[New LWP 407286] [New LWP 407693] [New LWP 479499] [New LWP 407492] [New LWP 407490] [New LWP 407697] [New LWP 413627] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f9afa8ceeec in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f9af5c17e00 (LWP 407286))] Thread 7 (Thread 0x7f9ac6ce26c0 (LWP 413627)): #0 0x00007f9afa913545 in clock_nanosleep () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9afa917e53 in nanosleep () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f9afac44edb in osl_waitThread(TimeValue const*) (pDelay=) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:521 delay = {tv_sec = 2, tv_nsec = 0} #3 0x00007f9af8d0121f in osl::Thread::wait(TimeValue const&) (Delay=...) at /home/buildslave/source/libo-core/include/osl/thread.hxx:147 aNow = {__d = {__r = 47657034716925932}} aRemoved1 = std::__debug::vector of length 19, capacity 32 = {rtl::Reference to 0x7f9ac1c686d0, rtl::Reference to 0x7f9ab404c810, rtl::Reference to 0x7f9ac0bd46f0, rtl::Reference to 0x55b10ef96450, rtl::Reference to 0x7f9ab40e4db0, rtl::Reference to 0x7f9ac8006320, rtl::Reference to 0x7f9ab4011240, rtl::Reference to 0x55b112d2a2f0, rtl::Reference to 0x7f9ab410c6a0, rtl::Reference to 0x7f9ac86b5a20, rtl::Reference to 0x55b1126fa9f0, rtl::Reference to 0x7f9ab409a1e0, rtl::Reference to 0x55b112a0b9b0, rtl::Reference to 0x7f9ab40fadf0, rtl::Reference to 0x7f9acd64a590, rtl::Reference to 0x55b112bf5ae0, rtl::Reference to 0x55b11266a1c0, rtl::Reference to 0x55b10edf6f00, rtl::Reference to 0x7f9ac8001780} aRemoved2 = std::__debug::vector of length 0, capacity 0 #4 drawinglayer::primitive2d::BufferedDecompositionFlusher::run() (this=0x7f9acc14cbb0) at /home/buildslave/source/libo-core/drawinglayer/source/primitive2d/BufferedDecompositionFlusher.cxx:136 aNow = {__d = {__r = 47657034716925932}} aRemoved1 = std::__debug::vector of length 19, capacity 32 = {rtl::Reference to 0x7f9ac1c686d0, rtl::Reference to 0x7f9ab404c810, rtl::Reference to 0x7f9ac0bd46f0, rtl::Reference to 0x55b10ef96450, rtl::Reference to 0x7f9ab40e4db0, rtl::Reference to 0x7f9ac8006320, rtl::Reference to 0x7f9ab4011240, rtl::Reference to 0x55b112d2a2f0, rtl::Reference to 0x7f9ab410c6a0, rtl::Reference to 0x7f9ac86b5a20, rtl::Reference to 0x55b1126fa9f0, rtl::Reference to 0x7f9ab409a1e0, rtl::Reference to 0x55b112a0b9b0, rtl::Reference to 0x7f9ab40fadf0, rtl::Reference to 0x7f9acd64a590, rtl::Reference to 0x55b112bf5ae0, rtl::Reference to 0x55b11266a1c0, rtl::Reference to 0x55b10edf6f00, rtl::Reference to 0x7f9ac8001780} aRemoved2 = std::__debug::vector of length 0, capacity 0 #5 0x00007f9af8d01627 in osl::threadFunc(void*) (param=0x7f9acc14cbb0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f9acc14cbb0 #6 0x00007f9afac4543b in osl_thread_start_Impl(void*) (pData=0x7f9accbddda0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f9accbddda0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f9afa8cd1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #8 0x00007f9afa94d89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f9ae924d6c0 (LWP 407697)): #0 0x00007f9afa94e924 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9afac3476f in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x7f9ae0000f00, pBuffer=pBuffer@entry=0x7f9ac1614848, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:453 socket = 13 nRet = #2 0x00007f9afac34a54 in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x7f9ae0000f00, pBuffer=0x7f9ac1614848, n=) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:527 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007f9aeb138683 in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x7f9ae0001550) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x7f9ae0001520, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007f9aeb0d060b in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f9ae0001548, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:70 