0, mbHadFollow = false, mbInvaKeep = false, mbValidSize = false}, m_bLowersComplete = false} bVert = false fnRect = 0x7f9c308fa6c0 pAccess = std::unique_ptr = {get() = 0x5598d934bb60} pAttrs = 0x5598db6a6200 #24 0x00007f9c2f66ce95 in SwSectionFrame::MakeAll(OutputDevice*) (this=0x5598d8d94420, pRenderContext=0x5598d84f0c60) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 pSh = bCanContainSplitSection = #25 0x00007f9c2f5aee13 in SwFrame::PrepareMake(OutputDevice*) (this=0x5598d8d94420, pRenderContext=0x5598d84f0c60) at /home/buildslave/source/libo-core/sw/source/core/layout/calcmove.cxx:375 __PRETTY_FUNCTION__ = "void SwFrame::PrepareMake(vcl::RenderContext*)" #26 0x00007f9c2f6998d5 in SwFrame::Calc(OutputDevice*) const (this=, pRenderContext=) at /home/buildslave/source/libo-core/sw/source/core/layout/trvlfrm.cxx:1792 #27 0x00007f9c2f60be85 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7ffd06a99670, pRenderContext=pRenderContext@entry=0x5598d84f0c60, pLay=pLay@entry=0x5598d8d94420, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1228 aDeleteGuard = {m_pForbidFrame = 0x0} aOldFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} aOldRect = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} bNoPaint = bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 12510, y = 140309230304534}, size = Size = {width = 0, height = 0}} pLow = bTabChanged = aBoundRect = SwRect = {point = Point = {x = 0, y = 140308786494447}, size = Size = {width = 94114953877504, height = 94114961507360}} #28 0x00007f9c2f60ca3c in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7ffd06a99670, pRenderContext=pRenderContext@entry=0x5598d84f0c60, pLay=pLay@entry=0x5598daf63c30, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1407 pNext = 0x0 bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 140724715230000, y = 140308786760753}, size = Size = {width = 0, height = 0}} pLow = 0x5598d8d94420 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 0, y = 140308786494447}, size = Size = {width = 94115004433408, height = 94114996960304}} #29 0x00007f9c2f60ca3c in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7ffd06a99670, pRenderContext=pRenderContext@entry=0x5598d84f0c60, pLay=0x5598d9a37e00, bAddRect=false, bAddRect@entry=true) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1407 pNext = 0x0 bChanged = false bAlreadyPainted = true aFrameAtCompletePaint = SwRect = {point = Point = {x = 140309275401168, y = 94114967501664}, size = Size = {width = 12240, height = 15840}} pLow = 0x5598daf63c30 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 12523, y = 64635}, size = Size = {width = 422, height = 16126}} #30 0x00007f9c2f60db2c in SwLayAction::InternalAction(OutputDevice*) (this=this@entry=0x7ffd06a99670, pRenderContext=pRenderContext@entry=0x5598d84f0c60) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:575 nLoopControlRuns_1 = 1 bTakeShortcut = false pPage = 0x5598d9a37e00 nFirstPageNum = 1 rLayoutAccess = @0x5598d9843e40: {_vptr.IDocumentLayoutAccess = 0x7f9c3084ba60 } bNoLoop = true nPercentPageNum = 0 lcl_isLayoutLooping = {__this = 0x7ffd06a99670, __bNoLoop = @0x7ffd06a9954f, __rLayoutAccess = @0x5598d9843e40} #31 0x00007f9c2f60ee37 in SwLayAction::Action(OutputDevice*) (this=this@entry=0x7ffd06a99670, pRenderContext=0x5598d84f0c60) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:385 #32 0x00007f9c2f60f385 in SwLayIdle::SwLayIdle(SwRootFrame*, SwViewShellImp*) (this=0x7ffd06a99790, pRt=, pI=) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aAction = {m_pRoot = 0x5598d8aa7ec0, m_pImp = 0x5598dabb8e80, m_pOptTab = 0x0, m_pWait = std::unique_ptr = {get() = 0x0}, m_aFrameStack = std::__debug::vector of length 2, capacity 2 = {0x5598daf63c30, 0x5598d8d94420}, m_aFrameDeleteGuards = std::__debug::vector of length 2, capacity 2 = {std::unique_ptr = {get() = 0x5598db353180}, std::unique_ptr = {get() = 0x5598d9ba3f50}}, m_nPreInvaPage = 65535, m_nStartTicks = 428415339, m_nInputType = (VclInputFlags::MOUSE | VclInputFlags::KEYBOARD | VclInputFlags::PAINT | VclInputFlags::OTHER | VclInputFlags::APPEVENT), m_nEndPage = 65535, m_nCheckPageNum = 5, m_bPaint = true, m_bComplete = true, m_bCalcLayout = false, m_bAgain = false, m_bNextCycle = false, m_bInterrupt = false, m_bIdle = true, m_bReschedule = false, m_bCheckPages = true, m_bUpdateExpFields = false, m_bBrowseActionStop = false, m_bWaitAllowed = false, m_bPaintExtraData = false, m_bActionInProgress = true, mbFormatContentOnInterrupt = false} bInterrupt = false bActions = nBoolIdx = rVOpt = aBools = std::__debug::vector of length 1, capacity 64 = {1} bInValid = bWordCount = pPg = pViewShell = bSpell = bACmplWrd = bSmartTags = #33 0x00007f9c2fb7c76d in SwViewShell::LayoutIdle() (this=0x5598db684400) at /home/buildslave/source/libo-core/sw/source/core/view/viewsh.cxx:722 aSaveLRU = {} aIdle = {m_pRoot = 0x5598d8aa7ec0, m_pImp = 0x5598dabb8e80, m_pContentNode = 0x5598db654c40, m_nTextPos = 0, m_bPageValid = true, m_bIndicator = true} aCurr = {pPrev = 0x5598db684400, pRoot = 0x5598d8aa7ec0} #34 0x00007f9c2f27ac76 in sw::DocumentTimerManager::DoIdleJobs(Timer*) (this=0x5598da9f2fe0) at /home/buildslave/source/libo-core/sw/source/core/inc/rootfrm.hxx:207 pLayout = __for_range = @0x7ffd06a99840: {m_vector = std::__debug::vector of length 1, capacity 1 = {0x5598d8aa7ec0}} __for_begin = 0x5598d8aa7ec0 __for_end = 0x99999999999999f9 eJob = sw::DocumentTimerManager::IdleJob::Layout #35 0x00007f9c2f27b0e9 in sw::DocumentTimerManager::LinkStubDoIdleJobs(void*, Timer*) (instance=, data=) at /home/buildslave/source/libo-core/sw/source/core/doc/DocumentTimerManager.cxx:157 #36 0x00007f9c4a14071e in Link::Call(Timer*) const (data=, this=) at /home/buildslave/source/libo-core/include/tools/link.hxx:110 #37 0x00007f9c4a14071e in Timer::Invoke() (this=) at /home/buildslave/source/libo-core/vcl/source/app/timer.cxx:75 #38 0x00007f9c4a0ecb5d in Scheduler::CallbackTaskScheduling() () at /home/buildslave/source/libo-core/vcl/source/app/scheduler.cxx:471 bTaskAlive = pTask = 0x5598da9f2ff8 aZone = { = { = {static s_nBufferSize = 0, static s_pBufferFullCallback = 0x0, static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 47396, m_sArgs = ""}, m_sName = 0x7f9c30182610 "sw::DocumentTimerManager m_aDocIdle"}, m_nCreateTime = 0, m_nNesting = -1} pSVData = 0x7f9c4acde9a0 ::get()::instance> rSchedCtx = { STACK, ImplSchedulerDataDEFAULT, ImplSchedulerDataREPAINT, ImplSchedulerData} nTime = 11409345436 pSchedulerData = pPrevSchedulerData = pMostUrgent = pPrevMostUrgent = 0x0 nMostUrgentPriority = 7 nMinPeriod = nReadyPeriod = nTasks = nTaskPriority = 8 __PRETTY_FUNCTION__ = "static void Scheduler::CallbackTaskScheduling()" #39 0x00007f9c4a39742d in SalTimer::CallCallback() (this=) at /home/buildslave/source/libo-core/vcl/inc/saltimer.hxx:54 aGuard = {pT = 0x5598d73b0b90} pSVData = aTimeOfDay = {tv_sec = 1628292948, tv_usec = 996626} bRet = true #40 0x00007f9c4a39742d in SvpSalInstance::CheckTimeout(bool) (this=this@entry=0x5598d73b1790, bExecuteTimers=bExecuteTimers@entry=true) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:215 aGuard = {pT = 0x5598d73b0b90} pSVData = aTimeOfDay = {tv_sec = 1628292948, tv_usec = 996626} bRet = true #41 0x00007f9c4a39773c in SvpSalInstance::DoYield(bool, bool) (this=0x5598d73b1790, bWait=, bHandleAllCurrentEvents=) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:460 __PRETTY_FUNCTION__ = "virtual bool SvpSalInstance::DoYield(bool, bool)" bEvent = false pSVData = 0x7f9c4acde9a0 ::get()::instance> bTimeout = bSkipPoll = pMutex = #42 0x00007f9c4a125e5d in ImplYield(bool, bool) (i_bWait=i_bWait@entry=true, i_bAllEvents=i_bAllEvents@entry=false) at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:455 pSVData = 0x7f9c4acde9a0 ::get()::instance> bProcessedEvent = #43 0x00007f9c4a125ffd in