[New LWP 21757] [New LWP 45280] [New LWP 22281] [New LWP 5850] [New LWP 22046] [New LWP 22049] [New LWP 22282] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f7ae4f477bb in raise () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f7ad5eb0f00 (LWP 21757))] Thread 7 (Thread 0x7f7ad240d700 (LWP 22282)): #0 0x00007f7ae500a686 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f7ae52fc4d8 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x563d7309ce10, pBuffer=pBuffer@entry=0x563d733c8e58, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:439 nRet = 0 #2 0x00007f7ae52fcd00 in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x563d7309ce10, pBuffer=0x563d733c8e58, n=n@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:509 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f7ad421d7ba in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x563d7309e8b0) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 0x00007f7ad421d7ba in io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x563d7309e880, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f7ad41d3792 in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x563d7309e8a8, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f7ad41d7e45 in binaryurp::Reader::execute() (this=0x563d730a3360) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:104 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x563d7309d070, state_ = @0x563d730a33a8, buffer_ = empty uno::Sequence, data_ = 0x563d7343e035 "", end_ = 0x563d7343e035 ""} header = {bridge_ = rtl::Reference to 0x563d7309d070, state_ = @0x563d730a33a8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x563d733c8e60 "Y", end_ = 0x563d733c8e60 "Y"} size = con = uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x563d7309e8a8 #7 0x00007f7ae301a608 in salhelper::Thread::run() (this=0x563d730a3360) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #8 0x00007f7ae301ae95 in osl::threadFunc(void*) (param=0x563d730a3370) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x563d730a3370 #9 0x00007f7ae531d357 in osl_thread_start_Impl(void*) (pData=0x563d730a2b30) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x563d730a2b30 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f7ae49a6fa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #11 0x00007f7ae50094cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f7ad4190700 (LWP 22049)): #0 0x00007f7ae500a437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f7ae52fcddd in osl_acceptPipe(oslPipe) (pPipe=pPipe@entry=0x563d7309e580) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007f7ad421dd77 in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x7f7ad418e250) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 pipe = {m_handle = 0x563d7309e580} pConn = rtl::Reference to 0x563d730a5fa0 status = #3 0x00007f7ad421dd77 in io_acceptor::PipeAcceptor::accept() (this=0x563d7309db80) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x563d7309e580} pConn = rtl::Reference to 0x563d730a5fa0 status = #4 0x00007f7ad4225eac in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x563d72f14250, sConnectionDescription="pipe,name=pytest270ef2a4-f64f-11eb-9427-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:199 guard = {m_pFlag = 0x563d72f142a8} r = empty uno::Reference #5 0x00007f7ad529f06e in desktop::Acceptor::run() (this=this@entry=0x563d72f13310) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 aDescription = "pipe,name=pytest270ef2a4-f64f-11eb-9427-98f2b32c495c,uniqueValue=94821923023024" rInstanceProvider = uno::Reference to (class desktop::AccInstanceProvider *) 0x563d7301bb18 rConnection = empty uno::Reference #6 0x00007f7ad52a0479 in desktop::offacc_workerfunc(void*) (acc=0x563d72f13310) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:44 #7 0x00007f7ae531d357 in osl_thread_start_Impl(void*) (pData=0x563d72f154e0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x563d72f154e0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f7ae49a6fa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007f7ae50094cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f7ad4a7f700 (LWP 22046)): #0 0x00007f7ae500a437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f7ae52fcddd in osl_acceptPipe(oslPipe) (pPipe=0x563d72f08a70) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007f7ae51682c1 in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x563d72f088e0) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #3 0x00007f7ae51682c1 in desktop::PipeIpcThread::execute() (this=0x563d72f088b0) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1138 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007f7ae301a608 in salhelper::Thread::run() (this=0x563d72f088b0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007f7ae301ae95 in osl::threadFunc(void*) (param=0x563d72f088c0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x563d72f088c0 #6 0x00007f7ae531d357 in