[New LWP 1644076] [New LWP 1644771] [New LWP 1647116] [New LWP 1683427] [New LWP 1644381] [New LWP 1644388] [New LWP 1644775] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007fca0dc1feec in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7fca03ca1e00 (LWP 1644076))] Thread 7 (Thread 0x7fc9effff6c0 (LWP 1644775)): #0 0x00007fca0dc9f924 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007fca0df866e7 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x7fc9f4000f00, pBuffer=pBuffer@entry=0x7fc9c82ea568, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:453 socket = 13 nRet = #2 0x00007fca0df869cc in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x7fc9f4000f00, pBuffer=0x7fc9c82ea568, n=) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:527 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007fc9fe2b3683 in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x7fc9f4001550) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x7fc9f4001520, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007fc9fe24b60b in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7fc9f4001548, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:70 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007fc9fe24d5ae in binaryurp::Reader::execute() (this=0x7fc9f4006a80) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:105 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x7fc9f4000fb0, state_ = @0x7fc9f4006ac8, buffer_ = uno::Sequence of length 32716 = {-75 '\265', -41 '\327', 15 '\017', 53 '5', -13 '\363', -27 '\345', 84 'T', 45 '-', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 115 's', 0 '\000', 0 '\000', 0 '\000', -47 '\321', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 93 ']', 0 '\000', 0 '\000', 0 '\000', 102 'f', 0 '\000', 105 'i', 0 '\000', 108 'l', 0 '\000', 101 'e', 0 '\000', 58 ':', 0 '\000', 47 '/', 0 '\000', 47 '/', 0 '\000', 47 '/', 0 '\000', 104 'h', 0 '\000', 111 'o', 0 '\000', 109 'm', 0 '\000', 101 'e', 0 '\000', 47 '/', 0 '\000', 98 'b', 0 '\000', 117 'u', 0 '\000', 105 'i', 0 '\000', 108 'l', 0 '\000', 100 'd', 0 '\000', 115 's', 0 '\000', 108 'l', 0 '\000', 97 'a', 0 '\000', 118 'v', 0 '\000', 101 'e', 0 '\000', 47 '/', 0 '\000', 98 'b', 0 '\000', 117 'u', 0 '\000', 105 'i', 0 '\000', 108 'l', 0 '\000', 100 'd', 0 '\000', 47 '/', 0 '\000', 105 'i', 0 '\000', 110 'n', 0 '\000', 115 's', 0 '\000', 116 't', 0 '\000', 100 'd', 0 '\000', 105 'i', 0 '\000', 114 'r', 0 '\000', 47 '/', 0 '\000', 112 'p', 0 '\000', 114 'r', 0 '\000', 111 'o', 0 '\000', 103 'g', 0 '\000', 114 'r', 0 '\000', 97 'a', 0 '\000', 109 'm', 0 '\000', 47 '/', 0 '\000', 46 '.', 0 '\000', 46 '.', 0 '\000', 47 '/', 0 '\000', 115 's', 0 '\000', 104 'h', 0 '\000', 97 'a', 0 '\000', 114 'r', 0 '\000', 101 'e', 0 '\000', 47 '/', 0 '\000', 99 'c', 0 '\000', 111 'o', 0 '\000', 110 'n', 0 '\000', 102 'f', 0 '\000', 105 'i', 0 '\000', 103 'g', 0 '\000', 47 '/', 0 '\000', 115 's', 0 '\000', 111 'o', 0 '\000', 102 'f', 0 '\000', 102 'f', 0 '\000', 105 'i', 0 '\000', 99 'c', 0 '\000', 101 'e', 0 '\000', 46 '.', 0 '\000', 99 'c', 0 '\000', 102 'f', 0 '\000', 103 'g', 0 '\000', 47 '/', 0 '\000', 115 's', 0 '\000', 102 'f', 0 '\000', 120 'x', 0 '\000', 47 '/', 0 '\000', 117 'u', 0 '\000', 105 'i', 0 '\000', 47 '/', 0 '\000', 116 't', 0 '\000', 97 'a', 0 '\000', 98 'b', 0 '\000'...}, data_ = 0x563a2f94b6c0 "", end_ = 0x563a2f94b6c0 ""} header = {bridge_ = rtl::Reference to 0x7fc9f4000fb0, state_ = @0x7fc9f4006ac8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x7fc9c82ea570 "", end_ = 0x7fc9c82ea570 ""} size = con = uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7fc9f4001548 #7 0x00007fca0d5366b1 in salhelper::Thread::run() (this=0x7fc9f4006a80) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7fc9f4006a80}, m_bDismissed = false} #8 0x00007fca0d536959 in osl::threadFunc(void*) (param=0x7fc9f4006a90) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7fc9f4006a90 #9 0x00007fca0df973b3 in osl_thread_start_Impl(void*) (pData=0x7fc9f4008f70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7fc9f4008f70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007fca0dc1e1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007fca0dc9e89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7fc9fe2196c0 (LWP 1644388)): #0 0x00007fca0dc9f6df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007fca0df86210 in osl_acceptPipe(oslPipe) (pPipe=0x7fc9f4001570) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 12 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x7fc9f4001570, _M_owns = false} flags = #2 0x00007fc9fe2b3bb1 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x7fc9fe2174f8, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007fc9fe2b38eb in io_acceptor::PipeAcceptor::accept() (this=0x7fc9f4000d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x7fc9f4001570} pConn = rtl::Reference to 0x7fc9f4009530 status = #4 0x00007fc9fe2b95b8 in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x563a2b0d21d0, sConnectionDescription="pipe,name=pytestdcbb5ed4-45e3-11f0-8608-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:198 guard = {m_pFlag = 0x563a2b0d2248} r = empty uno::Reference #5 0x00007fc9ffaefa6d in desktop::Acceptor::run() (this=this@entry=0x563a2b0d2e00) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:110 g = {_M_device = 0x563a2b0d2e38, _M_owns = true} rConnection = empty uno::Reference aDescription = "pipe,name=pytestdcbb5ed4-45e3-11f0-8608-98f2b32c495c,uniqueValue=140505358800208" rInstanceProvider = uno::Reference to (desktop::AccInstanceProvider *) 0x7fc9f4000d38 #6 0x00007fc9ffaeff19 in desktop::offacc_workerfunc(void*) (acc=0x563a2b0d2e00) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:46 #7 0x00007fca0df973b3 in osl_thread_start_Impl(void*) (pData=0x563a2b0d8470) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x563a2b0d8470 