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007f9aeb0d25ae in binaryurp::Reader::execute() (this=0x7f9ae0006a80) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:105 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x7f9ae0000fb0, state_ = @0x7f9ae0006ac8, buffer_ = uno::Sequence of length 32669 = {-103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', -103 '\231', 52 '4', 57 '9', 0 '\000', -15 '\361', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -107 '\225', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 2 '\002', 0 '\000', 0 '\000', 0 '\000', 57 '9', 0 '\000', 0 '\000', 0 '\000', 55 '7', 0 '\000', 102 'f', 0 '\000', 54 '6', 0 '\000', 52 '4', 0 '\000', 102 'f', 0 '\000', 48 '0', 0 '\000', 48 '0', 0 '\000', 52 '4', 0 '\000', 101 'e', 0 '\000', 55 '7', 0 '\000', 52 '4', 0 '\000', 48 '0', 0 '\000', 59 ';', 0 '\000', 117 'u', 0 '\000', 110 'n', 0 '\000', 111 'o', 0 '\000', 91 '[', 0 '\000', 48 '0', 0 '\000', 93 ']', 0 '\000', 59 ';', 0 '\000', 51 '3', 0 '\000', 100 'd', 0 '\000', 54 '6', 0 '\000', 101 'e', 0 '\000', 99 'c', 0 '\000', 59 ';', 0 '\000', 100 'd', 0 '\000', 55 '7', 0 '\000', 57 '9', 0 '\000', 55 '7', 0 '\000', 102 'f', 0 '\000', 49 '1', 0 '\000', 49 '1', 0 '\000', 54 '6', 0 '\000', 53 '5', 0 '\000', 102 'f', 0 '\000', 97 'a', 0 '\000', 52 '4', 0 '\000', 51 '3', 0 '\000', 102 'f', 0 '\000', 48 '0', 0 '\000', 56 '8', 0 '\000', 56 '8', 0 '\000', 56 '8', 0 '\000', 101 'e', 0 '\000', 98 'b', 0 '\000', 99 'c', 0 '\000', 97 'a', 0 '\000', 98 'b', 0 '\000', 99 'c', 0 '\000', 49 '1', 0 '\000', 100 'd', 0 '\000', 53 '5', 0 '\000', 97 'a', 0 '\000', 53 '5', 0 '\000', 55 '7', 0 '\000', 99 'c', 0 '\000', 0 '\000', 0 '\000', -103 '\231', -103 '\231', -103 '\231', -103 '\231'...}, data_ = 0x7f9ad8004ac4 "", end_ = 0x7f9ad8004ac4 ""} header = {bridge_ = rtl::Reference to 0x7f9ae0000fb0, state_ = @0x7f9ae0006ac8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x7f9ac1614850 "\300\307:\300\232\177", end_ = 0x7f9ac1614850 "\300\307:\300\232\177"} size = con = uno::Reference to (io_acceptor::(anonymous namespace)::PipeConnection *) 0x7f9ae0001548 #7 0x00007f9afa16e121 in salhelper::Thread::run() (this=0x7f9ae0006a80) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x7f9ae0006a80}, m_bDismissed = false} #8 0x00007f9afa16e3c9 in osl::threadFunc(void*) (param=0x7f9ae0006a90) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f9ae0006a90 #9 0x00007f9afac4543b in osl_thread_start_Impl(void*) (pData=0x7f9ae0008f70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f9ae0008f70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f9afa8cd1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f9afa94d89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f9aeb9836c0 (LWP 407490)): #0 0x00007f9afa94e6df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9afac34298 in osl_acceptPipe(oslPipe) (pPipe=0x55b10ec8ac70) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 9 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x55b10ec8ac70, _M_owns = false} flags = #2 0x00007f9afaaa9d23 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x55b10ed106b0, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f9afaaa9828 in desktop::PipeIpcThread::execute() (this=0x55b10ed10680) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1127 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007f9afa16e121 in salhelper::Thread::run() (this=0x55b10ed10680) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:39 g = {m_func = {__this = 0x55b10ed10680}, m_bDismissed = false} #5 0x00007f9afa16e3c9 in osl::threadFunc(void*) (param=0x55b10ed10690) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x55b10ed10690 #6 0x00007f9afac4543b in osl_thread_start_Impl(void*) (pData=0x55b10e5fb030) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x55b10e5fb030 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007f9afa8cd1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #8 