Attachment 117435 Details for Bug 67583 – backtrace

backtrace

backtrace.txt (text/plain), 13.98 KB, created by Gordo on 2015-07-25 19:09:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gordo

Created: 2015-07-25 19:09:28 UTC

Size: 13.98 KB

patch

obsolete

>FAULTING_IP: 
>sal3!rtl_uString_new_WithLength+98 [c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx @ 1274]
>636f0a88 c7400400000000  mov     dword ptr [eax+4],0
>
>EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
>ExceptionAddress: 00000000636f0a88 (sal3!rtl_uString_new_WithLength+0x0000000000000098)
>   ExceptionCode: c0000005 (Access violation)
>  ExceptionFlags: 00000000
>NumberParameters: 2
>   Parameter[0]: 0000000000000001
>   Parameter[1]: 0000000000000004
>Attempt to write to address 0000000000000004
>
>FAULTING_THREAD:  0000000000000d94
>
>PROCESS_NAME:  soffice.bin
>
>ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
>
>EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
>
>EXCEPTION_PARAMETER1:  0000000000000001
>
>EXCEPTION_PARAMETER2:  0000000000000004
>
>WRITE_ADDRESS:  0000000000000004 
>
>FOLLOWUP_IP: 
>sal3!rtl_uString_new_WithLength+98 [c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx @ 1274]
>636f0a88 c7400400000000  mov     dword ptr [eax+4],0
>
>NTGLOBALFLAG:  0
>
>APPLICATION_VERIFIER_FLAGS:  0
>
>BUGCHECK_STR:  APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_WRITE
>
>PRIMARY_PROBLEM_CLASS:  NULL_CLASS_PTR_DEREFERENCE
>
>DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
>
>LAST_CONTROL_TRANSFER:  from 00000000636ecc0f to 00000000636f0a88
>
>STACK_TEXT:  
>00b9b51c 636ecc0f 00b9b554 00000020 00b9b544 sal3!rtl_uString_new_WithLength+0x98 [c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx @ 1274]
>00b9b52c 60997fdd 00b9b554 0577afa0 00000010 sal3!rtl_uStringbuffer_newFromStr_WithLength+0x5f [c:\cygwin\home\tinderbox\master\sal\rtl\ustrbuf.cxx @ 44]
>00b9b544 60a56bd8 00b9b97c fca7dbf1 00000000 utllo!rtl::OUStringBuffer::OUStringBuffer+0x3d [c:\cygwin\home\tinderbox\master\include\rtl\ustrbuf.hxx @ 129]
>00b9b5a0 5f6e37a8 00b9b7d4 00b9b97c fca72e41 utllo!GetEnglishSearchFontName+0x38 [c:\cygwin\home\tinderbox\master\unotools\source\misc\fontdefs.cxx @ 359]
>00b9b880 5f44b273 00b9b958 fca72f85 0577af98 vcllo!PhysicalFontCollection::ImplFindByFont+0x168 [c:\cygwin\home\tinderbox\master\vcl\source\font\physicalfontcollection.cxx @ 1032]
>00b9b944 5f44b56f 051253a0 00b9b958 fca72f19 vcllo!ImplFontCache::GetFontEntry+0xd3 [c:\cygwin\home\tinderbox\master\vcl\source\outdev\font.cxx @ 1281]
>00b9b9d8 5f44dd6a 051253a0 68ba08b4 00b9ba14 vcllo!ImplFontCache::GetFontEntry+0x6f [c:\cygwin\home\tinderbox\master\vcl\source\outdev\font.cxx @ 1257]
>00b9ba6c 5f45d6ce fca72df1 19930522 00000007 vcllo!OutputDevice::ImplNewFont+0x19a [c:\cygwin\home\tinderbox\master\vcl\source\outdev\font.cxx @ 1554]
