[New LWP 581241] [New LWP 613318] [New LWP 581585] [New LWP 581595] [New LWP 582182] [New LWP 582186] [New LWP 589711] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f8e302dbebc in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f8e2b3f5e00 (LWP 581241))] Thread 7 (Thread 0x7f8e019ff6c0 (LWP 589711)): #0 0x00007f8e302d6f16 in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f8e302d9baf in pthread_cond_clockwait () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f8e30221200 in std::__condvar::wait_until(std::mutex&, int, timespec&) (__abs_time=..., __clock=1, __m=, this=0x7f8e30224288 <(anonymous namespace)::getTimerManager()::aManager+72>) at /usr/include/c++/12/bits/std_mutex.h:169 __s = {__d = {__r = 38400261}} __ts = {tv_sec = 38400261, tv_nsec = 331352529} #3 std::condition_variable::__wait_until_impl > >(std::unique_lock&, std::chrono::time_point > > const&) (this=this@entry=0x7f8e30224288 <(anonymous namespace)::getTimerManager()::aManager+72>, __lock=..., __atime=...) at /usr/include/c++/12/condition_variable:200 __s = {__d = {__r = 38400261}} __ts = {tv_sec = 38400261, tv_nsec = 331352529} #4 0x00007f8e30220dc8 in std::condition_variable::wait_until > >(std::unique_lock&, std::chrono::time_point > > const&) (__atime=..., __lock=..., this=0x7f8e30224288 <(anonymous namespace)::getTimerManager()::aManager+72>) at /usr/include/c++/12/condition_variable:108 #5 std::condition_variable::wait_until >, salhelper::TimerManager::run():: >(std::unique_lock &, const std::chrono::time_point > > &, struct {...}) (this=this@entry=0x7f8e30224288 <(anonymous namespace)::getTimerManager()::aManager+72>, __lock=..., __atime=..., __p=...) at /usr/include/c++/12/condition_variable:151 #6 0x00007f8e30220e38 in std::condition_variable::wait_for, salhelper::TimerManager::run():: >(std::unique_lock &, const std::chrono::duration > &, struct {...}) (this=this@entry=0x7f8e30224288 <(anonymous namespace)::getTimerManager()::aManager+72>, __lock=..., __rtime=..., __p=__p@entry=...) at /usr/include/c++/12/condition_variable:174 #7 0x00007f8e30220eba in salhelper::TimerManager::run() (this=0x7f8e30224240 <(anonymous namespace)::getTimerManager()::aManager>) at /home/buildslave/source/libo-core/salhelper/source/timer.cxx:372 a_Guard = {_M_device = 0x7f8e30224260 <(anonymous namespace)::getTimerManager()::aManager+32>, _M_owns = true} #8 0x00007f8e302203c7 in osl::threadFunc(void*) (param=0x7f8e30224240 <(anonymous namespace)::getTimerManager()::aManager>) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f8e30224240 <(anonymous namespace)::getTimerManager()::aManager> #9 0x00007f8e3065039b in osl_thread_start_Impl(void*) (pData=0x7f8e081417c0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f8e081417c0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f8e302da1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f8e3035a85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f8e12e6a6c0 (LWP 582186)): #0 0x00007f8e3035b8e4 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f8e3063f751 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x7f8e18000f00, pBuffer=pBuffer@entry=0x7f8dfe9cc508, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:453 socket = 13 nRet = #2 0x00007f8e3063fa36 in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x7f8e18000f00, pBuffer=0x7f8dfe9cc508, n=) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:527 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f8e20dff8af in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x7f8e18001550) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x7f8e18001520, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f8e20d97555 in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f8e18001548, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:70 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f8e20d994f2 in binaryurp::Reader::execute() (this=0x7f8e18006a80) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:105 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x7f8e18000fb0, state_ = @0x7f8e18006ac8, buffer_ = uno::Sequence of length 32649 = {-100 '\234', -106 '\226', -3 '\375', 88 'X', 44 ',', 65 'A', -66 '\276', 92 '\\', 56 '8', 100 'd', 102 'f', 99 'c', 52 '4', 48 '0', 57 '9', 56 '8', 101 'e', 48 '0', 59 ';', 103 'g', 99 'c', 99 'c', 51 '3', 91 '[', 48 '0', 93 ']', 59 ';', 56 '8', 53 '5', 98 'b', 48 '0', 51 '3', 57 '9', 56 '8', 99 'c', 50 '2', 102 'f', 54 '6', 52 '4', 50 '2', 100 'd', 99 'c', 57 '9', 101 'e', 100 'd', 97 'a', 100 'd', 53 '5', 51 '3', 52 '4', 55 '7', 54 '6', 101 'e', 98 'b', 54 '6', 52 '4', 57 '9', 51 '3', 0 '\000', -31 '\341', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 117 'u', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -1 '\377', 120 'x', -32 '\340', -4 '\374', -119 '\211', 127 '\177', 0 '\000', 0 '\000', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', 4 '\004', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -75 '\265', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 25 '\031', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'...