osl_thread_start_Impl(void*) (pData=0x563d72f096b0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x563d72f096b0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f7ae49a6fa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007f7ae50094cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7f7ac2780700 (LWP 5850)): #0 0x00007f7ae49ad35b in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f7ae52d30d8 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x563d75ab4800, pTimeout=pTimeout@entry=0x7f7ac277e640) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:203 ret = tp = {tv_sec = 1628210874, tv_usec = 697579} to = {tv_sec = 1628210876, tv_nsec = 697579000} pCond = 0x563d75ab4800 nRet = 0 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007f7ae3d5cb69 in osl::Condition::wait(TimeValue const*) (pTimeout=0x7f7ac277e640, this=0x7f7ac277e450) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x563d75ab4800}, thread = rtl::Reference to 0x563d751b9ce0} #3 0x00007f7ae3d5cb69 in osl::Condition::wait(TimeValue const&) (timeout=..., this=0x7f7ac277e450) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x563d75ab4800}, thread = rtl::Reference to 0x563d751b9ce0} #4 0x00007f7ae3d5cb69 in cppu_threadpool::ThreadPool::waitInPool(rtl::Reference const&) (this=0x563d730a4e30, pThread=rtl::Reference to 0x563d751b9ce0) at /home/buildslave/source/libo-core/cppu/source/threadpool/threadpool.cxx:134 waitingThread = {condition = {condition = 0x563d75ab4800}, thread = rtl::Reference to 0x563d751b9ce0} #5 0x00007f7ae3d502d0 in cppu_threadpool::ORequestThread::run() (this=0x563d751b9ce0) at /home/buildslave/source/libo-core/include/salhelper/simplereferenceobject.hxx:73 #6 0x00007f7ae3d52011 in osl::threadFunc(void*) (param=0x563d751b9cf0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x563d751b9cf0 #7 0x00007f7ae531d357 in osl_thread_start_Impl(void*) (pData=0x563d73b59300) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x563d73b59300 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f7ae49a6fa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007f7ae50094cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7f7ad2c0e700 (LWP 22281)): #0 0x00007f7ae49ad00c in pthread_cond_wait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f7ae52d3126 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x563d730a0410, pTimeout=pTimeout@entry=0x0) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:228 pCond = 0x563d730a0410 nRet = __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007f7ad41e1997 in osl::Condition::wait(TimeValue const*) (pTimeout=0x0, this=0x563d730a4da0) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 item = {request = true, tid = {_pSequence = 0x563d730a59f0}, oid = "55a8329eb480;uno[0];530c;d985b9bb113b4bf5a1dd45a967e615", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x563d744195d0}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #3 0x00007f7ad41e1997 in binaryurp::Writer::execute() (this=0x563d730a4bc0) at /home/buildslave/source/libo-core/binaryurp/source/writer.cxx:150 item = {request = true, tid = {_pSequence = 0x563d730a59f0}, oid = "55a8329eb480;uno[0];530c;d985b9bb113b4bf5a1dd45a967e615", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x563d744195d0}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #4 0x00007f7ae301a608 in salhelper::Thread::run() (this=0x563d730a4bc0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007f7ae301ae95 in osl::threadFunc(void*) (param=0x563d730a4bd0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x563d730a4bd0 #6 0x00007f7ae531d357 in osl_thread_start_Impl(void*) (pData=0x563d730a2aa0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x563d730a2aa0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f7ae49a6fa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007f7ae50094cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 2 (Thread 0x7f7abd347700 (LWP 45280)): #0 0x00007f7ae49b029c in __lll_lock_wait () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007f7ae49a97d1 in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f7ae52fa31a in osl_acquireMutex(oslMutex) (pMutex=0x563d720de1a0) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:100 nRet = #3 0x00007f7adf5832d7 in osl::Mutex::acquire() (this=0x563d720deb98) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:61 pInst = 0x563d720df790 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 0x00007f7adf5832d7 in SvpSalYieldMutex::doAcquire(unsigned int) (this=0x563d720deb90, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:383 pInst = 0x563d720df790 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f7ae334a6ac in comphelper::SolarMutex::acquire(unsigned int) (nLockCount=1, this=0x563d720deb90) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 g = {> = {pT = 0x563d720deb90}, } #6 0x00007f7ae334a6ac in osl::Guard::Guard(comphelper::SolarMutex&) (t=..., this=0x7f7abd343ee8) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:142 g = {> = {pT = 0x563d720deb90}, } #7 0x00007f7ae334a6ac in