[New LWP 19751] [New LWP 20223] [New LWP 43233] [New LWP 3279] [New LWP 19937] [New LWP 19939] [New LWP 20224] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007febe2a9f7bb in raise () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7febd3b0eec0 (LWP 19751))] Thread 7 (Thread 0x7febd006c700 (LWP 20224)): #0 0x00007febe2b62686 in recv () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007febe2e539f0 in osl_receivePipe(oslPipe, void*, sal_Int32) (pPipe=pPipe@entry=0x5597ac4878b0, pBuffer=pBuffer@entry=0x5597af0e36d8, BytesToRead=BytesToRead@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:439 nRet = 0 #2 0x00007febe2e54218 in osl_readPipe(oslPipe, void*, sal_Int32) (pPipe=0x5597ac4878b0, pBuffer=0x5597af0e36d8, n=n@entry=8) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:509 RetVal = BytesRead = 0 BytesToRead = 8 #3 0x00007febd1e7a7ba in osl::StreamPipe::read(void*, int) const (n=8, pBuffer=, this=0x5597ac47c3e0) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:200 n = #4 0x00007febd1e7a7ba in io_acceptor::(anonymous namespace)::PipeConnection::read(com::sun::star::uno::Sequence&, sal_Int32) (this=0x5597ac47c3b0, aReadBytes=uno::Sequence of length 8 = {...}, nBytesToRead=8) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:83 n = #5 0x00007febd1e30690 in binaryurp::(anonymous namespace)::read(com::sun::star::uno::Reference const&, sal_uInt32, bool) (connection=uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x5597ac47c3d8, size=size@entry=8, eofOk=eofOk@entry=true) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 __PRETTY_FUNCTION__ = "com::sun::star::uno::Sequence binaryurp::{anonymous}::read(const com::sun::star::uno::Reference&, sal_uInt32, bool)" buf = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} n = #6 0x00007febd1e34d43 in binaryurp::Reader::execute() (this=0x5597ac48bc60) at /home/buildslave/source/libo-core/binaryurp/source/reader.cxx:104 s = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} count = block = {bridge_ = rtl::Reference to 0x5597ac4856d0, state_ = @0x5597ac48bca8, buffer_ = uno::Sequence of length 1072693248 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', 63 '?', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 1 '\001', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -121 '\207', 51 '3', 57 '9', 0 '\000', 119 'w', 120 'x', 0 '\000', 7 '\a', 65 'A', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -16 '\360', -90 '\246', -113 '\217', -83 '\255', -105 '\227', 85 'U', 0 '\000', 0 '\000', 56 '8', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 8 '\b', 0 '\000', 0 '\000', 0 '\000', -32 '\340', 59 ';', -5 '\373', -84 '\254', -105 '\227', 85 'U', 0 '\000', 0 '\000', 32 ' ', -45 '\323', 119 'w', -81 '\257', -105 '\227', 85 'U', 0 '\000', 0 '\000', 112 'p', 127 '\177', -5 '\373', -84 '\254', -105 '\227', 85 'U', 0 '\000', 0 '\000', -115 '\215', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 7 '\a', 33 '!', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', -128 '\200', -25 '\347', 120 'x', -83 '\255', -105 '\227', 85 'U', 0 '\000', 0 '\000', 93 ']', -124 '\204', 102 'f', 102 'f', 2 '\002', 0 '\000', 0 '\000', 0 '\000', -107 '\225', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 7 '\a', 81 'Q', 11 '\v', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 80 'P', -25 '\347', 107 'k', -81 '\257', -105 '\227', 85 'U', 0 '\000', 0 '\000', -96 '\240', 115 's', 21 '\025', -82 '\256', -105 '\227', 85 'U', 0 '\000', 0 '\000', -96 '\240', -97 '\237', -68 '\274', -82 '\256', -105 '\227', 85 'U', 0 '\000', 0 '\000', 48 '0', 37 '%', 127 '\177', -84 '\254', -105 '\227', 85 'U', 0 '\000', 0 '\000'...}, data_ = 0x5597ae443855 "x", end_ = 0x5597ae443855 "x"} header = {bridge_ = rtl::Reference to 0x5597ac4856d0, state_ = @0x5597ac48bca8, buffer_ = uno::Sequence of length 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'}, data_ = 0x5597af0e36e0 "\036\001\341", , end_ = 0x5597af0e36e0 "\036\001\341", } size = con = uno::Reference to (class io_acceptor::(anonymous namespace)::PipeConnection *) 0x5597ac47c3d8 #7 0x00007febe0b7c608 in salhelper::Thread::run() (this=0x5597ac48bc60) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #8 0x00007febe0b7ce95 in osl::threadFunc(void*) (param=0x5597ac48bc70) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5597ac48bc70 #9 0x00007febe2e74e5d in osl_thread_start_Impl(void*) (pData=0x5597ac48b460) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5597ac48b460 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007febe24fefa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #11 0x00007febe2b614cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7febd1ded700 (LWP 19939)): #0 0x00007febe2b62437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007febe2e542f5 in osl_acceptPipe(oslPipe) (pPipe=pPipe@entry=0x5597ac485600) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007febd1e7ad77 in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x7febd1deb290) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 pipe = {m_handle = 0x5597ac485600} pConn = rtl::Reference to 0x5597ac48f760 status = #3 0x00007febd1e7ad77 in io_acceptor::PipeAcceptor::accept() (this=0x5597ac404b30) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x5597ac485600} pConn = rtl::Reference to 0x5597ac48f760 status = #4 0x00007febd1e82eac in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x5597ac2f6e00, sConnectionDescription="pipe,name=pytest7d0b5424-d08c-11eb-b26b-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:199 guard = {m_pFlag = 0x5597ac2f6e58} r = empty uno::Reference #5 0x00007febd2efc06e in desktop::Acceptor::run() (this=this@entry=0x5597ac2f66d0) at /home/buildslave/source/libo-core/include/com/sun/star/uno/Reference.h:384 aDescription = "pipe,name=pytest7d0b5424-d08c-11eb-b26b-98f2b32c495c,uniqueValue=94109918807008" rInstanceProvider = uno::Reference to (class desktop::AccInstanceProvider *) 0x5597ac486f38 rConnection = empty uno::Reference #6 0x00007febd2efd479 in desktop::offacc_workerfunc(void*) (acc=0x5597ac2f66d0) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:44 #7 0x00007febe2e74e5d in osl_thread_start_Impl(void*) (pData=0x5597ac2f7c80) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5597ac2f7c80 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007febe24fefa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007febe2b614cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7febd26dc700 (LWP 19937)): #0 0x00007febe2b62437 in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007febe2e542f5 in osl_acceptPipe(oslPipe) (pPipe=0x5597ab61e730) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:381 s = pAcceptedPipe = __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" flags = #2 0x00007febe2cbfd6f in osl::Pipe::accept(osl::StreamPipe&) (Connection=..., this=0x5597ac2eccf0) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #3 0x00007febe2cbfd6f in desktop::PipeIpcThread::execute() (this=0x5597ac2eccc0) at /home/buildslave/source/libo-core/desktop/source/app/officeipcthread.cxx:1138 aStreamPipe = { = {m_handle = 0x0}, } nError = __PRETTY_FUNCTION__ = "virtual void desktop::PipeIpcThread::execute()" #4 0x00007febe0b7c608 in salhelper::Thread::run() (this=0x5597ac2eccc0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007febe0b7ce95 in osl::threadFunc(void*) (param=0x5597ac2eccd0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5597ac2eccd0 #6 0x00007febe2e74e5d in osl_thread_start_Impl(void*) (pData=0x5597ab622a40) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5597ab622a40 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007febe24fefa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007febe2b614cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 4 (Thread 0x7febbe487700 (LWP 3279)): #0 0x00007febe250535b in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007febe2e2a5b8 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x5597ae00ea80, pTimeout=pTimeout@entry=0x7febbe485680) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:203 ret = tp = {tv_sec = 1624059077, tv_usec = 742714} to = {tv_sec = 1624059079, tv_nsec = 742714000} pCond = 0x5597ae00ea80 nRet = 0 __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007febe18c3beb in osl::Condition::wait(TimeValue const*) (pTimeout=0x7febbe485680, this=0x7febbe485490) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x5597ae00ea80}, thread = rtl::Reference to 0x5597af20d090} #3 0x00007febe18c3beb in osl::Condition::wait(TimeValue const&) (timeout=..., this=0x7febbe485490) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:127 waitingThread = {condition = {condition = 0x5597ae00ea80}, thread = rtl::Reference to 0x5597af20d090} #4 0x00007febe18c3beb in cppu_threadpool::ThreadPool::waitInPool(rtl::Reference const&) (this=0x5597ac48d730, pThread=rtl::Reference to 0x5597af20d090) at /home/buildslave/source/libo-core/cppu/source/threadpool/threadpool.cxx:135 waitingThread = {condition = {condition = 0x5597ae00ea80}, thread = rtl::Reference to 0x5597af20d090} #5 0x00007febe18b7320 in cppu_threadpool::ORequestThread::run() (this=0x5597af20d090) at /home/buildslave/source/libo-core/include/salhelper/simplereferenceobject.hxx:73 #6 0x00007febe18b9061 in osl::threadFunc(void*) (param=0x5597af20d0a0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5597af20d0a0 #7 0x00007febe2e74e5d in osl_thread_start_Impl(void*) (pData=0x5597aec78e70) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5597aec78e70 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007febe24fefa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #9 0x00007febe2b614cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 3 (Thread 0x7febc048b700 (LWP 43233)): #0 0x00007febe250829c in __lll_lock_wait () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007febe25017d1 in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007febe2e51832 in osl_acquireMutex(oslMutex) (pMutex=0x5597ab4ccda0) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:100 nRet = #3 0x00007febdd186d4b in osl::Mutex::acquire() (this=0x5597ab4cccf8) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:61 pInst = 0x5597ab4c8ff0 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 0x00007febdd186d4b in SvpSalYieldMutex::doAcquire(unsigned int) (this=0x5597ab4cccf0, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:383 pInst = 0x5597ab4c8ff0 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007febe0eb0d10 in comphelper::SolarMutex::acquire(unsigned int) (nLockCount=1, this=0x5597ab4cccf0) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 g = {> = {pT = 0x5597ab4cccf0}, } #6 0x00007febe0eb0d10 in osl::Guard::Guard(comphelper::SolarMutex&) (t=..., this=0x7febc0487f38) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:142 g = {> = {pT = 0x5597ab4cccf0}, } #7 0x00007febe0eb0d10 in SolarMutexGuard::SolarMutexGuard() (this=0x7febc0487f38) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1348 g = {> = {pT = 0x5597ab4cccf0}, } #8 0x00007febe0eb0d10 in (anonymous namespace)::XFrameImpl::removeActionLock() (this=0x5597ae44a4f0) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:2689 g = {> = {pT = 0x5597ab4cccf0}, } #9 0x00007febe0e573fe in framework::ActionLockGuard::freeResource() (this=0x7febc0488698) at /home/buildslave/source/libo-core/framework/source/inc/loadenv/actionlockguard.hxx:122 aMutexLock = {pT = 0x0} xLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5597ae44a588 bLocked = true aReadLock = {pT = 0x7febc0488590} aRequest = bThrow = #10 0x00007febe0e573fe in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7febc0488590) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1661 aReadLock = {pT = 0x7febc0488590} aRequest = bThrow = #11 0x00007febe0e57804 in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7febc0488590, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:515 #12 0x00007febe0e5fc21 in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7febc0488590) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1163 bResult = aWriteLock = {pT = 0x7febc0488590} sTarget = "_blank" xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5597ae44a560 xTargetLock = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5597ae44a588 bHidden = bMinimized = bPreview = lDescriptor = uno::Sequence of length 11 = {{Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x5597af828828}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x5597acb82d38}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x5597b0a51c98}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_Rich_Text_Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x5597af828828}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "Rich Text Format"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xLoader = uno::Reference to (class (anonymous namespace)::SfxFrameLoader_Impl *) 0x5597acbc9e20 #13 0x00007febe0e5fe9e in framework::LoadEnv::start() (this=this@entry=0x7febc0488590) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:395 bStarted = #14 0x00007febe0e60f07 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7febc0488590, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", lMediaDescriptor=uno::Sequence of length 2 = {...}, xBaseFrame=uno::Reference to (class framework::Desktop *) 0x5597ac370478, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:300 g = {pT = 0x7febc0488590} aRealURL = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample" xParser = uno::Reference to (class (anonymous namespace)::URLTransformer *) 0x5597adebb588 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #15 0x00007febe0e612be in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (class framework::Desktop *) 0x5597ac370488, xContext=uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x5597ab4daeb0, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 2 = {...}) at /home/buildslave/build/workdir/UnoApiHeadersTarget/offapi/normal/com/sun/star/frame/XFrame.hpp:25 aEnv = {m_mutex = {mutex = 0x5597aefdb7c0}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x5597ab4daeb0, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x5597ac370478, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x5597ae44a560, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 11 elements}, }, m_aURL = {Complete = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Main = "file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", Protocol = "file://", User = "", Password = "", Server = "", Port = 0, Path = "/srv/crashtestdata/files/caolan/", Name = "swfntobj_drawtext_heap_buffer_overflow.sample", Arguments = "", Mark = ""}, m_eFeature = LoadEnvFeatures::NONE, m_eContentType = framework::LoadEnv::E_CAN_BE_LOADED, m_bCloseFrameOnError = true, m_bReactivateControllerOnError = false, m_xAsynchronousJob = empty uno::Reference, m_bLoaded = true, m_aTargetLock = {m_mutex = {mutex = 0x5597ad884b30}, m_xActionLock = empty uno::Reference, m_bActionLocked = false}, m_pQuietInteraction = rtl::Reference to 0x5597af828800} loadEnvFeatures = LoadEnvFeatures::NONE aDescriptor = {maValues = std::__debug::unordered_map with 2 elements} xComponent = empty uno::Reference aZone = { = { = {static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 19751, m_sArgs = ""}, m_sName = 0x7febe105ce9f "loadComponentFromURL"}, static s_nNesting = 0, m_nCreateTime = 0, m_nNesting = -1} #16 0x00007febe0ea3ba7 in framework::Desktop::loadComponentFromURL(rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (this=0x5597ac370410, sURL="file:///srv/crashtestdata/files/caolan/swfntobj_drawtext_heap_buffer_overflow.sample", sTargetFrameName="_blank", nSearchFlags=0, lArguments=uno::Sequence of length 2 = {...}) at /home/buildslave/source/libo-core/framework/source/services/desktop.cxx:605 aDescriptor = { = {m_aMap = std::__debug::unordered_map with 2 elements}, } bOnMainThread = false xThis = uno::Reference to (class framework::Desktop *) 0x5597ac370488 #17 0x00007febd380eddd in gcc3::callVirtualMethod(void*, unsigned int, void*, _typelib_TypeDescriptionReference*, bool, unsigned long*, unsigned int, unsigned long*, double*) (pThis=0x5597ac370488, nVtableIndex=3, pRegisterReturn=0x7febc0488b90, pReturnTypeRef=0x5597ab60b2d0, bSimpleReturn=false, pStack=0x7febc0488ba0, nStack=0, pGPR=0x7febc0488d30, pFPR=0x7febc0488d60) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/callvirtualmethod.cxx:133 data = {pMethod = 140651067489323, pStack = 0x7febc0488ba0, nStack = 0, pGPR = 0x7febc0488d30, pFPR = 0x7febc0488d60, rax = 94109950120184, rdx = 140650520021760, xmm0 = 4.6496477548747141e-310, xmm1 = 1.4821969375237396e-323} pMethod = 140651071634216 #18 0x00007febd380d634 in cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**) (pThis=pThis@entry=0x5597acd7a7c0, aVtableSlot=..., aVtableSlot@entry=..., pReturnTypeRef=0x5597ab60b2d0, nParams=4, pParams=0x5597ae72de80, pUnoReturn=pUnoReturn@entry=0x5597ac99b860, pUnoArgs=0x5597ac794eb0, ppUnoExc=0x7febc0488fb0) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:233 pStack = 0x7febc0488ba0 pStackStart = 0x7febc0488ba0 pGPR = {140650520021904, 94109917709448, 94109950120112, 94109950120136, 0, 140650520021760} nGPR = 6 pFPR = {1.4821969375237396e-323, 6.3659873748720795e-314, 1.9762625833649862e-323, 4.6496477273726488e-310, 6.9490590012821665e-310, 6.9490749344018196e-310, 4.6496478728168794e-310, 0} nFPR = 0 pReturnTypeDescr = 0x5597ab60b2d0 __PRETTY_FUNCTION__ = "void cpp_call(bridges::cpp_uno::shared::UnoInterfaceProxy*, bridges::cpp_uno::shared::VtableSlot, typelib_TypeDescriptionReference*, sal_Int32, typelib_MethodParameter*, void*, void**, uno_Any**)" pCppReturn = 0x7febc0488b90 bSimpleReturn = false pAdjustedThisPtr = 0x5597ac370488 pCppArgs = 0x7febc0488b20 pTempIndices = 0x7febc0488b40 ppTempParamTypeDescr = 0x7febc0488b60 nTempIndices = 1 #19 0x00007febd380de28 in bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, typelib_TypeDescription const*, void*, void**, uno_Any**) (pUnoI=0x5597acd7a7c0, pMemberDescr=0x5597ac63f420, pReturn=0x5597ac99b860, pArgs=0x5597ac794eb0, ppException=0x7febc0488fb0) at /home/buildslave/source/libo-core/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx:413 aVtableSlot = pThis = 0x5597acd7a7c0 __PRETTY_FUNCTION__ = "void bridges::cpp_uno::shared::unoInterfaceProxyDispatch(uno_Interface*, const typelib_TypeDescription*, void*, void**, uno_Any**)" #20 0x00007febd1e1957d in binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector >*) const (this=this@entry=0x5597ad4065d0, returnValue=returnValue@entry=0x7febc0489360, outArguments=outArguments@entry=0x7febc0489420) at /home/buildslave/source/libo-core/include/uno/dispatcher.hxx:72 exc = pexc = 0x7febc0488fc0 retType = {_pTypeDescr = 0x5597ab60b2d0} nSize = 8 retBuf = std::__debug::vector of length 8, capacity 8 = {0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000', 0 '\000'} outBufs = std::__debug::vector of length 0, capacity 0 args = std::__debug::vector of length 4, capacity 4 = {0x5597ae2590b0, 0x5597ae2590c8, 0x5597ae2590e0, 0x5597ae2590f8} __PRETTY_FUNCTION__ = "bool binaryurp::IncomingRequest::execute_throw(binaryurp::BinaryAny*, std::__debug::vector*) const" isExc = false #21 0x00007febd1e1ad37 in binaryurp::IncomingRequest::execute() const (this=this@entry=0x5597ad4065d0) at /home/buildslave/source/libo-core/binaryurp/source/incomingrequest.cxx:78 resetCc = true oldCc = {m_pUnoI = 0x0} ret = {data_ = _uno_Any(void)} outArgs = std::__debug::vector of length 0, capacity 0 isExc = #22 0x00007febd1e30aab in binaryurp::(anonymous namespace)::request(void*) (pThreadSpecificData=pThreadSpecificData@entry=0x5597ad4065d0) at /usr/include/c++/8/bits/unique_ptr.h:149 __PRETTY_FUNCTION__ = "void binaryurp::{anonymous}::request(void*)" #23 0x00007febe18b51da in cppu_threadpool::JobQueue::enter(void const*, bool) (this=0x5597ae25a3b0, nDisposeId=, nDisposeId@entry=0x5597af2c7420, bReturnWhenNoJob=bReturnWhenNoJob@entry=true) at /home/buildslave/source/libo-core/cppu/source/threadpool/jobqueue.cxx:100 pReturn = 0x0 __PRETTY_FUNCTION__ = "void* cppu_threadpool::JobQueue::enter(const void*, bool)" #24 0x00007febe18b7229 in cppu_threadpool::ORequestThread::run() (this=0x5597af2c7420) at /home/buildslave/source/libo-core/cppu/source/threadpool/thread.cxx:164 #25 0x00007febe18b9061 in osl::threadFunc(void*) (param=0x5597af2c7430) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5597af2c7430 #26 0x00007febe2e74e5d in osl_thread_start_Impl(void*) (pData=0x5597ad4256d0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5597ad4256d0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #27 0x00007febe24fefa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #28 0x00007febe2b614cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 2 (Thread 0x7febd086d700 (LWP 20223)): #0 0x00007febe250500c in pthread_cond_wait@@GLIBC_2.3.2 () at /lib/x86_64-linux-gnu/libpthread.so.0 #1 0x00007febe2e2a606 in osl_waitCondition(oslCondition, TimeValue const*) (Condition=0x5597ac48ac40, pTimeout=pTimeout@entry=0x0) at /home/buildslave/source/libo-core/sal/osl/unx/conditn.cxx:228 pCond = 0x5597ac48ac40 nRet = __PRETTY_FUNCTION__ = "oslConditionResult osl_waitCondition(oslCondition, const TimeValue*)" #2 0x00007febd1e3e895 in osl::Condition::wait(TimeValue const*) (pTimeout=0x0, this=0x5597ac48d6a0) at /home/buildslave/source/libo-core/include/osl/conditn.hxx:123 item = {request = true, tid = {_pSequence = 0x5597ac48ee70}, oid = "5647a8fa3600;uno[0];4ab9;a5278fd4c9ad426090e7c4e6363045", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x5597af7a9e70}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #3 0x00007febd1e3e895 in binaryurp::Writer::execute() (this=0x5597ac48d4c0) at /home/buildslave/source/libo-core/binaryurp/source/writer.cxx:150 item = {request = true, tid = {_pSequence = 0x5597ac48ee70}, oid = "5647a8fa3600;uno[0];4ab9;a5278fd4c9ad426090e7c4e6363045", type = {_pTypeDescr = 0x0}, member = {_pTypeDescr = 0x5597af7a9e70}, setter = false, arguments = std::__debug::vector of length 1, capacity 1 = {{data_ = }}, exception = false, returnValue = {data_ = _uno_Any(void)}, currentContext = {m_pUnoI = 0x0}, setCurrentContextMode = false} __PRETTY_FUNCTION__ = "virtual void binaryurp::Writer::execute()" #4 0x00007febe0b7c608 in salhelper::Thread::run() (this=0x5597ac48d4c0) at /home/buildslave/source/libo-core/salhelper/source/thread.cxx:40 #5 0x00007febe0b7ce95 in osl::threadFunc(void*) (param=0x5597ac48d4d0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x5597ac48d4d0 #6 0x00007febe2e74e5d in osl_thread_start_Impl(void*) (pData=0x5597ac48b3a0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:264 terminate = false pImpl = 0x5597ac48b3a0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #7 0x00007febe24fefa3 in start_thread () at /lib/x86_64-linux-gnu/libpthread.so.0 #8 0x00007febe2b614cf in clone () at /lib/x86_64-linux-gnu/libc.so.6 Thread 1 (Thread 0x7febd3b0eec0 (LWP 19751)): #0 0x00007febe2a9f7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007febe2a8a535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007febe2e67942 in (anonymous namespace)::callSystemHandler(int, siginfo_t*, void*) (signal=signal@entry=6, info=info@entry=0x7ffcac126330, context=context@entry=0x7ffcac126200) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:358 act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0 }}, sa_flags = 0, sa_restorer = 0x1} i = #3 0x00007febe2e67a4c in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7ffcac126330, context=0x7ffcac126200) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:454 act = {__sigaction_handler = {sa_handler = 0x5597ac743db8, sa_sigaction = 0x5597ac743db8}, sa_mask = {__val = {140723195375408, 94109921721744, 140650551972649, 1, 94109939281680, 12, 90, 94109936937296, 140651048919957, 94109961410624, 0, 94109972335800, 140651049102139, 1, 94109939281680, 140723195372118}}, sa_flags = 90, sa_restorer = 0x5597ad5c6950} Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #4 0x00007febe2a9f840 in () at /lib/x86_64-linux-gnu/libc.so.6 #5 0x00007febe2a9f7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #6 0x00007febe2a8a535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #7 0x00007febdd129159 in SalAbort(rtl::OUString const&, bool) (rErrorText="", bDumpCore=bDumpCore@entry=true) at /home/buildslave/source/libo-core/vcl/source/app/salplug.cxx:351 #8 0x00007febdcf32622 in Application::Abort(rtl::OUString const&) (rErrorText="") at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:274 #9 0x00007febe2c73127 in desktop::Desktop::Exception(ExceptionCategory) (this=0x7ffcac128ad0, nCategory=) at /home/buildslave/source/libo-core/include/rtl/ustring.hxx:181 bInException = true nOldMode = rArgs = bRestart = bAllowRecoveryAndSessionManagement = #10 0x00007febdcf47b8a in VCLExceptionSignal_impl(void*, oslSignalInfo*) (pInfo=) at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:169 nOldMode = SystemWindowFlags::DIALOG pSVData = 0x7febdd9ee300 ::get()::instance> aLock = {m_isAcquired = true, m_isChecked = true, m_rSolarMutex = @0x5597ab4cccf0} bIn = true nVCLException = #11 0x00007febe2df6237 in callSignalHandler(oslSignalInfo*) (pInfo=pInfo@entry=0x7ffcac126ab0) at /home/buildslave/source/libo-core/sal/osl/all/signalshared.cxx:59 pHandler = 0x5597ac2f38f0 Action = #12 0x00007febe2e679e6 in (anonymous namespace)::signalHandlerFunction(int, siginfo_t*, void*) (signal=6, info=0x7ffcac126cb0, context=0x7ffcac126b80) at /home/buildslave/source/libo-core/sal/osl/unx/signal.cxx:451 Info = {Signal = osl_Signal_AccessViolation, UserSignal = 6, UserData = 0x0} #13 0x00007febe2a9f840 in () at /lib/x86_64-linux-gnu/libc.so.6 #14 0x00007febe2a9f7bb in raise () at /lib/x86_64-linux-gnu/libc.so.6 #15 0x00007febe2a8a535 in abort () at /lib/x86_64-linux-gnu/libc.so.6 #16 0x00007febe2a8a40f in () at /lib/x86_64-linux-gnu/libc.so.6 #17 0x00007febe2a98102 in () at /lib/x86_64-linux-gnu/libc.so.6 #18 0x00007febc21d8f3c in SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool) (this=0x5597ad7f09f0, _rAnchoredObj=..., _bCheckForMovedFwd=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformattertxtfrm.cxx:229 nIdx = 0 nToPageNum = 0 bDummy = false bPageHasFlysAnchoredBelowThis = false bDoesAnchorHadPrev = bRestart = false bSuccess = true __PRETTY_FUNCTION__ = "virtual bool SwObjectFormatterTextFrame::DoFormatObj(SwAnchoredObject&, bool)" #19 0x00007febc21d50a5 in SwObjectFormatter::FormatObj(SwAnchoredObject&, SwFrame*, SwPageFrame const*) (_rAnchoredObj=..., _pAnchorFrame=, _pPageFrame=) at /home/buildslave/source/libo-core/sw/source/core/layout/objectformatter.cxx:190 bSuccess = true rAnchorFrame = @0x5597acd87d20: { = {_vptr.SwFrameAreaDefinition = 0x7febc342ee68 , maFrameArea = SwRect = {point = Point = {x = 7554, y = 93660}, size = Size = {width = 3530, height = 1}}, maFramePrintArea = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 3530, height = 1}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5481}, = { = {_vptr.WriterListener = 0x7febc342efc0 , m_pLeft = 0x0, m_pRight = 0x5597ac743c50}, m_pRegisteredIn = 0x5597ad802f10}, = {_vptr.SfxBroadcaster = 0x7febc342eff0 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x5597ad899670, mpRoot = 0x5597ae580200, mpUpper = 0x5597acc01740, mpNext = 0x0, mpPrev = 0x0, m_pDrawObjs = std::unique_ptr = {get() = 0x5597ae9e1910}, mnFrameType = SwFrameType::Txt, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = true, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = true, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = false, mbCompletePaint = true, mbRetouche = true, mbInfInvalid = false, mbInfBody = true, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = true, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false} rPageFrame = @0x5597ac6befc0: { = { = { = { = {_vptr.SwFrameAreaDefinition = 0x7febc34298c0 , maFrameArea = SwRect = {point = Point = {x = 284, y = 80904}, size = Size = {width = 12240, height = 15840}}, maFramePrintArea = SwRect = {point = Point = {x = 1440, y = 720}, size = Size = {width = 9360, height = 14400}}, mbFrameAreaPositionValid = true, mbFrameAreaSizeValid = true, mbFramePrintAreaValid = true, static snLastFrameId = 6666, mnFrameId = 5553}, = { = {_vptr.WriterListener = 0x7febc3429a08 , m_pLeft = 0x5597ad703250, m_pRight = 0x5597acba77d0}, m_pRegisteredIn = 0x5597ac8948d0}, = {_vptr.SfxBroadcaster = 0x7febc3429a38 , m_RemovedPositions = std::__debug::vector of length 0, capacity 