[New LWP 1852917] [New LWP 1854472] [New LWP 1854480] [New LWP 1853313] [New LWP 1853296] [New LWP 1853605] [New LWP 1853607] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f849a447eec in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f8493a77e00 (LWP 1852917))] Thread 7 (Thread 0x7f8488bb96c0 (LWP 1853607)): #0 0x00007f849a4c7924 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f849a7ad6e7 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x7f8480000f00, pBuffer=pBuffer@entry=0x7f8478005cb8, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:453 socket = 13 nRet = #2 0x00007f849a7ad9cc in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x7f8480000f00, pBuffer=0x7f8478005cb8, n=) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:527 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f848aae1683 in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x7f8480001550) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x7f8480001520, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f848aa7960b in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f8480001548, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:70 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f848aa7b5ae in binaryurp::Reader::execute() (this=0x7f8480006a80) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:105 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x7f8480000fb0, state_ = @0x7f8480006ac8, buffer_ = uno::Sequence of length 32643 = {21 '\025', -60 '\304', 81 'Q', -51 '\315', -35 '\335', 11 '\v', 72 'H', -71 '\271', 56 '8', 52 '4', 54 '6', 55 '7', 56 '8', 55 '7', 51 '3', 97 'a', 97 'a', 48 '0', 59 ';', 103 'g', 99 'c', 99 'c', 51 '3', 91 '[', 48 '0', 93 ']', 59 ';', 57 '9', 99 'c', 102 'f', 56 '8', 99 'c', 57 '9', 54 '6', 102 'f', 97 'a', 99 'c', 52 '4', 98 'b', 52 '4', 101 'e', 49 '1', 102 'f', 98 'b', 102 'f', 101 'e', 51 '3', 55 '7', 50 '2', 55 '7', 49 '1', 99 'c', 101 'e', 57 '9', 53 '5', 50 '2', 98 'b', 55 '7', 0 '\000', -119 '\211', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -123 '\205', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 52 '4', 0 '\000', 0 '\000', 0 '\000', 55 '7', 0 '\000', 102 'f', 0 '\000', 56 '8', 0 '\000', 52 '4', 0 '\000', 54 '6', 0 '\000', 99 'c', 0 '\000', 54 '6', 0 '\000', 53 '5', 0 '\000', 55 '7', 0 '\000', 100 'd', 0 '\000', 49 '1', 0 '\000', 48 '0', 0 '\000', 59 ';', 0 '\000', 103 'g', 0 '\000', 99 'c', 0 '\000', 99 'c', 0 '\000', 51 '3', 0 '\000', 91 '[', 0 '\000', 48 '0', 0 '\000', 93 ']', 0 '\000', 59 ';', 0 '\000', 57 '9', 0 '\000', 99 'c', 0 '\000', 102 'f', 0 '\000', 56 '8', 0 '\000', 99 'c', 0 '\000', 57 '9', 0 '\000', 54 '6', 0 '\000', 102 'f', 0 '\000', 97 'a', 0 '\000', 99 'c', 0 '\000', 52 '4', 0 '\000', 98 'b', 0 '\000', 52 '4', 0 '\000', 101 'e', 0 '\000', 49 '1', 0 '\000', 102 'f', 0 '\000', 98 'b', 0 '\000', 102 'f', 0 '\000', 101 'e', 0 '\000', 51 '3', 0 '\000', 55 '7', 0 '\000', 50 '2', 0 '\000', 55 '7', 0 '\000', 49 '1', 0 '\000', 99 'c', 0 '\000', 101 'e', 0 '\000', 57 '9', 0 '\000', 53 '5', 0 '\000', 50 '2', 0 '\000', 98 'b', 0 '\000', 55 '7', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 102 'f', 102 'f', 102 'f', -123 '\205', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'...}, data_ = 0x7f847800e804 "", end_ = 0x7f847800e804 ""} header = {bridge_ = rtl::Reference to 0x7f8480000fb0, state_ = @0x7f8480006ac8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x7f8478005cc0 "\020\025~\235BV", end_ = 0x7f8478005cc0 "\020\025~\235BV"} size = con = uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f8480001548 #7 0x00007f849a236121 in salhelper::Thread::run() (this=0x7f8480006a80) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7f8480006a80}, m_bDismissed = false} #8 0x00007f849a2363c9 in osl::threadFunc(void*) (param=0x7f8480006a90) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f8480006a90 #9 0x00007f849a7be3b3 in osl_thread_start_Impl(void*) (pData=0x7f8480008f70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f8480008f70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f849a4461f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f849a4c689c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f84893ba6c0 (LWP 1853605)): #0 0x00007f849a442f16 in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f849a4455d8 in pthread_cond_wait () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f849a79beef in std::condition_variable::wait > (__p=..., __lock=..., this=0x7f8480008560) at /usr/include/c++/12/condition_variable:102 g = {_M_device = 0x7f8480008590, _M_owns = true} pCond = 0x7f8480008560 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #3 osl_waitCondition(oslCondition, TimeValue const*) (Condition=, pTimeout=) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:125 g = {_M_device = 0x7f8480008590, _M_owns = true} pCond = 0x7f8480008560 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #4 0x00007f848aa7ff0c in osl::Condition::wait(TimeValue const*) (pTimeout=0x0, this=0x7f84800084b0) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 item = {tid = {_pSequence = 0x7f8478001750}, oid = "7f1a2000e0e0;uno[0];1a9075;e78d588141b464abdc1fe262a43425c", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x7f846c5c2920}, currentContext = {m_pUnoI = 0x0}, returnValue = {data_ = _uno_Any(void)}, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, request = true, setter = false, exception = false, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #5 binaryurp::Writer::execute() (this=0x7f84800082d0) at /home/buildslave/source/libo-core/binaryurp/source/writer.cxx:151 item = {tid = {_pSequence = 0x7f8478001750}, oid = "7f1a2000e0e0;uno[0];1a9075;e78d588141b464abdc1fe262a43425c", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x7f846c5c2920}, currentContext = {m_pUnoI = 0x0}, returnValue = {data_ = _uno_Any(void)}, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, request = true, setter = false, exception = false, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #6 0x00007f849a236121 in salhelper::Thread::run() (this=0x7f84800082d0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7f84800082d0}, m_bDismissed = false} #7 0x00007f849a2363c9 in osl::threadFunc(void*) (param=0x7f84800082e0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f84800082e0 #8 0x00007f849a7be3b3 in osl_thread_start_Impl(void*) (pData=0x7f8480008ce0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f8480008ce0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #9 0x00007f849a4461f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #10 0x00007f849a4c689c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f848b32c6c0 (LWP 1853296)): #0 0x00007f849a4c76df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f849a7ad210 in osl_acceptPipe(oslPipe) (pPipe=0x56429d70fa80) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 9 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x56429d70fa80, _M_owns = false} flags = #2 0x00007f849a622e5f in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x56429d7b2d40, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f849a622964 in desktop::PipeIpcThread::execute() (this=0x56429d7b2d10) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1127 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007f849a236121 in salhelper::Thread::run() (this=0x56429d7b2d10) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x56429d7b2d10}, m_bDismissed = false} #5 0x00007f849a2363c9 in osl::threadFunc(void*) (param=0x56429d7b2d20) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x56429d7b2d20 #6 0x00007f849a7be3b3 in osl_thread_start_Impl(void*) (pData=0x56429d07f500) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x56429d07f500 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f849a4461f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #8 0x00007f849a4c689c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7f848aa476c0 (LWP 1853313)): #0 0x00007f849a4c76df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f849a7ad210 in osl_acceptPipe(oslPipe) (pPipe=0x7f8480001570) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 12 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x7f8480001570, _M_owns = false} flags = #2 0x00007f848aae1bb1 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x7f848aa454f8, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f848aae18eb in io_acceptor::PipeAcceptor::accept() (this=0x7f8480000d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x7f8480001570} pConn = rtl::Reference to 0x7f8480009530 status = #4 0x00007f848aae75b8 in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x56429d7bd800, sConnectionDescription="pipe,name=pytest88781dc4-23e4-11f0-bae5-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:198 guard = {m_pFlag = 0x56429d7bd878} r = empty uno::Reference #5 0x00007f848c2efa6d in desktop::Acceptor::run() (this=this@entry=0x56429d7be6d0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:110 g = {_M_device = 0x56429d7be708, _M_owns = true} rConnection = empty uno::Reference aDescription = "pipe,name=pytest88781dc4-23e4-11f0-bae5-98f2b32c495c,uniqueValue=140207059899728" rInstanceProvider = uno::Reference to (desktop::AccInstanceProvider *) 0x7f8480000d38 #6 0x00007f848c2eff19 in desktop::offacc_workerfunc(void*) (acc=0x56429d7be6d0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:46 #7 0x00007f849a7be3b3 in osl_thread_start_Impl(void*) (pData=0x56429d7c3c90) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x56429d7c3c90 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f849a4461f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #9 0x00007f849a4c689c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7f84721c06c0 (LWP 1854480)): #0 0x00007f849a44312b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f849a4494da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f849a7abbe9 in osl_acquireMutex(oslMutex) (pMutex=0x56429c7e9390) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f84948497e7 in osl::Mutex::acquire() (this=0x56429c7e9698) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x56429c7e9560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x56429c7e9690, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x56429c7e9560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f849654274e