SolarMutexGuard::SolarMutexGuard() (this=0x7f7abd343ee8) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1348 g = {> = {pT = 0x563d720deb90}, } #8 0x00007f7ae334a6ac in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x563d75520c50) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:846 g = {> = {pT = 0x563d720deb90}, } #9 0x00007f7ae32f1ebf in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f7abd344550) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 xWindow = uno::Reference to (class com::sun::star::uno::XInterface *) 0x563d720fc700 bHidden = bMinimized = pFrameName = {, true>> = {_M_cur = 0x7f7a00000000}, } aReadLock = {pT = 0x7f7abd344550} aRequest = bThrow = #10 0x00007f7ae32f2860 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f7abd344550, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:515 #11 0x00007f7ae32faf23 in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f7abd344550) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1163 bResult = aWriteLock = {pT = 0x7f7abd344550} sTarget = "_blank" xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x563d75520cc0 xTargetLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x563d75520ce8 bHidden = bMinimized = bPreview = lDescriptor = uno::Sequence of length 11 = {{Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x563d739f4a48}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x563d743dc708}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x563d73f7e918}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_Rich_Text_Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x563d739f4a48}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "Rich Text Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xLoader = uno::Reference to (class (anonymous namespace)::SfxFrameLoader_Impl *) 0x563d75ab4710 #12 0x00007f7ae32fb1a0 in framework::LoadEnv::start() (this=this@entry=0x7f7abd344550) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:395 bStarted = #13 0x00007f7ae32fc209 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f7abd344550, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", lMediaDescriptor=uno::Sequence of length 2 = {...}, xBaseFrame=uno::Reference to (class framework::Desktop *) 0x563d72f8bd68, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:300 g = {pT = 0x7f7abd344550} aRealURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xParser = uno::Reference to (class (anonymous namespace)::URLTransformer *) 0x563d74a59308 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007f7ae32fc5c4 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (class framework::Desktop *) 0x563d72f8bd78, xContext=uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x563d720f8820, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 2 = {...}) at /home/buildslave/build/workdir/UnoApiHeadersTarget/offapi/normal/com/sun/star/frame/XFrame.hpp:25 aEnv = {m_mutex = {mutex = 0x563d73906b70}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x563d720f8820, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x563d72f8bd68, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x563d75520cc0, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 11 elements}, }, m_aURL = {Complete = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Main = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Protocol = "file://", User = "", Password = "", Server = "", Port = 0, Path = "/srv/crashtestdata/files/caolan/", Name = "swfntobj_drawtext_heap_buffer_overflow.sample", Arguments = "", Mark = ""}, m_eFeature = LoadEnvFeatures::NONE, m_eContentType = framework::LoadEnv::E_CAN_BE_LOADED, m_bCloseFrameOnError = true, m_bReactivateControllerOnError = false, m_xAsynchronousJob = empty uno::Reference, m_bLoaded = true, m_aTargetLock = {m_mutex = {mutex = 0x563d7333fbc0}, m_xActionLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x563d75520ce8, m_bActionLocked = true}, m_pQuietInteraction = rtl::Reference to 0x563d739f4a20} loadEnvFeatures = LoadEnvFeatures::NONE aDescriptor = {maValues = std::__debug::unordered_map with 2 elements} xComponent = empty uno::Reference aZone = { = { = {static s_nBufferSize = 0, static s_pBufferFullCallback = 0x0, static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 21757, m_sArgs = ""}, m_sName = 0x7f7ae34f55f1 "loadComponentFromURL"}, m_nCreateTime = 0, m_nNesting = -1} #15 0x00007f7ae333ec83 in framework::Desktop::loadComponentFromURL(rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (this=0x563d72f8bd00, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTargetFrameName="_blank", nSearchFlags=0, lArguments=uno::Sequence of length 2 = {...