FAULTING_IP: sal3!rtl_uString_new_WithLength+98 [c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx @ 1274] 636f0a88 c7400400000000 mov dword ptr [eax+4],0 EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff) ExceptionAddress: 00000000636f0a88 (sal3!rtl_uString_new_WithLength+0x0000000000000098) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000001 Parameter[1]: 0000000000000004 Attempt to write to address 0000000000000004 FAULTING_THREAD: 0000000000000d94 PROCESS_NAME: soffice.bin ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. EXCEPTION_PARAMETER1: 0000000000000001 EXCEPTION_PARAMETER2: 0000000000000004 WRITE_ADDRESS: 0000000000000004 FOLLOWUP_IP: sal3!rtl_uString_new_WithLength+98 [c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx @ 1274] 636f0a88 c7400400000000 mov dword ptr [eax+4],0 NTGLOBALFLAG: 0 APPLICATION_VERIFIER_FLAGS: 0 BUGCHECK_STR: APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_WRITE PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_DEREFERENCE DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE LAST_CONTROL_TRANSFER: from 00000000636ecc0f to 00000000636f0a88 STACK_TEXT: 00b9b51c 636ecc0f 00b9b554 00000020 00b9b544 sal3!rtl_uString_new_WithLength+0x98 [c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx @ 1274] 00b9b52c 60997fdd 00b9b554 0577afa0 00000010 sal3!rtl_uStringbuffer_newFromStr_WithLength+0x5f [c:\cygwin\home\tinderbox\master\sal\rtl\ustrbuf.cxx @ 44] 00b9b544 60a56bd8 00b9b97c fca7dbf1 00000000 utllo!rtl::OUStringBuffer::OUStringBuffer+0x3d [c:\cygwin\home\tinderbox\master\include\rtl\ustrbuf.hxx @ 129] 00b9b5a0 5f6e37a8 00b9b7d4 00b9b97c fca72e41 utllo!GetEnglishSearchFontName+0x38 [c:\cygwin\home\tinderbox\master\unotools\source\misc\fontdefs.cxx @ 359] 00b9b880 5f44b273 00b9b958 fca72f85 0577af98 vcllo!PhysicalFontCollection::ImplFindByFont+0x168 [c:\cygwin\home\tinderbox\master\vcl\source\font\physicalfontcollection.cxx @ 1032] 00b9b944 5f44b56f 051253a0 00b9b958 fca72f19 vcllo!ImplFontCache::GetFontEntry+0xd3 [c:\cygwin\home\tinderbox\master\vcl\source\outdev\font.cxx @ 1281] 00b9b9d8 5f44dd6a 051253a0 68ba08b4 00b9ba14 vcllo!ImplFontCache::GetFontEntry+0x6f [c:\cygwin\home\tinderbox\master\vcl\source\outdev\font.cxx @ 1257] 00b9ba6c 5f45d6ce fca72df1 19930522 00000007 vcllo!OutputDevice::ImplNewFont+0x19a [c:\cygwin\home\tinderbox\master\vcl\source\outdev\font.cxx @ 1554] 00b9bb30 5f457348 0b8d28e8 00000000 00000012 vcllo!OutputDevice::ImplLayout+0x6e [c:\cygwin\home\tinderbox\master\vcl\source\outdev\text.cxx @ 1326] 00b9bc30 5f459c93 0b8d28e8 00000000 00000000 vcllo!OutputDevice::GetTextArray+0x168 [c:\cygwin\home\tinderbox\master\vcl\source\outdev\text.cxx @ 1018] 00b9bc54 5aaea531 0b8d28e8 00000000 ffffffff