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007fca0dc1e1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #9 0x00007fca0dc9e89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7fc9feafe6c0 (LWP 1644381)): #0 0x00007fca0dc9f6df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007fca0df86210 in osl_acceptPipe(oslPipe) (pPipe=0x563a2b042370) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 9 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x563a2b042370, _M_owns = false} flags = #2 0x00007fca0ddfaf91 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x563a2b0c7dd0, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007fca0ddfaa5e in desktop::PipeIpcThread::execute() (this=0x563a2b0c7da0) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1127 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007fca0d5366b1 in salhelper::Thread::run() (this=0x563a2b0c7da0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x563a2b0c7da0}, m_bDismissed = false} #5 0x00007fca0d536959 in osl::threadFunc(void*) (param=0x563a2b0c7db0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x563a2b0c7db0 #6 0x00007fca0df973b3 in osl_thread_start_Impl(void*) (pData=0x563a2a9b0d70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x563a2a9b0d70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007fca0dc1e1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #8 0x00007fca0dc9e89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7fc9ef7fe6c0 (LWP 1683427)): #0 0x00007fca0dc1b12b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007fca0dc214da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007fca0df84be9 in osl_acquireMutex(oslMutex) (pMutex=0x563a2a10f130) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007fca0803d4e9 in osl::Mutex::acquire() (this=0x563a2a10f438) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x563a2a10f300 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x563a2a10f430, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x563a2a10f300 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007fca0c71f750 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007fca0c71f78d in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7fc9ef7fb530) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1342 #8 0x00007fca0c823502 in (anonymous namespace)::XFrameImpl::removeActionLock() (this=0x7fc9c83510d0) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:2689 g = {> = {pT = 0x563a2a10f430}, } #9 0x00007fca0c80df05 in framework::ActionLockGuard::freeResource() (this=this@entry=0x7fc9ef7fbaf8) at /home/buildslave/source/libo-core/framework/source/inc/loadenv/actionlockguard.hxx:122 aMutexLock = {_M_device = 0x7fc9ef7fbaf8, _M_owns = false} xLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7fc9c8351168 bLocked = true #10 0x00007fca0c8066d7 in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7fc9ef7fb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1679 aReadLock = {pT = 0x7fc9ef7fb9f0} aRequest = Python Exception : bThrow = #11 0x00007fca0c806ad3 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7fc9ef7fb9f0, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:535 g = {pT = 0x7fc9ef7fb9f0} #12 0x00007fca0c80b96e in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7fc9ef7fb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1183 xTargetFrameProps = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7fc9c8351190 bResult = aWriteLock = {pT = 0x7fc9ef7fb9f0} sTarget = "_blank" xTargetFrame = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7fc9c8351140 xTargetLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x7fc9c8351168 bHidden = bMinimized = false bPreview = false bStartPres = lDescriptor = uno::Sequence of length 12 = {{Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x7fc9c82690c8}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7fc9e4002438}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7fc9e4002438}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x7fc9c8244708}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_MS_Word_2007"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AbortOnLoadFailure", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "MS Word 2007 XML"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx" xLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7fc9c84890b0 xAsyncLoader = empty uno::Reference xSyncLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7fc9c84890d8 #13 0x00007fca0c80bc4a in framework::LoadEnv::start() (this=this@entry=0x7fc9ef7fb9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:415 bStarted = #14 0x00007fca0c80c353 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7fc9ef7fb9f0, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx", lMediaDescriptor=uno::Sequence of length 3 = {...}, xBaseFrame=uno::Reference to (framework::Desktop *) 0x563a2a3cc068, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:311 g = {pT = 0x7fc9ef7fb9f0} aRealURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx" xParser = uno::Reference to ((anonymous namespace)::URLTransformer *) 0x7fc9c8218668 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #15 0x00007fca0c80c59d in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x563a2a3cc078, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x563a2a10be68, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_settmpconsiderwrapinfluence_heap_use_after_free.docx", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:167 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7fc9c828f4f0}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x563a2a10be68, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x563a2a3cc068, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x7fc9c8351140, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 12 elements}, static PROP_ABORTED = {pData = 0x7fca0ca1c270