}) at /home/buildslave/source/libo-core/framework/source/services/desktop.cxx:605 aDescriptor = { = {m_aMap = std::__debug::unordered_map with 2 elements}, } bOnMainThread = false xThis = uno::Reference to (class framework::Desktop *) 0x563d72f8bd78 #16 0x00007f7ad5bb1707 in gcc3::callVirtualMethod(void*, unsigned int, void*, _typelib_TypeDescriptionReference*, bool, unsigned long*, unsigned int, unsigned long*, double*) (pThis=0x563d72f8bd78, nVtableIndex=3, pRegisterReturn=0x7f7abd344b50, pReturnTypeRef=0x563d722246a0, bSimpleReturn=false, pStack=0x7f7abd344b60, nStack=0, pGPR=0x7f7abd344cf0, pFPR=0x7f7abd344d20) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/callvirtualmethod.cxx:133 data = {pMethod = 140165774568711, pStack = 0x7f7abd344b60, nStack = 0, pGPR = 0x7f7abd344cf0, pFPR = 0x7f7abd344d20, rax = 94821926690888, rdx = 140165137058496, xmm0 = 4.6848253904212391e-310, xmm1 = 1.4821969375237396e-323} pMethod = 140165778681792 #17 0x00007f7ad5baff5e in cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**) (pThis=pThis@entry=0x563d775dd380, aVtableSlot=..., aVtableSlot@entry=..., pReturnTypeRef=0x563d722246a0, nParams=4, pParams=0x563d745e01d0, pUnoReturn=pUnoReturn@entry=0x563d739da3a0, pUnoArgs=0x563d75f2c470, ppUnoExc=0x7f7abd344f70) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:233 pStack = 0x7f7abd344b60 pStackStart = 0x7f7abd344b60 pGPR = {140165137058640, 94821921897848, 94821926690816, 94821926690840, 0, 140165137058496} nGPR = 6 pFPR = {1.4821969375237396e-323, 6.3659873748720795e-314, 1.9762625833649862e-323, 4.6848254086996917e-310, 6.9250778965596298e-310, 6.9250982280974105e-310, 4.6848276949311562e-310, 0} nFPR = 0 pReturnTypeDescr = 0x563d722246a0 __PRETTY_FUNCTION__ = "void cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**)" pCppReturn = 0x7f7abd344b50 bSimpleReturn = false pAdjustedThisPtr = 0x563d72f8bd78 pCppArgs = 0x7f7abd344ae0 pTempIndices = 0x7f7abd344b00 ppTempParamTypeDescr = 0x7f7abd344b20 nTempIndices = 1 #18 0x00007f7ad5bb0752 in bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, typelib_TypeDescription const*, void*, void**, uno_Any**) (pUnoI=0x563d775dd380, pMemberDescr=0x563d75baf740, pReturn=0x563d739da3a0, pArgs=0x563d75f2c470, ppException=0x7f7abd344f70) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:413 aVtableSlot = pThis = 0x563d775dd380 __PRETTY_FUNCTION__ = "void bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, const typelib_TypeDescription*, void*, void**, uno_Any**)" #19 0x00007f7ad41bc5fd in binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector >*) const (this=this@entry=0x563d7390b650, returnValue=returnValue@entry=0x7f7abd345320, outArguments=outArguments@entry=0x7f7abd3453e0) at /home/buildslave/source/libo-core/include/uno/dispatcher.hxx:72 exc = pexc = 0x7f7abd344f80 retType = {_pTypeDescr = 0x563d722246a0} nSize = 8 retBuf = std::__debug::vector of length 8, capacity 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} outBufs = std::__debug::vector of length 0, capacity 0 args = std::__debug::vector of length 4, capacity 4 = {0x563d7341e000, 0x563d7341e018, 0x563d7341e030, 0x563d7341e048} __PRETTY_FUNCTION__ = "bool binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector*) const" isExc = false #20 0x00007f7ad41bddb7 in binaryurp::IncomingRequest::execute() const (this=this@entry=0x563d7390b650) at /home/buildslave/source/libo-core/binaryurp/source/incomingrequest.cxx:78 resetCc = true oldCc = {m_pUnoI = 0x0} ret = {data_ = _uno_Any(void)} outArgs = std::__debug::vector of length 0, capacity 0 isExc = #21 0x00007f7ad41d3bad in binaryurp::(anonymous namespace)::request(void*) (pThreadSpecificData=pThreadSpecificData@entry=0x563d7390b650) at /usr/include/c++/8/bits/unique_ptr.h:149 __PRETTY_FUNCTION__ = "void binaryurp::{anonymous}::request(void*)" #22 0x00007f7ae3d4e18a in cppu_threadpool::JobQueue::enter(void const*, bool) (this=0x563d745db500, nDisposeId=, nDisposeId@entry=0x563d7715b560, bReturnWhenNoJob=bReturnWhenNoJob@entry=true) at /home/buildslave/source/libo-core/cppu/source/threadpool/jobqueue.cxx:100 pReturn = 0x0 __PRETTY_FUNCTION__ = "void* cppu_threadpool::JobQueue::enter(const void*, bool)" #23 0x00007f7ae3d501d9 in cppu_threadpool::ORequestThread::run() (this=0x563d7715b560) at /home/buildslave/source/libo-core/cppu/source/threadpool/thread.cxx:164 #24 0x00007f7ae3d52011 in osl::threadFunc(void*) (param=0x563d7715b570) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x563d7715b570 #25 0x00007f7ae531d357 in osl_thread_start_Impl(void*) (pData=0x563d741c7290) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x563d741c7290 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #26 0x00007f7ae49a6fa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #27 0x00007f7ae50094cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 1 (Thread 0x7f7ad5eb0f00 (LWP 21757)): #0 0x00007f7ae4f477bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f7ae4f32535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f7ae531042a in (anonymous namespace)::callSystemHandler(int, siginfo_t*, void*) (signal=signal@entry=6, info=info@entry=0x7fff432c5670, context=context@entry=0x7fff432c5540) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:358 act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0 }}, sa_flags = 0, sa_restorer = 