0, m_Listeners = std::__debug::vector of length 0, capacity 0}, static spCache = 0x5597ad899670, mpRoot = 0x5597ae580200, mpUpper = 0x5597ae580200, mpNext = 0x5597ac8317e0, mpPrev = 0x5597af34f030, m_pDrawObjs = std::unique_ptr = {get() = 0x0}, mnFrameType = SwFrameType::Page, mbInDtor = false, mbInvalidR2L = false, mbDerivedR2L = false, mbRightToLeft = false, mbInvalidVert = false, mbDerivedVert = false, mbVertical = false, mbVertLR = false, mbVertLRBT = false, mbValidLineNum = false, mbFixSize = true, mbCompletePaint = true, mbRetouche = false, mbInfInvalid = false, mbInfBody = false, mbInfTab = false, mbInfFly = false, mbInfFootnote = false, mbInfSct = false, mbColLocked = false, m_isInDestroy = false, mbForbidDelete = false}, m_pLower = 0x5597af6ecec0, m_VertPosOrientFramesFor = std::__debug::vector of length 0, capacity 0}, m_nMaxFootnoteHeight = 9223372036854775807}, m_pSortedObjs = std::unique_ptr = {get() = 0x5597ac74dd30}, m_pDesc = 0x5597ac8946c0, m_nPhyPageNum = 6, m_bInvalidContent = true, m_bInvalidLayout = true, m_bInvalidFlyContent = true, m_bInvalidFlyLayout = true, m_bInvalidFlyInCnt = false, m_bFootnotePage = false, m_bEmptyPage = false, m_bEndNotePage = false, m_bInvalidSpelling = true, m_bInvalidSmartTags = true, m_bInvalidAutoCmplWrds = true, m_bInvalidWordCount = true, m_bHasGrid = false, static snShadowPxWidth = 9 '\t'} pObjFormatter = std::unique_ptr = {get() = 0x5597ad7f09f0} #20 0x00007febc2180c71 in CalcContent(SwLayoutFrame*, bool) (pLay=pLay@entry=0x5597aecdebf0, bNoColl=bNoColl@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/fly.cxx:1549 aRect = SwRect = {point = Point = {x = 4407, y = 109607}, size = Size = {width = 8116, height = 1179}} pAnchoredObj = 0x5597aef4d890 bAgain = false pPageFrame = 0x5597ac6befc0 i = 0 bRestartLayoutProcess = false nCnt = 6 wasFrameLowerOfLay = pTmpPrev = 0x5597af5cebb0 pTmpPrevFlowFrame = bPrevInvalid = false pTmpFlowFrame = pAgainObj1 = 0x0 nLoopControlMax = 20 pAgainObj2 = 0x0 nLoopControlRuns = pLoopControlCond = pLast = 0x5597acd87d20 pRenderContext = pSect = 0x5597aecdebf0 bCollect = pFrame = 0x5597acd87d20 __PRETTY_FUNCTION__ = "void CalcContent(SwLayoutFrame*, bool)" #21 0x00007febc2215421 in SwSectionFrame::CheckClipping(bool, bool) (this=this@entry=0x5597aecdebf0, bGrow=bGrow@entry=false, bMaximize=) at /home/buildslave/source/libo-core/sw/source/core/layout/sectfrm.cxx:1153 aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7febc349ebe0 } nDiff = nDeadLine = 96024 bCalc = bExtraCalc = false aOldSz = Size = {width = 9360, height = 17584} nTop = bHeightChanged = #22 0x00007febc221825b in SwSectionFrame::Format(OutputDevice*, SwBorderAttrs const*) (this=0x5597aecdebf0, pRenderContext=, pAttr=) at /home/buildslave/source/libo-core/sw/inc/viewopt.hxx:472 nWidth = 9360 pSh = aRectFnSet = {m_bVert = false, m_bVertL2R = false, m_bVertL2RB2T = false, m_fnRect = 0x7febc349ebe0 } aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} nOldHeight = bOldLock = false bMaximize = true aExtraFormatToPosObjs = {mpSectFrame = 0x5597aecdebf0, mbExtraFormatPerformed = false} bHasColumns = nDiff = #23 0x00007febc2160380 in SwLayoutFrame::MakeAll(OutputDevice*) (this=this@entry=0x5597aecdebf0) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aEnter = {pImpl = std::unique_ptr = {get() = 0x0}} aNotify = { = {mpFrame = 0x5597aecdebf0, maFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}}, maPrt = SwRect = {point = Point = {x = 0, y = 0}, size = Size = {width = 9360, height = 0}}, mnFlyAnchorOfst = 0, mnFlyAnchorOfstNoWrap = 0, mbHadFollow = false, mbInvaKeep = false, mbValidSize = false}, m_bLowersComplete = false} bVert = false fnRect = 0x7febc349ebe0 pAccess = std::unique_ptr = {get() = 0x5597acbec080} pAttrs = 0x5597acd70de0 #24 0x00007febc221b7e1 in SwSectionFrame::MakeAll(OutputDevice*) (this=0x5597aecdebf0, pRenderContext=0x5597ac9b1120) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 pSh = bCanContainSplitSection = #25 0x00007febc215de85 in SwFrame::PrepareMake(OutputDevice*) (this=0x5597aecdebf0, pRenderContext=0x5597ac9b1120) at /home/buildslave/source/libo-core/sw/source/core/layout/calcmove.cxx:375 __PRETTY_FUNCTION__ = "void SwFrame::PrepareMake(vcl::RenderContext*)" #26 0x00007febc2247d1d in SwFrame::Calc(OutputDevice*) const (this=, pRenderContext=) at /home/buildslave/source/libo-core/sw/source/core/layout/trvlfrm.cxx:1792 #27 0x00007febc21b7812 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7ffcac127ec0, pRenderContext=pRenderContext@entry=0x5597ac9b1120, pLay=pLay@entry=0x5597aecdebf0, bAddRect=bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1184 aDeleteGuard = {m_pForbidFrame = 0x5597aecdebf0} aOldFrame = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} aOldRect = SwRect = {point = Point = {x = 1724, y = 12525}, size = Size = {width = 9360, height = 0}} bNoPaint = bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 816, y = 1056}, size = Size = {width = 0, height = 0}} pLow = bTabChanged = aBoundRect = SwRect = {point = Point = {x = 94109961153520, y = 77296}, size = Size = {width = 9360, height = 1144}} #28 0x00007febc21b85e8 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7ffcac127ec0, pRenderContext=pRenderContext@entry=0x5597ac9b1120, pLay=pLay@entry=0x5597af34f1c0, bAddRect=, bAddRect@entry=false) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1369 pNext = 0x0 bChanged = false bAlreadyPainted = false aFrameAtCompletePaint = SwRect = {point = Point = {x = 140723195378528, y = 140650544756247}, size = Size = {width = 0, height = 0}} pLow = 0x5597aecdebf0 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 94109967905216, y = 65500}, size = Size = {width = 9360, height = 11520}} #29 0x00007febc21b85e8 in SwLayAction::FormatLayout(OutputDevice*, SwLayoutFrame*, bool) (this=this@entry=0x7ffcac127ec0, pRenderContext=pRenderContext@entry=0x5597ac9b1120, pLay=0x5597af34f030, bAddRect=, bAddRect@entry=true) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:1369 pNext = 0x0 bChanged = false bAlreadyPainted = true aFrameAtCompletePaint = SwRect = {point = Point = {x = 94109971400352, y = 94109924711632}, size = Size = {width = 12240, height = 15840}} pLow = 0x5597af34f1c0 bTabChanged = false aBoundRect = SwRect = {point = Point = {x = 12523, y = 64635}, size = Size = {width = 422, height = 16126}} #30 0x00007febc21bddd9 in SwLayAction::InternalAction(OutputDevice*) (this=this@entry=0x7ffcac127ec0, pRenderContext=pRenderContext@entry=0x5597ac9b1120) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:528 nLoopControlRuns_1 = 1 bTakeShortcut = false pPage = 0x5597af34f030 nFirstPageNum = 1 rLayoutAccess = @0x5597aca398c0: {_vptr.IDocumentLayoutAccess = 0x7febc33eed40 } bNoLoop = true nPercentPageNum = 0 lcl_isLayoutLooping = {__this = 0x7ffcac127ec0, __bNoLoop = @0x7ffcac127d9f, __rLayoutAccess = @0x5597aca398c0} #31 0x00007febc21be57c in SwLayAction::Action(OutputDevice*) (this=this@entry=0x7ffcac127ec0, pRenderContext=0x5597ac9b1120) at /home/buildslave/source/libo-core/sw/source/core/layout/layact.cxx:341 #32 0x00007febc21bea88 in SwLayIdle::SwLayIdle(SwRootFrame*, SwViewShellImp*) (this=0x7ffcac127f80, pRt=, pI=) at /home/buildslave/source/libo-core/include/rtl/ref.hxx:206 aAction = {m_pRoot = 0x5597ae580200, m_pImp = 0x5597adc33940, m_pOptTab = 0x0, m_pWait = std::unique_ptr = {get() = 0x0}, m_nPreInvaPage = 65535, m_nStartTicks = 434866267, m_nInputType = (VclInputFlags::MOUSE | VclInputFlags::KEYBOARD | VclInputFlags::PAINT | VclInputFlags::OTHER | VclInputFlags::APPEVENT), m_nEndPage = 65535, m_nCheckPageNum = 5, m_bPaint = true, m_bComplete = true, m_bCalcLayout = false, m_bAgain = false, m_bNextCycle = false, m_bInterrupt = false, m_bIdle = true, m_bReschedule = false, m_bCheckPages = true, m_bUpdateExpFields = false, m_bBrowseActionStop = false, m_bWaitAllowed = false, m_bPaintExtraData = false, m_bActionInProgress = true, mbFormatContentOnInterrupt = false, m_pCurPage = 0x5597af34f030, m_nTabLevel = 0, m_nCallCount = 0} bInterrupt = false bActions = nBoolIdx = rVOpt = aBools = std::__debug::vector of length 1, capacity 64 = {1} bInValid = bWordCount = pPg = pViewShell = bSpell = bACmplWrd = bSmartTags = #33 0x00007febc272a9ed in SwViewShell::LayoutIdle() (this=0x5597af6a46a0) at /home/buildslave/source/libo-core/sw/source/core/view/viewsh.cxx:715 aSaveLRU = {} aIdle = {m_pRoot = 0x5597ae580200, m_pImp = 0x5597adc33940, m_pContentNode = 0x5597ae4b6ab0, m_nTextPos = 0, m_bPageValid = true, m_bIndicator = true} aCurr = {pPrev = 0x5597af6a46a0, pRoot = 0x5597ae580200} #34 0x00007febc1e2c6f6 in sw::DocumentTimerManager::DoIdleJobs(Timer*) (this=0x5597ae45ddc0) at /home/buildslave/source/libo-core/sw/source/core/inc/rootfrm.hxx:206 pLayout = __for_range = @0x7ffcac128030: {m_vector = std::__debug::vector of length 1, capacity 1 = {0x5597ae580200}} __for_begin = 0x5597ae580200 __for_end = 0x99999999999999a0 eJob = sw::DocumentTimerManager::IdleJob::Layout #35 0x00007febc1e2cb69 in sw::DocumentTimerManager::LinkStubDoIdleJobs(void*, Timer*) (instance=, data=) at /home/buildslave/source/libo-core/sw/source/core/doc/DocumentTimerManager.cxx:157 #36 0x00007febdcf4feb4 in Link::Call(Timer*) const (data=, this=) at /home/buildslave/source/libo-core/include/tools/link.hxx:110 #37 0x00007febdcf4feb4 in Timer::Invoke() (this=) at /home/buildslave/source/libo-core/vcl/source/app/timer.cxx:75 #38 0x00007febdcefc3ec in Scheduler::CallbackTaskScheduling() () at /home/buildslave/source/libo-core/vcl/source/app/scheduler.cxx:471 bTaskAlive = pTask = 0x5597ae45ddd8 aZone = { = { = {static s_bRecording = {_M_base = {static _S_alignment = 1, _M_i = false}, static is_always_lock_free = true}, m_nPid = 19751, m_sArgs = ""}, m_sName = 0x7febc2d24fa0 "sw::DocumentTimerManager m_aDocIdle"}, static s_nNesting = 0, m_nCreateTime = 0, m_nNesting = -1} pSVData = 0x7febdd9ee300 ::get()::instance> rSchedCtx = @0x7febdd9ee348: {mpFirstSchedulerData = {0x0, 0x5597ace5e0e0, 0x0, 0x0, 0x5597b031f3c0, 0x0, 0x0, 0x0}, mpLastSchedulerData = {0x0, 0x5597ac5d2810, 0x0, 0x0, 0x5597ad897e10, 0x0, 0x0, 0x0}, mpSchedulerStack = 0x5597adc153a0, mpSchedulerStackTop = 0x5597adc153a0, mpSalTimer = 0x5597ac38a3a0, mnTimerStart = 1624059078361, mnTimerPeriod = 0, maMutex = { = {_M_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __elision = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' , __align = 0}}, }, mbActive = true} nTime = 1624059077742 pSchedulerData = pPrevSchedulerData = pMostUrgent = pPrevMostUrgent = 0x0 nMostUrgentPriority = 7 nMinPeriod = nReadyPeriod = nTasks = nTaskPriority = 8 __PRETTY_FUNCTION__ = "static void Scheduler::CallbackTaskScheduling()" #39 0x00007febdd184845 in SalTimer::CallCallback() (this=) at /home/buildslave/source/libo-core/vcl/inc/saltimer.hxx:54 aGuard = {pT = 0x5597ab4cccf0} pSVData = aTimeOfDay = {tv_sec = 1624059077, tv_usec = 742620} bRet = true #40 0x00007febdd184845 in SvpSalInstance::CheckTimeout(bool) (this=this@entry=0x5597ab4c8ff0, bExecuteTimers=bExecuteTimers@entry=true) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:210 aGuard = {pT = 0x5597ab4cccf0} pSVData = aTimeOfDay = {tv_sec = 1624059077, tv_usec = 742620} bRet = true #41 0x00007febdd184b54 in SvpSalInstance::DoYield(bool, bool) (this=0x5597ab4c8ff0, bWait=, bHandleAllCurrentEvents=) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:467 __PRETTY_FUNCTION__ = "virtual