>00b9bb30 5f457348 0b8d28e8 00000000 00000012 vcllo!OutputDevice::ImplLayout+0x6e [c:\cygwin\home\tinderbox\master\vcl\source\outdev\text.cxx @ 1326]
>00b9bc30 5f459c93 0b8d28e8 00000000 00000000 vcllo!OutputDevice::GetTextArray+0x168 [c:\cygwin\home\tinderbox\master\vcl\source\outdev\text.cxx @ 1018]
>00b9bc54 5aaea531 0b8d28e8 00000000 ffffffff vcllo!OutputDevice::GetTextWidth+0x23 [c:\cygwin\home\tinderbox\master\vcl\source\outdev\text.cxx @ 933]
>00b9bce8 5aaea674 0f5ba8e8 00b9bd00 00b9bd3c svxlo!CalculateHorizontalScalingFactor+0x261 [c:\cygwin\home\tinderbox\master\svx\source\customshapes\enhancedcustomshapefontwork.cxx @ 190]
>00b9bd50 5aae5d30 111d7540 0f5ba8e8 ff7594f7 svxlo!EnhancedCustomShapeFontWork::CreateFontWork+0xb4 [c:\cygwin\home\tinderbox\master\svx\source\customshapes\enhancedcustomshapefontwork.cxx @ 858]
>00b9bf08 58718ccb 06b0e714 00b9bf30 ff7594e5 svxlo!`anonymous namespace'::EnhancedCustomShapeEngine::render+0x1c0 [c:\cygwin\home\tinderbox\master\svx\source\customshapes\enhancedcustomshapeengine.cxx @ 300]
>00b9bf58 5862c667 ff75ead1 000001b0 671b22e2 svxcorelo!SdrObjCustomShape::GetSdrObjectFromCustomShape+0x8b [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdoashp.cxx @ 443]
>00b9c16c 58634d90 00b9c18c ff75ea1d fca7aee5 svxcorelo!sdr::contact::ViewContactOfSdrObjCustomShape::createViewIndependentPrimitive2DSequence+0xe7 [c:\cygwin\home\tinderbox\master\svx\source\sdr\contact\viewcontactofsdrobjcustomshape.cxx @ 119]
>00b9c1a0 5872e7d2 00b9c1ec ff75e9bd 19930522 svxcorelo!sdr::contact::ViewContact::getViewIndependentPrimitive2DSequence+0x40 [c:\cygwin\home\tinderbox\master\svx\source\sdr\contact\viewcontact.cxx @ 247]
>00b9c200 58728da7 0f5ba8e8 00b9c218 58717d4f svxcorelo!SdrObject::RecalcBoundRect+0x72 [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdobj.cxx @ 879]
>00b9c20c 58717d4f 0f5ba8e8 00b9c338 5cddb9fd svxcorelo!SdrObject::GetCurrentBoundRect+0x27 [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdobj.cxx @ 858]
>00b9c218 5cddb9fd ff75e80c 00000016 00008316 svxcorelo!SdrObjCustomShape::GetCurrentBoundRect+0xf [c:\cygwin\home\tinderbox\master\svx\source\svdraw\svdoashp.cxx @ 1438]
>00b9c338 5cdde28d 00b9c358 00000007 6357ecfa swlo!SwAnchoredDrawObject::GetObjBoundRect+0x43d [c:\cygwin\home\tinderbox\master\sw\source\core\layout\anchoreddrawobject.cxx @ 670]
>00b9c3a0 5cd3330c 00b9c3cc 0bf99220 00b9c3fc swlo!SwAnchoredObject::GetObjRectWithSpaces+0x8d [c:\cygwin\home\tinderbox\master\sw\source\core\layout\anchoredobject.cxx @ 586]
>00b9c3f0 5cd335a6 00000001 10d45818 10d45818 swlo!SwDrawContact::DisconnectFromLayout+0x7c [c:\cygwin\home\tinderbox\master\sw\source\core\draw\dcontact.cxx @ 1598]
>00b9c424 5ce84abb 0f5ba8e8 0b8790a8 00b9c440 swlo!SwDrawContact::DisconnectObjFromLayout+0x106 [c:\cygwin\home\tinderbox\master\sw\source\core\draw\dcontact.cxx @ 1697]
>00b9c46c 5ce845f8 1139b734 00b9c484 5ca4abd2 swlo!SwLayoutFrm::DestroyImpl+0x1db [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 493]