0x563d7388b6c0} i = #3 0x00007f7ae5310534 in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7fff432c5670, context=0x7fff432c5540) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:454 act = {__sigaction_handler = {sa_handler = 0x563d73b1ca28, sa_sigaction = 0x563d73b1ca28}, sa_mask = {__val = {0, 94821965933904, 140165756184732, 94821934025256, 140734320370296, 94821934025216, 140165258303246, 1, 94821949929872, 12, 90, 94821929772944, 140165756012731, 94821925643488, 0, 94821965933976}}, sa_flags = -501520228, sa_restorer = 0x1} Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #4 0x00007f7ae4f47840 in () at /lib/x86_64-linux-gnu/libc.so.6 #5 0x00007f7ae4f477bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #6 0x00007f7ae4f32535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #7 0x00007f7adf5256e3 in SalAbort(rtl::OUString const&, bool) (rErrorText="", bDumpCore=bDumpCore@entry=true) at /home/buildslave/source/libo-core/vcl/source/app/salplug.cxx:350 #8 0x00007f7adf30de2e in Application::Abort(rtl::OUString const&) (rErrorText="") at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:274 #9 0x00007f7ae511ad17 in desktop::Desktop::Exception(ExceptionCategory) (this=0x7fff432c7e30, nCategory=) at /home/buildslave/source/libo-core/include/rtl/ustring.hxx:182 bInException = true nOldMode = rArgs = bRestart = bAllowRecoveryAndSessionManagement = #10 0x00007f7adf32327c in VCLExceptionSignal_impl(void*, oslSignalInfo*) (pInfo=) at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:169 nOldMode = SystemWindowFlags::DIALOG pSVData = 0x7f7adfec69a0 ::get()::instance> aLock = {m_isAcquired = true, m_isChecked = true, m_rSolarMutex = @0x563d720deb90} bIn = true nVCLException = #11 0x00007f7ae529e9f5 in callSignalHandler(oslSignalInfo*) (pInfo=pInfo@entry=0x7fff432c5df0) at /home/buildslave/source/libo-core/sal/osl/all/signalshared.cxx:59 pHandler = 0x563d72f10b30 Action = #12 0x00007f7ae53104ce in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7fff432c5ff0, context=0x7fff432c5ec0) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:451 Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #13 0x00007f7ae4f47840 in () at /lib/x86_64-linux-gnu/libc.so.6 #14 0x00007f7ae4f477bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #15 0x00007f7ae4f32535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #16 0x00007f7ae4f3240f in () at /lib/x86_64-linux-gnu/libc.so.6 #17 0x00007f7ae4f40102 in () at /lib/x86_64-linux-gnu/libc.so.6 #18 0x00007f7ac45bac98 in SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool) (this=0x563d73ff8550, _rAnchoredObj=..., _bCheckForMovedFwd=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformattertxtfrm.cxx:229 nIdx = 0 nToPageNum = 0 bDummy = false bPageHasFlysAnchoredBelowThis = false bDoesAnchorHadPrev = bRestart = false bSuccess = true __PRETTY_FUNCTION__ = "virtual bool SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool)" #19 0x00007f7ac45b6def in SwObjectFormatter::FormatObj(SwAnchoredObject&, SwFrame*, SwPageFrame const*) (_rAnchoredObj=..., _pAnchorFrame=, _pPageFrame=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformatter.cxx:190 bSuccess = true rAnchorFrame = @0x563d75284380: { = {_vptr.SwFrameAreaDefinition = 0x7f7ac581af98 , maFrameArea = SwRect = {point = Point = {x = 7554, y = 93660}, size = Size = {width = 3530, height = 1}}, maFramePrintArea = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 3530, height = 1}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5481}, = { = {_vptr.WriterListener = 0x7f7ac581b0f0 , m_pLeft = 0x0, m_pRight = 0x563d74642df0}, m_pRegisteredIn = 0x563d74a47990}, = {_vptr.SfxBroadcaster = 0x7f7ac581b120 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x563d73e52a00, mpRoot = 0x563d731c4770, mpUpper = 0x563d739a6b00, mpNext = 0x0, mpPrev = 0x0, m_pDrawObjs = std::unique_ptr = {get() = 0x563d7602b910}, mnFrameType = SwFrameType::Txt, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = true, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = true, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = false, mbCompletePaint = true, mbRetouche = true, mbInfInvalid = false, mbInfBody = true, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = true, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false} rPageFrame = @0x563d74bfe990: { = { = { = { = {_vptr.SwFrameAreaDefinition = 0x7f7ac5815900 , maFrameArea = SwRect = {point = Point = {x = 284, y = 80904}, size = Size = {width = 12240, height = 15840}}, maFramePrintArea = SwRect = {point = Point = {x = 1440, y = 720}, size = Size = {width = 9360, height = 14400}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5553}, = { = {_vptr.WriterListener = 0x7f7ac5815a48 , m_pLeft = 0x563d7645e9d0, m_pRight = 0x563d74e368e0}, m_pRegisteredIn = 0x563d7564d238}, = {_vptr.SfxBroadcaster = 0x7f7ac5815a78 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x563d73e52a00, mpRoot = 0x563d731c4770, mpUpper = 0x563d731c4770, mpNext = 