[New LWP 1596568] [New LWP 1596767] [New LWP 1597055] [New LWP 1597059] [New LWP 1597065] [New LWP 1597918] [New LWP 1596772] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/buildslave/build/instdir/program/soffice.bin -env:UserInstallation=file:/'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f95cd13ceec in ?? () from /lib/x86_64-linux-gnu/libc.so.6 [Current thread is 1 (Thread 0x7f95c6871e00 (LWP 1596568))] Thread 7 (Thread 0x7f95bd97f6c0 (LWP 1596772)): #0 0x00007f95cd1bc6df in accept () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f95cd4a2210 in osl_acceptPipe(oslPipe) (pPipe=0x7f95b4001570) at /home/buildslave/source/libo-core/sal/osl/unx/pipe.cxx:388 s = pAcceptedPipe = socket = 12 __PRETTY_FUNCTION__ = "oslPipeImpl* osl_acceptPipe(oslPipe)" aGuard = {_M_device = 0x7f95b4001570, _M_owns = false} flags = #2 0x00007f95bda19bb1 in osl::Pipe::accept(osl::StreamPipe&) (this=this@entry=0x7f95bd97d4f8, Connection=...) at /home/buildslave/source/libo-core/include/osl/pipe.hxx:155 #3 0x00007f95bda198eb in io_acceptor::PipeAcceptor::accept() (this=0x7f95b4000d50) at /home/buildslave/source/libo-core/io/source/acceptor/acc_pipe.cxx:157 pipe = {m_handle = 0x7f95b4001570} pConn = rtl::Reference to 0x7f95b4009530 status = #4 0x00007f95bda1f5b8 in (anonymous namespace)::OAcceptor::accept(rtl::OUString const&) (this=0x562a41330450, sConnectionDescription="pipe,name=pytest5451c136-1b6e-11f0-a687-98f2b32c495c") at /home/buildslave/source/libo-core/io/source/acceptor/acceptor.cxx:198 guard = {m_pFlag = 0x562a413304c8} r = empty uno::Reference #5 0x00007f95bf60ea6d in desktop::Acceptor::run() (this=this@entry=0x562a41331320) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:110 g = {_M_device = 0x562a41331358, _M_owns = true} rConnection = empty uno::Reference aDescription = "pipe,name=pytest5451c136-1b6e-11f0-a687-98f2b32c495c,uniqueValue=140280946758992" rInstanceProvider = uno::Reference to (desktop::AccInstanceProvider *) 0x7f95b4000d38 #6 0x00007f95bf60ef19 in desktop::offacc_workerfunc(void*) (acc=0x562a41331320) at /home/buildslave/source/libo-core/desktop/source/offacc/acceptor.cxx:46 #7 0x00007f95cd4b33b3 in osl_thread_start_Impl(void*) (pData=0x562a413368e0) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x562a413368e0 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #8 0x00007f95cd13b1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #9 0x00007f95cd1bb89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 6 (Thread 0x7f959f7ff6c0 (LWP 1597918)): #0 0x00007f95cd13812b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f95cd13e4da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f95cd4a0be9 in osl_acquireMutex(oslMutex) (pMutex=0x562a4035c390) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f95c76417d5 in osl::Mutex::acquire() (this=0x562a4035c698) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x562a4035c560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x562a4035c690, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x562a4035c560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f95cb501750 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f95cb501969 in osl::Guard::Guard(comphelper::SolarMutex*) (this=, pT_=) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:137 #7 0x00007f95cb500f59 in drawinglayer::primitive2d::BufferedDecompositionFlusher::run() (this=0x7f95a4631ad0) at /home/buildslave/source/libo-core/drawinglayer/source/primitive2d/BufferedDecompositionFlusher.cxx:132 aGuard = {pT = 0x562a4035c690} aNow = {__d = {__r = 48899689559677969}} aRemoved1 = std::__debug::vector of length 21, capacity 32 = {rtl::Reference to 0x562a41e86850, rtl::Reference to 0x562a41e8b0c0, rtl::Reference to 0x562a413697f0, rtl::Reference to 0x7f959ab79470, rtl::Reference to 0x562a415013f0, rtl::Reference to 