>00b9c480 5ce84b04 079ceb60 00b9c4c4 5d1c756f swlo!SwFrm::DestroyFrm+0x28 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 390]
>00b9c4c8 5ce4e59b 0000009f 0006cb8f 00002f81 swlo!SwLayoutFrm::DestroyImpl+0x224 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 500]
>00b9c514 5ce845f8 079ccc80 079ccc80 079ccc80 swlo!SwPageFrm::DestroyImpl+0x1fb [c:\cygwin\home\tinderbox\master\sw\source\core\layout\pagechg.cxx @ 271]
>00b9c528 5ce84b04 079ccd00 00b9c548 76c24443 swlo!SwFrm::DestroyFrm+0x28 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 390]
>00b9c570 5ce456ff 1137ca10 11372270 11372270 swlo!SwLayoutFrm::DestroyImpl+0x224 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 500]
>00b9c5a4 5ce845f8 5d1cfdb4 ff75eef0 0f4c6f00 swlo!SwRootFrm::DestroyImpl+0x17f [c:\cygwin\home\tinderbox\master\sw\source\core\layout\newfrm.cxx @ 614]
>00b9c5b8 5d1d0e86 0bf2e7f8 1137cb30 00b9c5d4 swlo!SwFrm::DestroyFrm+0x28 [c:\cygwin\home\tinderbox\master\sw\source\core\layout\ssfrm.cxx @ 390]
>00b9c5c8 5ca6e444 1137cb30 00b9c5e0 5ca65679 swlo!boost::detail::sp_counted_impl_pd<SwRootFrm *,void (__cdecl*)(SwFrm *)>::dispose+0x16 [c:\cygwin\home\tinderbox\master\workdir\unpackedtarball\boost\boost\smart_ptr\detail\sp_counted_impl.hpp @ 153]
>00b9c5d4 5ca65679 0f4c6ee0 00b9c5fc 5ca64f7f swlo!boost::detail::sp_counted_base::release+0x24 [c:\cygwin\home\tinderbox\master\workdir\unpackedtarball\boost\boost\smart_ptr\detail\sp_counted_base_w32.hpp @ 104]
>00b9c5e0 5ca64f7f ff75eec8 0f4c6edc 00b9c650 swlo!boost::detail::shared_count::~shared_count+0x19 [c:\cygwin\home\tinderbox\master\workdir\unpackedtarball\boost\boost\smart_ptr\detail\shared_count.hpp @ 380]
>00b9c5fc 635897f2 19930522 00000007 00b9c61c swlo!boost::shared_ptr<SwRootFrm>::~shared_ptr<SwRootFrm>+0x3f
>00b9d7f0 5cb2fa9a 0b8790a8 1041fc98 00b9dcfc MSVCR120!_NLG_Return [f:\dd\vctools\crt\crtw32\eh\i386\lowhelpr.asm @ 64]
>00b9d8ac 5cd6dbbc 0b8790a8 1041fc98 00b9dcfc swlo!SwCrsrShell::SwCrsrShell+0x4a [c:\cygwin\home\tinderbox\master\sw\source\core\crsr\crsrsh.cxx @ 2652]
>00b9d8d8 5cdc554a 0b8790a8 1041fc98 00b9dcfc swlo!SwEditShell::SwEditShell+0x3c [c:\cygwin\home\tinderbox\master\sw\source\core\edit\edws.cxx @ 42]
>00b9d900 5d513e6c 0b8790a8 1041fc98 00b9dcfc swlo!SwFEShell::SwFEShell+0x3a [c:\cygwin\home\tinderbox\master\sw\source\core\frmedt\fews.cxx @ 612]
>00b9d95c 5d4610eb 0b8790a8 1041fc98 055a1c88 swlo!SwWrtShell::SwWrtShell+0x3c [c:\cygwin\home\tinderbox\master\sw\source\uibase\wrtsh\wrtsh1.cxx @ 1635]
>00b9ddec 5d467642 0b98e850 00000000 ff75f52c swlo!SwView::SwView+0xcfb [c:\cygwin\home\tinderbox\master\sw\source\uibase\uiview\view.cxx @ 819]
>00b9de18 5ebfe916 0b98e850 00000000 055629a8 swlo!SwView::CreateInstance+0x52 [c:\cygwin\home\tinderbox\master\sw\source\uibase\uiview\view0.cxx @ 84]
>00b9de2c 5eb2f9a4 0b98e850 00000000 fca774a6 sfxlo!SfxViewFactory::CreateInstance+0x16 [c:\cygwin\home\tinderbox\master\sfx2\source\view\viewfac.cxx @ 28]