vcllo!OutputDevice::GetTextWidth+0x23 [c:\cygwin\home\tinderbox\master\vcl\source\outdev\text.cxx @ 933] 00b9bce8 5aaea674 0f5ba8e8 00b9bd00 00b9bd3c svxlo!CalculateHorizontalScalingFactor+0x261 [c:\cygwin\home\tinderbox\master\svx\source\customshapes\enhancedcustomshapefontwork.cxx @ 190] 00b9bd50 5aae5d30 111d7540 0f5ba8e8 ff7594f7 svxlo!EnhancedCustomShapeFontWork::CreateFontWork+0xb4 [c:\cygwin\home\tinderbox\master\svx\source\customshapes\enhancedcustomshapefontwork.cxx @ 858] 00b9bf08 58718ccb 06b0e714 00b9bf30 ff7594e5 svxlo!`anonymous namespace'::EnhancedCustomShapeEngine::render+0x1c0 [c:\cygwin\home\tinderbox\master\svx\source\customshapes\enhancedcustomshapeengine.cxx @ 300] 00b9bf58 5862c667 ff75ead1 000001b0 671b22e2 svxcorelo!SdrObjCustomShape::GetSdrObjectFromCustomShape+0x8b [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdoashp.cxx @ 443] 00b9c16c 58634d90 00b9c18c ff75ea1d fca7aee5 svxcorelo!sdr::contact::ViewContactOfSdrObjCustomShape::createViewIndependentPrimitive2DSequence+0xe7 [c:\cygwin\home\tinderbox\master\svx\source\sdr\contact\viewcontactofsdrobjcustomshape.cxx @ 119] 00b9c1a0 5872e7d2 00b9c1ec ff75e9bd 19930522 svxcorelo!sdr::contact::ViewContact::getViewIndependentPrimitive2DSequence+0x40 [c:\cygwin\home\tinderbox\master\svx\source\sdr\contact\viewcontact.cxx @ 247] 00b9c200 58728da7 0f5ba8e8 00b9c218 58717d4f svxcorelo!SdrObject::RecalcBoundRect+0x72 [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdobj.cxx @ 879] 00b9c20c 58717d4f 0f5ba8e8 00b9c338 5cddb9fd svxcorelo!SdrObject::GetCurrentBoundRect+0x27 [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdobj.cxx @ 858] 00b9c218 5cddb9fd ff75e80c 00000016 00008316 svxcorelo!SdrObjCustomShape::GetCurrentBoundRect+0xf [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdoashp.cxx @ 1438] 00b9c338 5cdde28d 00b9c358 00000007 6357ecfa swlo!SwAnchoredDrawObject::GetObjBoundRect+0x43d [c:\cygwin\home\tinderbox\master\sw\source\core\layout\anchoreddrawobject.cxx @ 670] 00b9c3a0 5cd3330c 00b9c3cc 0bf99220 00b9c3fc swlo!SwAnchoredObject::GetObjRectWithSpaces+0x8d [c:\cygwin\home\tinderbox\master\sw\source\core\layout\anchoredobject.cxx @ 586] 00b9c3f0 5cd335a6 00000001 10d45818 10d45818 swlo!SwDrawContact::DisconnectFromLayout+0x7c [c:\cygwin\home\tinderbox\master\sw\source\core\draw\dcontact.cxx @ 1598] 00b9c424 5ce84abb 0f5ba8e8 0b8790a8 00b9c440 swlo!SwDrawContact::DisconnectObjFromLayout+0x106 [c:\cygwin\home\tinderbox\master\sw\source\core\draw\dcontact.cxx @ 1697] 00b9c46c 5ce845f8 1139b734 00b9c484 5ca4abd2 swlo!SwLayoutFrm::DestroyImpl+0x1db [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 493] 00b9c480 5ce84b04 079ceb60 00b9c4c4 5d1c756f swlo!SwFrm::DestroyFrm+0x28 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 390] 