}, data_ = 0x7f8e0400f2d4 "", end_ = 0x7f8e0400f2d4 ""} header = {bridge_ = rtl::Reference to 0x7f8e18000fb0, state_ = @0x7f8e18006ac8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x7f8dfe9cc510 "@h\n\376\215\177", end_ = 0x7f8dfe9cc510 "@h\n\376\215\177"} size = con = uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f8e18001548 #7 0x00007f8e30220121 in salhelper::Thread::run() (this=0x7f8e18006a80) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7f8e18006a80}, m_bDismissed = false} #8 0x00007f8e302203c7 in osl::threadFunc(void*) (param=0x7f8e18006a90) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f8e18006a90 #9 0x00007f8e3065039b in osl_thread_start_Impl(void*) (pData=0x7f8e18008f70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f8e18008f70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f8e302da1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f8e3035a85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f8e1366b6c0 (LWP 582182)): #0 0x00007f8e302d6f16 in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f8e302d95d8 in pthread_cond_wait () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f8e3062df25 in std::condition_variable::wait > (__p=..., __lock=..., this=0x7f8e18008560) at /usr/include/c++/12/condition_variable:102 g = {_M_device = 0x7f8e18008590, _M_owns = true} pCond = 0x7f8e18008560 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #3 osl_waitCondition(oslCondition, TimeValue const*) (Condition=, pTimeout=) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:125 g = {_M_device = 0x7f8e18008590, _M_owns = true} pCond = 0x7f8e18008560 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #4 0x00007f8e20d9dc36 in osl::Condition::wait(TimeValue const*) (pTimeout=0x0, this=0x7f8e180084b0) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 item = {tid = {_pSequence = 0x7f8e04001750}, oid = "7f3f78072210;uno[0];777d0;ee302519cb431db7d2b1df2f9dbf60", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x7f8dfc9aeb20}, currentContext = {m_pUnoI = 0x0}, returnValue = {data_ = _uno_Any(void)}, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, request = true, setter = false, exception = false, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #5 binaryurp::Writer::execute() (this=0x7f8e180082d0) at /home/buildslave/source/libo-core/binaryurp/source/writer.cxx:151 item = {tid = {_pSequence = 0x7f8e04001750}, oid = "7f3f78072210;uno[0];777d0;ee302519cb431db7d2b1df2f9dbf60", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x7f8dfc9aeb20}, currentContext = {m_pUnoI = 0x0}, returnValue = {data_ = _uno_Any(void)}, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, request = true, setter = false, exception = false, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #6 0x00007f8e30220121 in salhelper::Thread::run() (this=0x7f8e180082d0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7f8e180082d0}, m_bDismissed = false} #7 0x00007f8e302203c7 in osl::threadFunc(void*) (param=0x7f8e180082e0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f8e180082e0 #8 0x00007f8e3065039b in osl_thread_start_Impl(void*) (pData=0x7f8e18008ce0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f8e18008ce0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #9 0x00007f8e302da1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #10 0x00007f8e3035a85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7f8e20d656c0 (LWP 581595)): #0 0x00007f8e3035b69f in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f8e3063f27a in osl_acceptPipe(oslPipe) (pPipe=0x7f8e18001570) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 12 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x7f8e18001570, _M_owns = false} flags = #2 0x00007f8e20dffa81 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x7f8e20d634f8, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f8e20dff562 in io_acceptor::PipeAcceptor::accept() (this=0x7f8e18000d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x7f8e18001570} pConn = rtl::Reference to 0x7f8e18009530 status = #4 0x00007f8e20e054c0 in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x558708031270, sConnectionDescription="pipe,name=pytest4b1d61f9-bbf0-11ef-ae52-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:198 guard = {m_pFlag = 0x5587080312e8} r = empty uno::Reference #5 0x00007f8e20e509bd in desktop::Acceptor::run() (this=this@entry=0x558708032140) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:108 rConnection = empty uno::Reference g = {_M_device = 0x558708032178, _M_owns = false} aDescription = "pipe,name=pytest4b1d61f9-bbf0-11ef-ae52-98f2b32c495c,uniqueValue=140248264742224" rInstanceProvider = uno::Reference to (desktop::AccInstanceProvider *) 0x7f8e18000d38 #6 0x00007f8e20e50ec4 in desktop::offacc_workerfunc(void*) (acc=0x558708032140) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:46 #7 0x00007f8e3065039b in osl_thread_start_Impl(void*) (pData=0x5587080377e0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x5587080377e0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f8e302da1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #9 0x00007f8e3035a85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7f8e216646c0 (LWP 581585)): #0 0x00007f8e3035b69f in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f8e3063f27a in osl_acceptPipe(oslPipe) (pPipe=0x558707f82cc0) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 9 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x558707f82cc0, _M_owns = false} flags = #2 0x00007f8e304b7b2d in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x558708026870, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f8e304b7632 