>00b9e00c 5ebe8c18 06d82758 00b9e040 00b9e280 sfxlo!SfxBaseModel::createViewController+0x404 [c:\cygwin\home\tinderbox\master\sfx2\source\doc\sfxbasemodel.cxx @ 4284]
>00b9e094 5ebeb5b8 00b9e288 00b9e2e0 00b9e430 sfxlo!`anonymous namespace'::SfxFrameLoader_Impl::impl_createDocumentView+0x78 [c:\cygwin\home\tinderbox\master\sfx2\source\view\frmload.cxx @ 602]
>00b9e2fc 5de3bd20 0799d5cc 00b9e414 00b9e430 sfxlo!`anonymous namespace'::SfxFrameLoader_Impl::load+0x9c8 [c:\cygwin\home\tinderbox\master\sfx2\source\view\frmload.cxx @ 726]
>00b9e450 5de406b9 ff9a4aee 00b9e480 5dd7aef0 fwklo!framework::LoadEnv::impl_loadContent+0x9a0 [c:\cygwin\home\tinderbox\master\framework\source\loadenv\loadenv.cxx @ 1126]
>00b9e504 5ddd46dd ff9a4852 76bb140b 76b45b87 fwklo!framework::LoadEnv::startLoading+0x179 [c:\cygwin\home\tinderbox\master\framework\source\loadenv\loadenv.cxx @ 387]
>00b9e7b8 5ddd4348 00b9e7d4 00b9e860 00b9e89c fwklo!framework::LoadDispatcher::impl_dispatch+0x27d [c:\cygwin\home\tinderbox\master\framework\source\dispatch\loaddispatcher.cxx @ 116]
>00b9e7f8 601e3d45 07b91c74 00b9e860 00b9e89c fwklo!framework::LoadDispatcher::dispatch+0x58 [c:\cygwin\home\tinderbox\master\framework\source\dispatch\loaddispatcher.cxx @ 55]
>00b9e8f0 601e3644 00b9e930 fca77f13 76bb140b svtlo!OpenFileDropTargetListener::implts_OpenFile+0x265 [c:\cygwin\home\tinderbox\master\svtools\source\misc\openfiledroptargetlistener.cxx @ 222]
>00b9e960 5f26e4ee 0576caf4 00b9e980 fca77cc5 svtlo!OpenFileDropTargetListener::drop+0xd4 [c:\cygwin\home\tinderbox\master\svtools\source\misc\openfiledroptargetlistener.cxx @ 85]
>00b9ea04 5f26be8b 00b9eb0c 00000082 00000105 vcllo!DNDListenerContainer::fireDropEvent+0x1be [c:\cygwin\home\tinderbox\master\vcl\source\window\dndlcon.cxx @ 146]
>00b9ea64 5f26b48e 0b7ac6d8 00b9eb0c 00000082 vcllo!DNDEventDispatcher::fireDropEvent+0x11b [c:\cygwin\home\tinderbox\master\vcl\source\window\dndevdis.cxx @ 427]
>00b9eab4 5db7c5fd 06bf1434 00b9eb04 ffb90b05 vcllo!DNDEventDispatcher::drop+0x11e [c:\cygwin\home\tinderbox\master\vcl\source\window\dndevdis.cxx @ 115]
>00b9eaf4 5db7b9e0 00b9eb04 ffb90aad 06bfa9b0 dnd!DropTarget::fire_drop+0xad [c:\cygwin\home\tinderbox\master\dtrans\source\win32\dnd\target.cxx @ 495]
>00b9eb5c 5db7478b 06bfa9b0 0539dbf0 00000000 dnd!DropTarget::Drop+0x1a0 [c:\cygwin\home\tinderbox\master\dtrans\source\win32\dnd\target.cxx @ 467]
>00b9eb7c 76dcfef9 055035b8 0539dbf0 00000000 dnd!IDropTargetImpl::Drop+0x2b [c:\cygwin\home\tinderbox\master\dtrans\source\win32\dnd\idroptarget.cxx @ 101]
>00b9ebb0 76227fee 0b9880a8 00000000 0560f2c0 ole32!CPrivDragDrop::PrivDragDrop+0xcc [d:\vsp2g\com\ole32\com\rot\getif.cxx @ 960]
>00b9ebf0 762b0cc6 76dcfe2d 00b9edd0 0000000b RPCRT4!Invoke+0x2a
>00b9eff4 762b093e 0b9cddb0 0551c6c8 053d1a08 RPCRT4!NdrStubCall2+0x24a