00b9c4c8 5ce4e59b 0000009f 0006cb8f 00002f81 swlo!SwLayoutFrm::DestroyImpl+0x224 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 500] 00b9c514 5ce845f8 079ccc80 079ccc80 079ccc80 swlo!SwPageFrm::DestroyImpl+0x1fb [c:\cygwin\home\tinderbox\master\sw\source\core\layout\pagechg.cxx @ 271] 00b9c528 5ce84b04 079ccd00 00b9c548 76c24443 swlo!SwFrm::DestroyFrm+0x28 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 390] 00b9c570 5ce456ff 1137ca10 11372270 11372270 swlo!SwLayoutFrm::DestroyImpl+0x224 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 500] 00b9c5a4 5ce845f8 5d1cfdb4 ff75eef0 0f4c6f00 swlo!SwRootFrm::DestroyImpl+0x17f [c:\cygwin\home\tinderbox\master\sw\source\core\layout\newfrm.cxx @ 614] 00b9c5b8 5d1d0e86 0bf2e7f8 1137cb30 00b9c5d4 swlo!SwFrm::DestroyFrm+0x28 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 390] 00b9c5c8 5ca6e444 1137cb30 00b9c5e0 5ca65679 swlo!boost::detail::sp_counted_impl_pd::dispose+0x16 [c:\cygwin\home\tinderbox\master\workdir\unpackedtarball\boost\boost\smart_ptr\detail\sp_counted_impl.hpp @ 153] 00b9c5d4 5ca65679 0f4c6ee0 00b9c5fc 5ca64f7f swlo!boost::detail::sp_counted_base::release+0x24 [c:\cygwin\home\tinderbox\master\workdir\unpackedtarball\boost\boost\smart_ptr\detail\sp_counted_base_w32.hpp @ 104] 00b9c5e0 5ca64f7f ff75eec8 0f4c6edc 00b9c650 swlo!boost::detail::shared_count::~shared_count+0x19 [c:\cygwin\home\tinderbox\master\workdir\unpackedtarball\boost\boost\smart_ptr\detail\shared_count.hpp @ 380] 00b9c5fc 635897f2 19930522 00000007 00b9c61c swlo!boost::shared_ptr::~shared_ptr+0x3f 00b9d7f0 5cb2fa9a 0b8790a8 1041fc98 00b9dcfc MSVCR120!_NLG_Return [f:\dd\vctools\crt\crtw32\eh\i386\lowhelpr.asm @ 64] 00b9d8ac 5cd6dbbc 0b8790a8 1041fc98 00b9dcfc swlo!SwCrsrShell::SwCrsrShell+0x4a [c:\cygwin\home\tinderbox\master\sw\source\core\crsr\crsrsh.cxx @ 2652] 00b9d8d8 5cdc554a 0b8790a8 1041fc98 00b9dcfc swlo!SwEditShell::SwEditShell+0x3c [c:\cygwin\home\tinderbox\master\sw\source\core\edit\edws.cxx @ 42] 00b9d900 5d513e6c 0b8790a8 1041fc98 00b9dcfc swlo!SwFEShell::SwFEShell+0x3a [c:\cygwin\home\tinderbox\master\sw\source\core\frmedt\fews.cxx @ 612] 00b9d95c 5d4610eb 0b8790a8 1041fc98 055a1c88 swlo!SwWrtShell::SwWrtShell+0x3c [c:\cygwin\home\tinderbox\master\sw\source\uibase\wrtsh\wrtsh1.cxx @ 1635] 00b9ddec 5d467642 0b98e850 00000000 ff75f52c swlo!SwView::SwView+0xcfb [c:\cygwin\home\tinderbox\master\sw\source\uibase\uiview\view.cxx @ 819] 00b9de18 5ebfe916 0b98e850 00000000 055629a8 swlo!SwView::CreateInstance+0x52 [c:\cygwin\home\tinderbox\master\sw\source\uibase\uiview\view0.cxx @ 84] 00b9de2c 5eb2f9a4 0b98e850 00000000 fca774a6 sfxlo!SfxViewFactory::CreateInstance+0x16 [c:\cygwin\home\tinderbox\master\sfx2\source\view\viewfac.cxx @ 28] 00b9e00c 5ebe8c18 06d82758 00b9e040 00b9e280 sfxlo!SfxBaseModel::createViewController+0x404 [c:\cygwin\home\tinderbox\master\sfx2\source\doc\sfxbasemodel.cxx @ 4284] 00b9e094 5ebeb5b8 00b9e288 00b9e2e0 00b9e430 sfxlo!