0x562a4180c1d0, rtl::Reference to 0x7f95a414b160, rtl::Reference to 0x7f95a46c14e0, rtl::Reference to 0x7f959aa0ac30, rtl::Reference to 0x562a41e8da00, rtl::Reference to 0x7f95a4706de0, rtl::Reference to 0x562a41e59a50, rtl::Reference to 0x562a41e59620, rtl::Reference to 0x562a414aa760, rtl::Reference to 0x7f95a414afb0, rtl::Reference to 0x562a41e8e150, rtl::Reference to 0x562a41e8ded0, rtl::Reference to 0x7f95a4728a90, rtl::Reference to 0x7f95a42ce1d0, rtl::Reference to 0x562a4144cd60, rtl::Reference to 0x7f959ab792f0} aRemoved2 = std::__debug::vector of length 0, capacity 0 #8 0x00007f95cb50156d in osl::threadFunc(void*) (param=0x7f95a4631ad0) at /home/buildslave/source/libo-core/include/osl/thread.hxx:189 pObj = 0x7f95a4631ad0 #9 0x00007f95cd4b33b3 in osl_thread_start_Impl(void*) (pData=0x7f95a4637320) at /home/buildslave/source/libo-core/sal/osl/unx/thread.cxx:237 terminate = false pImpl = 0x7f95a4637320 __PRETTY_FUNCTION__ = "void* osl_thread_start_Impl(void*)" #10 0x00007f95cd13b1f5 in () at /lib/x86_64-linux-gnu/libc.so.6 #11 0x00007f95cd1bb89c in () at /lib/x86_64-linux-gnu/libc.so.6 Thread 5 (Thread 0x7f95aeffd6c0 (LWP 1597065)): #0 0x00007f95cd13812b in () at /lib/x86_64-linux-gnu/libc.so.6 #1 0x00007f95cd13e4da in pthread_mutex_lock () at /lib/x86_64-linux-gnu/libc.so.6 #2 0x00007f95cd4a0be9 in osl_acquireMutex(oslMutex) (pMutex=0x562a4035c390) at /home/buildslave/source/libo-core/sal/osl/unx/mutex.cxx:99 nRet = #3 0x00007f95c76417d5 in osl::Mutex::acquire() (this=0x562a4035c698) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:63 pInst = 0x562a4035c560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #4 SvpSalYieldMutex::doAcquire(unsigned int) (this=0x562a4035c690, nLockCount=1) at /home/buildslave/source/libo-core/vcl/headless/svpinst.cxx:368 pInst = 0x562a4035c560 __PRETTY_FUNCTION__ = "virtual void SvpSalYieldMutex::doAcquire(sal_uInt32)" #5 0x00007f95cbb1fc80 in comphelper::SolarMutex::acquire(unsigned int) (this=, nLockCount=nLockCount@entry=1) at /home/buildslave/source/libo-core/include/comphelper/solarmutex.hxx:86 __PRETTY_FUNCTION__ = "void comphelper::SolarMutex::acquire(sal_uInt32)" #6 0x00007f95cbb1fcbd in osl::Guard::Guard(comphelper::SolarMutex&) (t=, this=0x7f95aeffa570) at /home/buildslave/source/libo-core/include/osl/mutex.hxx:144 #7 SolarMutexGuard::SolarMutexGuard() (this=) at /home/buildslave/source/libo-core/include/vcl/svapp.hxx:1342 #8 0x00007f95cbc236be in (anonymous namespace)::XFrameImpl::getContainerWindow() (this=0x562a41f1f6c0) at /home/buildslave/source/libo-core/framework/source/services/frame.cxx:841 g = {> = {pT = 0x562a4035c690}, } #9 0x00007f95cbc06a8a in framework::LoadEnv::impl_reactForLoadingState() (this=this@entry=0x7f95aeffa9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1600 bMinimized = bStartPres = pFrameName = xWindow = uno::Reference to (com::sun::star::uno::XInterface *) 0x1d bHidden = pWindow = {m_rInnerRef = empty rtl::Reference} aReadLock = {pT = 0x7f95aeffa9f0} aRequest = Python Exception : bThrow = #10 0x00007f95cbc0705b in framework::LoadEnv::impl_setResult(bool) (this=this@entry=0x7f95aeffa9f0, bResult=) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:535 g = {pT = 0x7f95aeffa9f0} #11 0x00007f95cbc0bef6 in framework::LoadEnv::impl_loadContent() (this=this@entry=0x7f95aeffa9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:1183 xTargetFrameProps = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x562a41f1f780 bResult = aWriteLock = {pT = 0x7f95aeffa9f0} sTarget = "_blank" xTargetFrame = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x562a41f1f730 xTargetLock = uno::Reference to ((anonymous namespace)::XFrameImpl *) 0x562a41f1f758 bHidden = bMinimized = false bPreview = false bStartPres = lDescriptor = uno::Sequence of length 12 = {{Name = "URL", Handle = 0, Value = uno::Any("string": "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UCBContent", Handle = 0, Value = uno::Any("com.sun.star.ucb.XContent": { = {_vptr.XInterface = 0x562a41ead398}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "UpdateDocMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InteractionHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f95a0008628}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "Hidden", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AuthenticationHandler", Handle = 0, Value = uno::Any("com.sun.star.task.XInteractionHandler": { = {_vptr.XInterface = 0x7f95a0008628}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "InputStream", Handle = 0, Value = uno::Any("com.sun.star.io.XInputStream": { = {_vptr.XInterface = 0x7f95a46daa38}, }), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "TypeName", Handle = 0, Value = uno::Any("string": "writer_MS_Word_2007"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "AbortOnLoadFailure", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "ReadOnly", Handle = 0, Value = uno::Any("boolean": 1 '\001'), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "MacroExecutionMode", Handle = 0, Value = uno::Any("short": 0), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}, {Name = "FilterName", Handle = 0, Value = uno::Any("string": "MS Word 2007 XML"), State = com::sun::star::beans::PropertyState::PropertyState_DIRECT_VALUE}} sURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx" xLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f95a40ba660 xAsyncLoader = empty uno::Reference xSyncLoader = uno::Reference to ((anonymous namespace)::SfxFrameLoader_Impl *) 0x7f95a40ba688 #12 0x00007f95cbc0c1d2 in framework::LoadEnv::start() (this=this@entry=0x7f95aeffa9f0) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:415 bStarted = #13 0x00007f95cbc0c8db in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence const&, com::sun::star::uno::Reference const&, rtl::OUString const&, int, LoadEnvFeatures) (this=this@entry=0x7f95aeffa9f0, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx", lMediaDescriptor=uno::Sequence of length 3 = {...}, xBaseFrame=uno::Reference to (framework::Desktop *) 0x562a4061ed38, sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, eFeature=LoadEnvFeatures::NONE) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:311 g = {pT = 0x7f95aeffa9f0} aRealURL = "file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx" xParser = uno::Reference to ((anonymous namespace)::URLTransformer *) 0x7f95a42cf808 pIt = {, true>> = {_M_cur = 0x0}, } bUIMode = false #14 0x00007f95cbc0cb25 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference const&, com::sun::star::uno::Reference const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence const&) (xLoader=uno::Reference to (framework::Desktop *) 0x562a4061ed48, xContext=uno::Reference to (cppu::(anonymous namespace)::ComponentContext *) 0x562a403590c8, sURL="file:///srv/crashtestdata/current/srv/crashtestdata/files/caolan/swanchoredobject_getpageframe_heap_use_after_free.docx", sTarget="_blank", nSearchFlags=nSearchFlags@entry=0, lArgs=uno::Sequence of length 3 = {...}) at /home/buildslave/source/libo-core/framework/source/loadenv/loadenv.cxx:167 aEnv = Python Exception : No type named std::__detail::_Hash_node, true>. {m_mutex = {mutex = 0x7f95a00064f0}, m_xContext = uno::Reference to (class cppu::(anonymous namespace)::ComponentContext *) 0x562a403590c8, m_xBaseFrame = uno::Reference to (class framework::Desktop *) 0x562a4061ed38, m_xTargetFrame = uno::Reference to (class (anonymous namespace)::XFrameImpl *) 0x562a41f1f730, m_sTarget = "_blank", m_nSearchFlags = 0, m_lMediaDescriptor = { = {m_aMap = std::__debug::unordered_map with 12 elements}, static PROP_ABORTED = {pData = 0x7f95cbe1f2f0