Application::Yield() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:532 #44 0x00007f9c4a12604b in Application::Execute() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:444 pSVData = 0x7f9c4acde9a0 ::get()::instance> #45 0x00007f9c4ff3fbb6 in desktop::Desktop::Main() (this=0x7ffd06a9a2f0) at /home/buildslave/source/libo-core/desktop/source/app/app.cxx:1603 aOptions = { = { = {_vptr.ConfigurationBroadcaster = 0x7f9c4ba86ca8 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, = {_vptr.ConfigurationListener = 0x7f9c4ba86cd8 }, }, static sm_pSingleImplConfig = 0x5598d833bbc0, static sm_nAccessibilityRefCount = 6} xRestartManager = uno::Reference to (class comphelper::OOfficeRestartManager *) 0x5598d750b1f8 bAbort = bExistsRecoveryData = false bExistsSessionData = false pidfileName = "" aTitle = "LibreOfficeDev 7.3.0.0.alpha0 [26cfb57abfc037752bc02dae043f08ac7b2bc711]" aEvent = { = {Source = empty uno::Reference}, EventName = "OnStartApp", ViewController = empty uno::Reference, Supplement = uno::Any(void)} xDesktop = uno::Reference to (class framework::Desktop *) 0x5598d825dd58 bMustLockProfile = bCrashed = false aAppearanceCfg = { = { = {_vptr.ConfigurationBroadcaster = 0x7f9c4ba86d30 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, sSubTree = "Office.Common/View", m_xHierarchyAccess = uno::Reference to (class configmgr::RootAccess *) 0x5598d82eca28, xChangeLstnr = empty uno::Reference, m_nMode = ConfigItemMode::NONE, m_bIsModified = false, m_bEnableInternalNotification = false, m_nInValueChange = 0}, nDragMode = DragMode::SystemDep, nSnapMode = SnapType::NONE, nMiddleMouse = MouseMiddleButtonAction::PasteSelection, nAAMinPixelHeight = 8, bFontAntialiasing = true, bMenuMouseFollow = true, static bInitialized = true} layer = {m_aEnvTypeName = "gcc3", m_xPreviousContext = uno::Reference to (class (anonymous namespace)::DesktopEnvironmentContext *) 0x5598d73b1908} eStatus = rCmdLineArgs = @0x7f9c500989c0: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest3b66886a-f70e-11eb-a9f6-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} inst_fin = desktop::userinstall::EXISTED xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x5598d73ca820 #46 0x00007f9c4a13ef80 in ImplSVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:199 pSVData = 0x7f9c4acde9a0 ::get()::instance> nReturn = 1 bWasInitVCL = bInit = true nRet = 0 #47 0x00007f9c4a13f100 in SVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:231 #48 0x00007f9c4ff89af8 in soffice_main() () at /home/buildslave/source/libo-core/desktop/source/app/sofficemain.cxx:98 rCmdLineArgs = @0x7f9c500989c0: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest3b66886a-f70e-11eb-a9f6-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} aUnknown = "" bSuccess = aDesktop = { = { = {_vptr.ILibreOfficeKitNotifier = 0x7f9c5008c768 }, m_pCallbackData = 0x0, m_pCallback = 0x0}, m_rSplashScreen = empty uno::Reference, m_bCleanedExtensionCache = false, m_bServicesRegistered = true, m_aBootstrapError = desktop::Desktop::BE_OK, m_aBootstrapErrorMessage = "", m_aBootstrapStatus = desktop::Desktop::BS_OK, m_xLockfile = std::unique_ptr = {get() = 0x0}, m_firstRunTimer = { = {_vptr.Task = 0x7f9c4ac38200 , mpSchedulerData = 0x0, mpDebugName = 0x7f9c50015180 "desktop::Desktop m_firstRunTimer", mePriority = TaskPriority::DEFAULT, mbActive = false, mbStatic = false}, maInvokeHandler = {function_ = 0x7f9c4ff37e5c , instance_ = 0x7ffd06a9a2f0, file_ = 0x7f9c50015140 "/home/buildslave/source/libo-core/desktop/source/app/app.cxx", line_ = 431, target_ = 0x7f9c50015118 "Desktop::LinkStubAsyncInitFirstRun"}, mnTimeout = 3000, mbAuto = false}, m_aUpdateThread = {_M_id = {_M_thread = 0}}} #49 0x00005598d62228ee in sal_main () at /home/buildslave/source/libo-core/desktop/source/app/main.c:49 ret = #50 0x00005598d622293b in main (argc=, argv=) at /home/buildslave/source/libo-core/desktop/source/app/main.c:47 ret =