0x563d75657800, mpPrev = 0x563d76202010, m_pDrawObjs = std::unique_ptr = {get() = 0x0}, mnFrameType = SwFrameType::Page, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = false, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = false, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = true, mbCompletePaint = true, mbRetouche = false, mbInfInvalid = false, mbInfBody = false, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = false, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false}, m_pLower = 0x563d74564940, m_VertPosOrientFramesFor = std::__debug::vector of length 0, capacity 0}, m_nMaxFootnoteHeight = 9223372036854775807}, m_pSortedObjs = std::unique_ptr = {get() = 0x563d7340a390}, m_pDesc = 0x563d7564d020, m_nPhyPageNum = 6, m_bInvalidContent = true, m_bInvalidLayout = true, m_bInvalidFlyContent = true, m_bInvalidFlyLayout = true, m_bInvalidFlyInCnt = false, m_bFootnotePage = false, m_bEmptyPage = false, m_bEndNotePage = false, m_bInvalidSpelling = true, m_bInvalidSmartTags = true, m_bInvalidAutoCmplWrds = true, m_bInvalidWordCount = true, m_bHasGrid = false, static snShadowPxWidth = 9 '\t'} pObjFormatter = std::unique_ptr = {get() = 0x563d73ff8550} #20 0x00007f7ac4562bed in CalcContent(SwLayoutFrame*, bool) (pLay=pLay@entry=0x563d75cfea80, bNoColl=bNoColl@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/fly.cxx:1550 aRect = SwRect = {point = Point = {x = 4407, y = 109607}, size = Size = {width = 8116, height = 1179}} pAnchoredObj = 0x563d74c966a0 bAgain = false pPageFrame = 0x563d74bfe990 i = 0 bRestartLayoutProcess = false nCnt = 6 wasFrameLowerOfLay = pTmpPrev = 0x563d75017e90 pTmpPrevFlowFrame = bPrevInvalid = false pTmpFlowFrame = pAgainObj1 = 0x0 nLoopControlMax = 20 pAgainObj2 = 0x0 nLoopControlRuns = pLoopControlCond = pLast = 0x563d75284380 pRenderContext = pSect = 0x563d75cfea80 bCollect = pFrame = 0x563d75284380 __PRETTY_FUNCTION__ = "void CalcContent(SwLayoutFrame*, bool)" #21 0x00007f7ac45f7a31 in SwSectionFrame::CheckClipping(bool, bool) (this=this@entry=0x563d75cfea80, bGrow=bGrow@entry=false, bMaximize=) at /home/buildslave/source/libo-core/sw/source/core/layout/sectfrm.cxx:1153 aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7f7ac588b6c0 } nDiff = nDeadLine = 96024 bCalc = bExtraCalc = false aOldSz = Size = {width = 9360, height = 17584} nTop = bHeightChanged = #22 0x00007f7ac45fa94f in SwSectionFrame::Format(OutputDevice*, SwBorderAttrs const*) (this=0x563d75cfea80, pRenderContext=, pAttr=) at /home/buildslave/source/libo-core/sw/inc/viewopt.hxx:472 nWidth = 9360 pSh = aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7f7ac588b6c0 } aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} nOldHeight = bOldLock = false bMaximize = true aExtraFormatToPosObjs = {mpSectFrame = 0x563d75cfea80, mbExtraFormatPerformed = false} bHasColumns = nDiff = #23 0x00007f7ac45422fa in SwLayoutFrame::MakeAll(OutputDevice*) (this=this@entry=0x563d75cfea80) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} aNotify = { = {mpFrame = 0x563d75cfea80, maFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}}, maPrt = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 9360, height = 0}}, mnFlyAnchorOfst = 0, mnFlyAnchorOfstNoWrap = 0, mbHadFollow = false, mbInvaKeep = false, mbValidSize = false}, m_bLowersComplete = false} bVert = false fnRect = 0x7f7ac588b6c0 pAccess = std::unique_ptr = {get() = 0x563d73341f80} pAttrs = 0x563d749bd2e0 #24 0x00007f7ac45fde81 in SwSectionFrame::MakeAll(OutputDevice*) (this=0x563d75cfea80, pRenderContext=0x563d73535c00) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 pSh = bCanContainSplitSection = #25 0x00007f7ac453fdff in SwFrame::PrepareMake(OutputDevice*) (this=0x563d75cfea80, pRenderContext=0x563d73535c00) at /home/buildslave/source/libo-core/sw/source/core/layout/calcmove.cxx:375 __PRETTY_FUNCTION__ = "void SwFrame::PrepareMake(vcl::RenderContext*)" #26 0x00007f7ac462a8c1 in SwFrame::Calc(OutputDevice*) const (this=, pRenderContext=) at /home/buildslave/source/libo-core/sw/source/core/layout/trvlfrm.cxx:1792 #27 0x00007f7ac459ce71 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7fff432c71b0, pRenderContext=pRenderContext@entry=0x563d73535c00, pLay=pLay@entry=0x563d75cfea80, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1228 aDeleteGuard = {m_pForbidFrame = 0x0} aOldFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} aOldRect = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} bNoPaint = bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 12510, y = 140165703232438}, size = Size = {width = 0, height = 0}} pLow = bTabChanged = aBoundRect = SwRect = {point = Point = {x = 0, y = 140165256956891}, size = Size = {width = 94821974420304, height = 94821969554048}} #28 0x00007f7ac459da28 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7fff432c71b0, pRenderContext=pRenderContext@entry=0x563d73535c00, pLay=pLay@entry=0x563d762021a0, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1407 pNext = 0x0 bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 140734320373360, y = 140165257223197}, size = Size = {width = 0, height = 0}} pLow = 0x563d75cfea80 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 0, y = 140165256956891}, size = Size = {width = 94821953311232, height = 94821974811040}} #29 0x00007f7ac459da28 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7fff432c71b0, pRenderContext=pRenderContext@entry=0x563d73535c00, pLay=0x563d76202010, bAddRect=false, bAddRect@entry=true) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1407 pNext = 0x0 bChanged = false bAlreadyPainted = true aFrameAtCompletePaint = SwRect = {point = Point = {x = 140165748317136, y = 94821925789568}, size = Size = {width = 12240, height = 15840}} pLow = 0x563d762021a0 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 12523, y = 64635}, size = Size = {width = 422, height = 16126}} #30 0x00007f7ac459eb18 in SwLayAction::InternalAction(OutputDevice*) (this=this@entry=0x7fff432c71b0, pRenderContext=pRenderContext@entry=0x563d73535c00) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:575 nLoopControlRuns_1 = 1 bTakeShortcut = false pPage = 0x563d76202010 nFirstPageNum = 1 rLayoutAccess = @0x563d739936c0: {_vptr.IDocumentLayoutAccess = 0x7f7ac57dca60 } bNoLoop = true nPercentPageNum = 0 lcl_isLayoutLooping = {__this = 0x7fff432c71b0, __bNoLoop = @0x7fff432c708f, __rLayoutAccess = @0x563d739936c0} #31 0x00007f7ac459fe23 in SwLayAction::Action(OutputDevice*) (this=this@entry=0x7fff432c71b0, pRenderContext=0x563d73535c00) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:385 #32 0x00007f7ac45a0371 in SwLayIdle::SwLayIdle(SwRootFrame*, SwViewShellImp*) (this=0x7fff432c72d0, pRt=, pI=) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aAction = {m_pRoot = 0x563d731c4770, m_pImp = 0x563d739e44c0, m_pOptTab = 0x0, m_pWait = std::unique_ptr = {get() = 0x0}, m_aFrameStack = std::__debug::vector of length 2, capacity 2 = {0x563d762021a0, 0x563d75cfea80}, m_aFrameDeleteGuards = std::__debug::vector of length 2, capacity 2 = {std::unique_ptr = {get() = 0x563d7645db20}, std::unique_ptr = {get() = 0x563d75be2100}}, m_nPreInvaPage = 65535, m_nStartTicks = 399707042, m_nInputType = (VclInputFlags::MOUSE | VclInputFlags::KEYBOARD | VclInputFlags::PAINT | VclInputFlags::OTHER | VclInputFlags::APPEVENT), m_nEndPage = 65535, m_nCheckPageNum = 5, m_bPaint = true, m_bComplete = true, m_bCalcLayout = false, m_bAgain = false, m_bNextCycle = false, m_bInterrupt = false, m_bIdle = true, m_bReschedule = false, m_bCheckPages = true, m_bUpdateExpFields = false, m_bBrowseActionStop = false, m_bWaitAllowed = false, m_bPaintExtraData = false, m_bActionInProgress = true, mbFormatContentOnInterrupt = false} bInterrupt = false bActions = nBoolIdx = rVOpt = aBools = std::__debug::vector of length 1, capacity 64 = {1} bInValid = bWordCount = pPg = pViewShell = bSpell = bACmplWrd = bSmartTags = #33 0x00007f7ac4b0d759 in SwViewShell::LayoutIdle() (this=0x563d74d81200) at /home/buildslave/source/libo-core/sw/source/core/view/viewsh.cxx:722 aSaveLRU = {} aIdle = {m_pRoot = 0x563d731c4770, m_pImp = 0x563d739e44c0, m_pContentNode = 0x563d73b5fb20, m_nTextPos = 0, m_bPageValid = true, m_bIndicator = true} aCurr = {pPrev = 0x563d74d81200, pRoot = 0x563d731c4770} #34 0x00007f7ac420bc62 in sw::DocumentTimerManager::DoIdleJobs(Timer*) (this=0x563d736e0e80) at /home/buildslave/source/libo-core/sw/source/core/inc/rootfrm.hxx:207 pLayout = __for_range = @0x7fff432c7380: {m_vector = std::__debug::vector of length 1, capacity 1 = {0x563d731c4770}} __for_begin = 0x563d731c4770 __for_end = 0x999999999999994d eJob = sw::DocumentTimerManager::IdleJob::Layout #35 0x00007f7ac420c0d5 in sw::DocumentTimerManager::LinkStubDoIdleJobs(void*, Timer*) (instance=, data=) at /home/buildslave/source/libo-core/sw/source/core/doc/DocumentTimerManager.cxx:157 #36 0x00007f7adf32b62a in Link::Call(Timer*) const (data=, this=) at /home/buildslave/source/libo-core/include/tools/link.hxx:110 #37 0x00007f7adf32b62a in Timer::Invoke() (this=) at /home/buildslave/source/libo-core/vcl/source/app/timer.cxx:75 #38 0x00007f7adf2d79fd in Scheduler::CallbackTaskScheduling() () at /home/buildslave/source/libo-core/vcl/source/app/scheduler.cxx:471 bTaskAlive = pTask = 0x563d736e0e98 aZone = { = { = {static s_nBufferSize = 0, static s_pBufferFullCallback = 0x0, static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 21757, m_sArgs = ""}, m_sName = 0x7f7ac51135f0 "sw::DocumentTimerManager m_aDocIdle"}, m_nCreateTime = 0, m_nNesting = -1} pSVData = 0x7f7adfec69a0 ::get()::instance> rSchedCtx = { STACK, ImplSchedulerDataDEFAULT, ImplSchedulerDataREPAINT, ImplSchedulerData} nTime = 11327271137 pSchedulerData = pPrevSchedulerData = pMostUrgent = pPrevMostUrgent = 0x0 nMostUrgentPriority = 7 nMinPeriod = nReadyPeriod = nTasks = nTaskPriority = 8 __PRETTY_FUNCTION__ = "static void Scheduler::CallbackTaskScheduling()" #39 0x00007f7adf580dcb in SalTimer::CallCallback() (this=) at /home/buildslave/source/libo-core/vcl/inc/saltimer.hxx:54 aGuard = {pT = 0x563d720deb90} pSVData = aTimeOfDay = {tv_sec = 1628210874, tv_usec = 697643} bRet = true #40 0x00007f7adf580dcb in SvpSalInstance::CheckTimeout(bool) (this=this@entry=0x563d720df790, bExecuteTimers=bExecuteTimers@entry=true) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:215 aGuard = {pT = 0x563d720deb90} pSVData = aTimeOfDay = {tv_sec = 1628210874, tv_usec = 697643} bRet = true #41 0x00007f7adf5810da in SvpSalInstance::DoYield(bool, bool) (this=0x563d720df790, bWait=, bHandleAllCurrentEvents=) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:460 __PRETTY_FUNCTION__ = "virtual bool SvpSalInstance::DoYield(bool, bool)" bEvent = false pSVData = 0x7f7adfec69a0 ::get()::instance> bTimeout = bSkipPoll = pMutex = #42 0x00007f7adf310ce1 in ImplYield(bool, bool) (i_bWait=i_bWait@entry=true, i_bAllEvents=i_bAllEvents@entry=false) at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:455 pSVData = 0x7f7adfec69a0 ::get()::instance> bProcessedEvent = #43 0x00007f7adf310e81 in Application::Yield() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:532 #44 0x00007f7adf310ecf in Application::Execute() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:444 pSVData = 0x7f7adfec69a0 ::get()::instance> #45 0x00007f7ae5127bb6 in desktop::Desktop::Main() (this=0x7fff432c7e30) at /home/buildslave/source/libo-core/desktop/source/app/app.cxx:1603 aOptions = { = { = {_vptr.ConfigurationBroadcaster = 0x7f7ae0c6eca8 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, = {_vptr.ConfigurationListener = 0x7f7ae0c6ecd8 }, }, static sm_pSingleImplConfig = 0x563d7305f3b0, static sm_nAccessibilityRefCount = 6} xRestartManager = uno::Reference to (class comphelper::OOfficeRestartManager *) 0x563d722391f8 bAbort = bExistsRecoveryData = false bExistsSessionData = false pidfileName = "" aTitle = "LibreOfficeDev 7.3.0.0.alpha0 [2c52b66bd3f100e3e57098579e378b8b2cd62e75]" aEvent = { = {Source = empty uno::Reference}, EventName = "OnStartApp", ViewController = empty uno::Reference, Supplement = uno::Any(void)} xDesktop = uno::Reference to (class framework::Desktop *) 0x563d72f8bd58 bMustLockProfile = bCrashed = false aAppearanceCfg = { = { = {_vptr.ConfigurationBroadcaster = 0x7f7ae0c6ed30 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, sSubTree = "Office.Common/View", m_xHierarchyAccess = uno::Reference to (class configmgr::RootAccess *) 0x563d7301ad68, xChangeLstnr = empty uno::Reference, m_nMode = ConfigItemMode::NONE, m_bIsModified = false, m_bEnableInternalNotification = false, m_nInValueChange = 0}, nDragMode = DragMode::SystemDep, nSnapMode = SnapType::NONE, nMiddleMouse = MouseMiddleButtonAction::PasteSelection, nAAMinPixelHeight = 8, bFontAntialiasing = true, bMenuMouseFollow = true, static bInitialized = true} layer = {m_aEnvTypeName = "gcc3", m_xPreviousContext = uno::Reference to (class (anonymous namespace)::DesktopEnvironmentContext *) 0x563d720df908} eStatus = rCmdLineArgs = @0x7f7ae52809c0: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest270ef2a4-f64f-11eb-9427-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} inst_fin = desktop::userinstall::EXISTED xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x563d720f8820 #46 0x00007f7adf329e8c in ImplSVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:199 pSVData = 0x7f7adfec69a0 ::get()::instance> nReturn = 1 bWasInitVCL = bInit = true nRet = 0 #47 0x00007f7adf32a00c in SVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:231 #48 0x00007f7ae5171af8 in soffice_main() () at /home/buildslave/source/libo-core/desktop/source/app/sofficemain.cxx:98 rCmdLineArgs = @0x7f7ae52809c0: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest270ef2a4-f64f-11eb-9427-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} aUnknown = "" bSuccess = aDesktop = { = { = {_vptr.ILibreOfficeKitNotifier = 0x7f7ae5274768 }, m_pCallbackData = 0x0, m_pCallback = 0x0}, m_rSplashScreen = empty uno::Reference, m_bCleanedExtensionCache = false, m_bServicesRegistered = true, m_aBootstrapError = desktop::Desktop::BE_OK, m_aBootstrapErrorMessage = "", m_aBootstrapStatus = desktop::Desktop::BS_OK, m_xLockfile = std::unique_ptr = {get() = 0x0}, m_firstRunTimer = { = {_vptr.Task = 0x7f7adfe20200 , mpSchedulerData = 0x0, mpDebugName = 0x7f7ae51fd180 "desktop::Desktop m_firstRunTimer", mePriority = TaskPriority::DEFAULT, mbActive = false, mbStatic = false}, maInvokeHandler = {function_ = 0x7f7ae511fe5c , instance_ = 0x7fff432c7e30, file_ = 0x7f7ae51fd140 "/home/buildslave/source/libo-core/desktop/source/app/app.cxx", line_ = 431, target_ = 0x7f7ae51fd118 "Desktop::LinkStubAsyncInitFirstRun"}, mnTimeout = 3000, mbAuto = false}, m_aUpdateThread = {_M_id = {_M_thread = 0}}} #49 0x0000563d715f68ee in sal_main () at /home/buildslave/source/libo-core/desktop/source/app/main.c:49 ret = #50 0x0000563d715f693b in main (argc=, argv=) at /home/buildslave/source/libo-core/desktop/source/app/main.c:47 ret =