`anonymous namespace'::SfxFrameLoader_Impl::impl_createDocumentView+0x78 [c:\cygwin\home\tinderbox\master\sfx2\source\view\frmload.cxx @ 602] 00b9e2fc 5de3bd20 0799d5cc 00b9e414 00b9e430 sfxlo!`anonymous namespace'::SfxFrameLoader_Impl::load+0x9c8 [c:\cygwin\home\tinderbox\master\sfx2\source\view\frmload.cxx @ 726] 00b9e450 5de406b9 ff9a4aee 00b9e480 5dd7aef0 fwklo!framework::LoadEnv::impl_loadContent+0x9a0 [c:\cygwin\home\tinderbox\master\framework\source\loadenv\loadenv.cxx @ 1126] 00b9e504 5ddd46dd ff9a4852 76bb140b 76b45b87 fwklo!framework::LoadEnv::startLoading+0x179 [c:\cygwin\home\tinderbox\master\framework\source\loadenv\loadenv.cxx @ 387] 00b9e7b8 5ddd4348 00b9e7d4 00b9e860 00b9e89c fwklo!framework::LoadDispatcher::impl_dispatch+0x27d [c:\cygwin\home\tinderbox\master\framework\source\dispatch\loaddispatcher.cxx @ 116] 00b9e7f8 601e3d45 07b91c74 00b9e860 00b9e89c fwklo!framework::LoadDispatcher::dispatch+0x58 [c:\cygwin\home\tinderbox\master\framework\source\dispatch\loaddispatcher.cxx @ 55] 00b9e8f0 601e3644 00b9e930 fca77f13 76bb140b svtlo!OpenFileDropTargetListener::implts_OpenFile+0x265 [c:\cygwin\home\tinderbox\master\svtools\source\misc\openfiledroptargetlistener.cxx @ 222] 00b9e960 5f26e4ee 0576caf4 00b9e980 fca77cc5 svtlo!OpenFileDropTargetListener::drop+0xd4 [c:\cygwin\home\tinderbox\master\svtools\source\misc\openfiledroptargetlistener.cxx @ 85] 00b9ea04 5f26be8b 00b9eb0c 00000082 00000105 vcllo!DNDListenerContainer::fireDropEvent+0x1be [c:\cygwin\home\tinderbox\master\vcl\source\window\dndlcon.cxx @ 146] 00b9ea64 5f26b48e 0b7ac6d8 00b9eb0c 00000082 vcllo!DNDEventDispatcher::fireDropEvent+0x11b [c:\cygwin\home\tinderbox\master\vcl\source\window\dndevdis.cxx @ 427] 00b9eab4 5db7c5fd 06bf1434 00b9eb04 ffb90b05 vcllo!DNDEventDispatcher::drop+0x11e [c:\cygwin\home\tinderbox\master\vcl\source\window\dndevdis.cxx @ 115] 00b9eaf4 5db7b9e0 00b9eb04 ffb90aad 06bfa9b0 dnd!DropTarget::fire_drop+0xad [c:\cygwin\home\tinderbox\master\dtrans\source\win32\dnd\target.cxx @ 495] 00b9eb5c 5db7478b 06bfa9b0 0539dbf0 00000000 dnd!DropTarget::Drop+0x1a0 [c:\cygwin\home\tinderbox\master\dtrans\source\win32\dnd\target.cxx @ 467] 00b9eb7c 76dcfef9 055035b8 0539dbf0 00000000 dnd!IDropTargetImpl::Drop+0x2b [c:\cygwin\home\tinderbox\master\dtrans\source\win32\dnd\idroptarget.cxx @ 101] 00b9ebb0 76227fee 0b9880a8 00000000 0560f2c0 ole32!CPrivDragDrop::PrivDragDrop+0xcc [d:\vsp2g\com\ole32\com\rot\getif.cxx @ 960] 00b9ebf0 762b0cc6 76dcfe2d 00b9edd0 0000000b RPCRT4!Invoke+0x2a 00b9eff4 762b093e 0b9cddb0 0551c6c8 053d1a08 RPCRT4!NdrStubCall2+0x24a 