bool SvpSalInstance::DoYield(bool, bool)" bEvent = false pSVData = 0x7febdd9ee300 ::get()::instance> bTimeout = bSkipPoll = pMutex = #42 0x00007febdcf355b2 in ImplYield(bool, bool) (i_bWait=i_bWait@entry=true, i_bAllEvents=i_bAllEvents@entry=false) at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:455 pSVData = 0x7febdd9ee300 ::get()::instance> bProcessedEvent = #43 0x00007febdcf3575d in Application::Yield() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:532 #44 0x00007febdcf357ab in Application::Execute() () at /home/buildslave/source/libo-core/vcl/source/app/svapp.cxx:444 pSVData = 0x7febdd9ee300 ::get()::instance> #45 0x00007febe2c7f149 in desktop::Desktop::Main() (this=0x7ffcac128ad0) at /home/buildslave/source/libo-core/desktop/source/app/app.cxx:1602 aOptions = { = { = {_vptr.ConfigurationBroadcaster = 0x7febde7c6658 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, = {_vptr.ConfigurationListener = 0x7febde7c6688 }, }, static sm_pSingleImplConfig = 0x5597ac47c590, static sm_nAccessibilityRefCount = 6} xRestartManager = uno::Reference to (class comphelper::OOfficeRestartManager *) 0x5597ac2ef5e8 bAbort = bExistsRecoveryData = false bExistsSessionData = false pidfileName = "" aTitle = "LibreOfficeDev 7.3.0.0.alpha0 [d95e400b5fffb10e716f5b27caebb4eae5fd5cc7]" aEvent = { = {Source = empty uno::Reference}, EventName = "OnStartApp", ViewController = empty uno::Reference, Supplement = uno::Any(void)} xDesktop = uno::Reference to (class framework::Desktop *) 0x5597ac370468 bMustLockProfile = bCrashed = false aAppearanceCfg = { = { = {_vptr.ConfigurationBroadcaster = 0x7febde7c66e0 , mpList = std::unique_ptr >> = {get() = 0x0}, m_nBroadcastBlocked = 0, m_nBlockedHint = ConfigurationHints::NONE}, sSubTree = "Office.Common/View", m_xHierarchyAccess = uno::Reference to (class configmgr::RootAccess *) 0x5597ac401ac8, xChangeLstnr = empty uno::Reference, m_nMode = ConfigItemMode::NONE, m_bIsModified = false, m_bEnableInternalNotification = false, m_nInValueChange = 0}, nDragMode = DragMode::SystemDep, nSnapMode = SnapType::NONE, nMiddleMouse = MouseMiddleButtonAction::PasteSelection, nAAMinPixelHeight = 8, bFontAntialiasing = true, bMenuMouseFollow = true, static bInitialized = true} layer = {m_aEnvTypeName = "gcc3", m_xPreviousContext = uno::Reference to (class (anonymous namespace)::DesktopEnvironmentContext *) 0x5597ab4c6348} eStatus = rCmdLineArgs = @0x7febe2dd8a60: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest7d0b5424-d08c-11eb-b26b-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} inst_fin = desktop::userinstall::EXISTED xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x5597ab4daeb0 #46 0x00007febdcf4e717 in ImplSVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:199 pSVData = 0x7febdd9ee300 ::get()::instance> nReturn = 1 bWasInitVCL = bInit = true nRet = 0 #47 0x00007febdcf4e897 in SVMain() () at /home/buildslave/source/libo-core/vcl/source/app/svmain.cxx:231 #48 0x00007febe2cc95a6 in soffice_main() () at /home/buildslave/source/libo-core/desktop/source/app/sofficemain.cxx:98 rCmdLineArgs = @0x7febe2dd8a60: {m_cwdUrl = std::optional = {[contained value] = "file:///srv/crashtestdata/control/task555"}, m_minimized = false, m_invisible = false, m_norestore = true, m_headless = true, m_eventtesting = false, m_quickstart = false, m_noquickstart = true, m_terminateafterinit = false, m_nologo = true, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = false, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_version = false, m_splashpipe = false, m_textcat = false, m_scriptcat = false, m_safemode = false, m_unknown = "", m_bEmpty = false, m_bDocumentArgs = false, m_accept = std::__debug::vector of length 1, capacity 1 = {"pipe,name=pytest7d0b5424-d08c-11eb-b26b-98f2b32c495c;urp"}, m_unaccept = std::__debug::vector of length 0, capacity 0, m_openlist = std::__debug::vector of length 0, capacity 0, m_viewlist = std::__debug::vector of length 0, capacity 0, m_startlist = std::__debug::vector of length 0, capacity 0, m_forceopenlist = std::__debug::vector of length 0, capacity 0, m_forcenewlist = std::__debug::vector of length 0, capacity 0, m_printlist = std::__debug::vector of length 0, capacity 0, m_printtolist = std::__debug::vector of length 0, capacity 0, m_printername = "", m_conversionlist = std::__debug::vector of length 0, capacity 0, m_conversionparams = "", m_conversionout = "", m_convertimages = "", m_infilter = std::__debug::vector of length 0, capacity 0, m_language = "", m_pidfile = ""} aUnknown = "" bSuccess = aDesktop = { = { = {_vptr.ILibreOfficeKitNotifier = 0x7febe2dcc858 }, m_pCallbackData = 0x0, m_pCallback = 0x0}, m_rSplashScreen = empty uno::Reference, m_bCleanedExtensionCache = false, m_bServicesRegistered = true, m_aBootstrapError = desktop::Desktop::BE_OK, m_aBootstrapErrorMessage = "", m_aBootstrapStatus = desktop::Desktop::BS_OK, m_xLockfile = std::unique_ptr = {get() = 0x0}, m_firstRunTimer = { = {_vptr.Task = 0x7febdd9631f0 , mpSchedulerData = 0x0, mpDebugName = 0x7febe2d55130 "desktop::Desktop m_firstRunTimer", mePriority = TaskPriority::DEFAULT, mbActive = false, mbStatic = false}, maInvokeHandler = {function_ = 0x7febe2c77f60 , instance_ = 0x7ffcac128ad0, file_ = 0x7febe2d550f0 "/home/buildslave/source/libo-core/desktop/source/app/app.cxx", line_ = 430, target_ = 0x7febe2d550c8 "Desktop::LinkStubAsyncInitFirstRun"}, mnTimeout = 3000, mbAuto = false}, m_aUpdateThread = {_M_id = {_M_thread = 0}}} #49 0x00005597aa38c8ee in sal_main () at /home/buildslave/source/libo-core/desktop/source/app/main.c:49 ret = #50 0x00005597aa38c93b in main (argc=, argv=) at /home/buildslave/source/libo-core/desktop/source/app/main.c:47 ret =