>00b9f03c 76dda8c5 0b9cddb0 053d1a08 0551c6c8 RPCRT4!CStdStubBuffer_Invoke+0xb9
>00b9f084 76ddaa59 053d1a08 0b91c128 05526b20 ole32!SyncStubInvoke+0x3c [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1161]
>00b9f0d0 76d06196 053d1a08 0b7f5978 0b9cddb0 ole32!StubInvoke+0xb9 [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1372]
>00b9f1ac 76d060a7 0551c6c8 00000000 0b9cddb0 ole32!CCtxComChnl::ContextInvoke+0xfa [d:\vsp2g\com\ole32\com\dcomrem\ctxchnl.cxx @ 1255]
>00b9f1c8 76d06dae 053d1a08 00000001 0b9cddb0 ole32!MTAInvoke+0x1a [d:\vsp2g\com\ole32\com\dcomrem\callctrl.cxx @ 2020]
>00b9f1f4 76dda981 053d1a08 00000001 0b9cddb0 ole32!STAInvoke+0x46 [d:\vsp2g\com\ole32\com\dcomrem\callctrl.cxx @ 1839]
>00b9f228 76dda79b d0908070 0551c6c8 0b9cddb0 ole32!AppInvoke+0xaa [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1060]
>00b9f304 76ddae2d 053d19b0 05522038 00000400 ole32!ComInvokeWithLockAndIPID+0x32c [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1675]
>00b9f32c 76d06b86 053d19b0 00000400 00f5c3e8 ole32!ComInvoke+0xc5 [d:\vsp2g\com\ole32\com\dcomrem\channelb.cxx @ 1445]
>00b9f340 76d06b45 053d19b0 00000000 76d06aa8 ole32!ThreadDispatch+0x23 [d:\vsp2g\com\ole32\com\dcomrem\chancont.cxx @ 298]
>00b9f384 76ae8817 005802b6 00000400 0000babe ole32!ThreadWndProc+0x167 [d:\vsp2g\com\ole32\com\dcomrem\chancont.cxx @ 654]
>00b9f3b0 76ae898e 76d06aa8 005802b6 00000400 USER32!InternalCallWinProc+0x23
>00b9f428 76ae8ab9 00000000 76d06aa8 005802b6 USER32!UserCallWinProcCheckWow+0x109
>00b9f48c 76ae8b10 76d06aa8 00000000 00b9f4b0 USER32!DispatchMessageWorker+0x380
>00b9f49c 5f71dc26 00b9f4bc 00000000 00f011b8 USER32!DispatchMessageW+0xf
>00b9f4b0 5f71dd72 00b9f4bc 005802b6 00000400 vcllo!ImplSalDispatchMessage+0x36 [c:\cygwin\home\tinderbox\master\vcl\win\source\app\salinst.cxx @ 615]
>00b9f4e4 5f71dae7 00000001 00000000 00f011b8 vcllo!ImplSalYield+0xb2 [c:\cygwin\home\tinderbox\master\vcl\win\source\app\salinst.cxx @ 644]
>00b9f514 5f678d35 00000001 00000000 00000000 vcllo!W
>
>STACK_COMMAND:  .cxr 0000000000000000 ; kb ; ~0s ; kb
>
>FAULTING_SOURCE_CODE:  
>No source found for 'c:\cygwin\home\tinderbox\master\sal\rtl\strtmpl.cxx'
>
>
>SYMBOL_STACK_INDEX:  0
>
>SYMBOL_NAME:  sal3!rtl_uString_new_WithLength+98
>
>FOLLOWUP_NAME:  MachineOwner
>
>MODULE_NAME: sal3
>
>IMAGE_NAME:  sal3.dll
>
>DEBUG_FLR_IMAGE_TIMESTAMP:  55afda7d
>
>FAILURE_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE_c0000005_sal3.dll!rtl_uString_new_WithLength
>
>BUCKET_ID:  X64_APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_WRITE_sal3!rtl_uString_new_WithLength+98
>
>WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/soffice_bin/5_1_0_0/55b0e414/sal3_dll/5_1_0_0/55afda7d/c0000005/00030a88.htm?Retriage=1
>
>Followup: MachineOwner
>---------

Actions: View

Attachments on bug 67583: 83363 | 117435 | 122373 | 158561 | 158562 | 158563 | 158564 | 158625 | 158681 | 158682 | 158683 | 158684 | 182503