00b9f03c 76dda8c5 0b9cddb0 053d1a08 0551c6c8 RPCRT4!CStdStubBuffer_Invoke+0xb9 00b9f084 76ddaa59 053d1a08 0b91c128 05526b20 ole32!SyncStubInvoke+0x3c [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1161] 00b9f0d0 76d06196 053d1a08 0b7f5978 0b9cddb0 ole32!StubInvoke+0xb9 [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1372] 00b9f1ac 76d060a7 0551c6c8 00000000 0b9cddb0 ole32!CCtxComChnl::ContextInvoke+0xfa [d:\vsp2g\com\ole32\com\dcomrem\ctxchnl.cxx @ 1255] 00b9f1c8 76d06dae 053d1a08 00000001 0b9cddb0 ole32!MTAInvoke+0x1a [d:\vsp2g\com\ole32\com\dcomrem\callctrl.cxx @ 2020] 00b9f1f4 76dda981 053d1a08 00000001 0b9cddb0 ole32!STAInvoke+0x46 [d:\vsp2g\com\ole32\com\dcomrem\callctrl.cxx @ 1839] 00b9f228 76dda79b d0908070 0551c6c8 0b9cddb0 ole32!AppInvoke+0xaa [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1060] 00b9f304 76ddae2d 053d19b0 05522038 00000400 ole32!ComInvokeWithLockAndIPID+0x32c [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1675] 00b9f32c 76d06b86 053d19b0 00000400 00f5c3e8 ole32!ComInvoke+0xc5 [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1445] 00b9f340 76d06b45 053d19b0 00000000 76d06aa8 ole32!ThreadDispatch+0x23 [d:\vsp2g\com\ole32\com\dcomrem\chancont.cxx @ 298] 00b9f384 76ae8817 005802b6 00000400 0000babe ole32!ThreadWndProc+0x167 [d:\vsp2g\com\ole32\com\dcomrem\chancont.cxx @ 654] 00b9f3b0 76ae898e 76d06aa8 005802b6 00000400 USER32!InternalCallWinProc+0x23 00b9f428 76ae8ab9 00000000 76d06aa8 005802b6 USER32!UserCallWinProcCheckWow+0x109 00b9f48c 76ae8b10 76d06aa8 00000000 00b9f4b0 USER32!DispatchMessageWorker+0x380 00b9f49c 5f71dc26 00b9f4bc 00000000 00f011b8 USER32!DispatchMessageW+0xf 00b9f4b0 5f71dd72 00b9f4bc 005802b6 00000400 vcllo!ImplSalDispatchMessage+0x36 [c:\cygwin\home\tinderbox\master\vcl\win\source\app\salinst.cxx @ 615] 00b9f4e4 5f71dae7 00000001 00000000 00f011b8 vcllo!ImplSalYield+0xb2 [c:\cygwin\home\tinderbox\master\vcl\win\source\app\salinst.cxx @ 644] 00b9f514 5f678d35 00000001 00000000 00000000 vcllo!W STACK_COMMAND: .cxr 0000000000000000 ; kb ; ~0s ; kb FAULTING_SOURCE_CODE: No source found for 'c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx' SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: sal3!rtl_uString_new_WithLength+98 FOLLOWUP_NAME: MachineOwner MODULE_NAME: sal3 IMAGE_NAME: sal3.dll DEBUG_FLR_IMAGE_TIMESTAMP: 55afda7d FAILURE_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE_c0000005_sal3.dll!rtl_uString_new_WithLength BUCKET_ID: X64_APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_WRITE_sal3!rtl_uString_new_WithLength+98 WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/soffice_bin/5_1_0_0/55b0e414/sal3_dll/5_1_0_0/55afda7d/c0000005/00030a88.htm?Retriage=1 Followup: MachineOwner ---------