in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f8496542967 in osl::Guard::Guard(comphelper::SolarMutex*) (this=, pT_=) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:137 #7 0x00007f8496541f57 in drawinglayer::primitive2d::BufferedDecompositionFlusher::run() (this=0x7f846c635cf0) at /home/buildslave/source/libo-core/drawinglayer/source/primitive2d/BufferedDecompositionFlusher.cxx:129 aGuard = {pT = 0x56429c7e9690} aNow = {__d = {__r = 49830067803962577}} aRemoved1 = std::__debug::vector of length 1, capacity 1 = {rtl::Reference to 0x56429e3e4f10} aRemoved2 = std::__debug::vector of length 0, capacity 0 #8 0x00007f849654256b in osl::threadFunc(void*) (param=0x7f846c635cf0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f846c635cf0 #9 0x00007f849a7be3b3 in osl_thread_start_Impl(void*) (pData=0x7f846c63b540) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f846c63b540 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f849a4461f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f849a4c689c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 2 (Thread 0x7f84709ce6c0 (LWP 1854472)): #0 0x00007f849a44312b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f849a4494da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f849a7abbe9 in osl_acquireMutex(oslMutex) (pMutex=0x56429c7e9390) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f84948497e7 in osl::Mutex::acquire() (this=0x56429c7e9698) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x56429c7e9560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x56429c7e9690, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x56429c7e9560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f8498f1fc80 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f8498f1fcbd in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7f84709cb570) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1342 #8 0x00007f84990236be in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x7f8466977380) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:841 g = {> = {pT = 0x56429c7e9690}, } #9 0x00007f8499006a8a in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f84709cb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1600 bMinimized = bStartPres = pFrameName = xWindow = uno::Reference to (com::sun::star::uno::XInterface *) 0x1d bHidden = pWindow = {m_rInnerRef = empty rtl::Reference} aReadLock = {pT = 0x7f84709cb9f0} aRequest = Python Exception : bThrow = #10 0x00007f849900705b in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f84709cb9f0, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:535 g = {pT = 0x7f84709cb9f0} #11 0x00007f849900bef6 in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f84709cb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1183 xTargetFrameProps = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f8466977440 bResult = aWriteLock = {pT = 0x7f84709cb9f0} sTarget = "_blank" xTargetFrame = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f84669773f0 xTargetLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f8466977418 bHidden = bMinimized = false bPreview = false bStartPres = lDescriptor = uno::Sequence of length 12 = {{Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x7f8466aea528}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f8478006308}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f8478006308}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x7f8466d6ee58}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_MS_Word_2007"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AbortOnLoadFailure", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "MS Word 2007 XML"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx" xLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f8466d4da10 xAsyncLoader = empty uno::Reference xSyncLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f8466d4da38 #12 0x00007f849900c1d2 in framework::LoadEnv::start() (this=this@entry=0x7f84709cb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:415 bStarted = #13 0x00007f849900c8db in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f84709cb9f0, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx", lMediaDescriptor=uno::Sequence of length 3 = {...}, xBaseFrame=uno::Reference to (framework::Desktop *) 0x56429caac0e8, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:311 g = {pT = 0x7f84709cb9f0} aRealURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx" xParser = uno::Reference to ((anonymous namespace)::URLTransformer *) 0x7f8466bbad08 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007f849900cb25 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x56429caac0f8, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x56429c7e60c8, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:167 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7f8478010a80}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x56429c7e60c8, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x56429caac0e8, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x7f84669773f0, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 12 elements}, static PROP_ABORTED = {pData = 0x7f849921f2f0