0x00007f9afa94d89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7f9aeb09e6c0 (LWP 407492)): #0 0x00007f9afa94e6df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9afac34298 in osl_acceptPipe(oslPipe) (pPipe=0x7f9ae0001570) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 12 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x7f9ae0001570, _M_owns = false} flags = #2 0x00007f9aeb138bb1 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x7f9aeb09c4f8, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f9aeb1388eb in io_acceptor::PipeAcceptor::accept() (this=0x7f9ae0000d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x7f9ae0001570} pConn = rtl::Reference to 0x7f9ae0009530 status = #4 0x00007f9aeb13e5b8 in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x55b10ed1af10, sConnectionDescription="pipe,name=pytest7f950af0-1020-11f0-bb4a-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:198 guard = {m_pFlag = 0x55b10ed1af88} r = empty uno::Reference #5 0x00007f9aec932a6d in desktop::Acceptor::run() (this=this@entry=0x55b10ed1bde0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:110 g = {_M_device = 0x55b10ed1be18, _M_owns = true} rConnection = empty uno::Reference aDescription = "pipe,name=pytest7f950af0-1020-11f0-bb4a-98f2b32c495c,uniqueValue=140303159792976" rInstanceProvider = uno::Reference to (desktop::AccInstanceProvider *) 0x7f9ae0000d38 #6 0x00007f9aec932f19 in desktop::offacc_workerfunc(void*) (acc=0x55b10ed1bde0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:46 #7 0x00007f9afac4543b in osl_thread_start_Impl(void*) (pData=0x55b10ed213a0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x55b10ed213a0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f9afa8cd1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #9 0x00007f9afa94d89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7f9ae8a4c6c0 (LWP 479499)): #0 0x00007f9afa8ca12b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f9afa8d04da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f9afac32c71 in osl_acquireMutex(oslMutex) (pMutex=0x55b10dd67390) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f9af4e43377 in osl::Mutex::acquire() (this=0x55b10dd67698) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x55b10dd67560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x55b10dd67690, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x55b10dd67560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f9af931fc30 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f9af931fc6d in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7f9ae8a498d0) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1342 #8 0x00007f9af94236d6 in (anonymous namespace)::XFrameImpl::getController() (this=0x7f9ac0eeff90) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:1621 g = {> = {pT = 0x55b10dd67690}, } #9 0x00007f9af94066be in framework::LoadEnv::getTargetComponent() const (this=this@entry=0x7f9ae8a499f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:470 g = {pT = 0x7f9ae8a499f0} xController = uno::Reference to (com::sun::star::uno::XInterface *) 0x7f9af9406483 xModel = uno::Reference to (com::sun::star::uno::XInterface *) 0x7f9ab4144e38 #10 0x00007f9af940cae7 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x55b10e029b48, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x55b10dd640c8, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.docx", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:175 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7f9ac03ad4f0}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x55b10dd640c8, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x55b10e029b38, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x7f9ac0ef0000, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 0 elements}, static PROP_ABORTED = {pData = 0x7f9af961f250