in desktop::PipeIpcThread::execute() (this=0x558708026840) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1127 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007f8e30220121 in salhelper::Thread::run() (this=0x558708026840) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x558708026840}, m_bDismissed = false} #5 0x00007f8e302203c7 in osl::threadFunc(void*) (param=0x558708026850) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x558708026850 #6 0x00007f8e3065039b in osl_thread_start_Impl(void*) (pData=0x5587078f7360) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x5587078f7360 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f8e302da1c4 in () at /lib/x86_64-linux-gnu/libc.so.6 #8 0x00007f8e3035a85c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 2 (Thread 0x7f8e010fe6c0 (LWP 613318)): #0 0x00007f8e302d712b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f8e302dd4aa in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f8e3063dc53 in osl_acquireMutex(oslMutex) (pMutex=0x558707074210) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f8e2a9b9761 in osl::Mutex::acquire() (this=0x558707074518) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x5587070743e0 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x558707074510, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:356 pInst = 0x5587070743e0 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f8e2ed1f332 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f8e2ed1f36f in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7f8e010fb560) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1340 #8 0x00007f8e2ee23144 in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x7f8e0b6e7f00) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:840 g = {> = {pT = 0x558707074510}, } #9 0x00007f8e2ee06584 in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f8e010fb9e0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1600 bMinimized = bStartPres = pFrameName = xWindow = uno::Reference to (com::sun::star::uno::XInterface *) 0x1d bHidden = pWindow = {m_rInnerRef = empty rtl::Reference} aReadLock = {pT = 0x7f8e010fb9e0} aRequest = Python Exception : bThrow = #10 0x00007f8e2ee06b55 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f8e010fb9e0, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:535 g = {pT = 0x7f8e010fb9e0} #11 0x00007f8e2ee0b790 in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f8e010fb9e0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1183 xTargetFrameProps = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f8e0b6e7fc0 bResult = aWriteLock = {pT = 0x7f8e010fb9e0} sTarget = "_blank" xTargetFrame = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f8e0b6e7f70 xTargetLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7f8e0b6e7f98 bHidden = bMinimized = false bPreview = false bStartPres = lDescriptor = uno::Sequence of length 12 = {{Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swfootnoteframe_unlockbackmove_heap_use_after_free.docx"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x7f8dfc913ed8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f8e04006e48}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f8e04006e48}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x7f8dfc038b98}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_OOXML"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AbortOnLoadFailure", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "Office Open XML Text"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swfootnoteframe_unlockbackmove_heap_use_after_free.docx" xLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f8dfc9e7530 xAsyncLoader = empty uno::Reference xSyncLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f8dfc9e7558 #12 0x00007f8e2ee0ba6c in framework::LoadEnv::start() (this=this@entry=0x7f8e010fb9e0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:415 bStarted = #13 0x00007f8e2ee0c175 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f8e010fb9e0, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swfootnoteframe_unlockbackmove_heap_use_after_free.docx", lMediaDescriptor=uno::Sequence of length 3 = {...}, xBaseFrame=uno::Reference to (framework::Desktop *) 0x55870732dc58, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:311 g = {pT = 0x7f8e010fb9e0} aRealURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swfootnoteframe_unlockbackmove_heap_use_after_free.docx" xParser = uno::Reference to ((anonymous namespace)::URLTransformer *) 0x7f8dfdcac678 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007f8e2ee0c3bf in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x55870732dc68, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x558707070f48, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swfootnoteframe_unlockbackmove_heap_use_after_free.docx", sTarget="_blank", nSearchFlags=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:167 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7f8dfcc64e60}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x558707070f48, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x55870732dc58, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x7f8e0b6e7f70, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 12 elements}, static PROP_ABORTED = {pData = 0x7f8e2f01b890