(25a8.3d38): C++ EH exception - code e06d7363 (first chance) ## first chance above repeated 260+ times (25a8.3d38): Security check failure or stack buffer overrun - code c0000409 (!!! second chance !!!) Subcode: 0x7 FAST_FAIL_FATAL_APP_EXIT ucrtbase!abort+0x4e: 00007ff8`a764286e cd29 int 29h 0:000> ~* kp . 0 Id: 25a8.3d38 Suspend: 1 Teb: 00000098`a54ac000 Unfrozen # Child-SP RetAddr Call Site 00 00000098`a5f8d430 00007ff8`1984a5a9 ucrtbase!abort+0x4e 01 00000098`a5f8d460 00007ff8`1984d7b8 mergedlo!SkiaSalGraphicsImpl::postDraw(void)+0x89 [C:\cygwin64\home\buildslave\source\libo-core\vcl\skia\gdiimpl.cxx @ 463] 02 00000098`a5f8d490 00007ff8`1938c157 mergedlo!SkiaSalGraphicsImpl::copyBits(struct SalTwoRect * rPosAry = 0x00000098`a5f8d6b0, class SalGraphics * pSrcGraphics = )+0x98 [C:\cygwin64\home\buildslave\source\libo-core\vcl\skia\gdiimpl.cxx @ 1301] 03 00000098`a5f8d4e0 00007ff8`1938bfc9 mergedlo!OutputDevice::DrawOutDevDirectProcess(class OutputDevice * rSrcDev = 0x000001ce`bee6de40, struct SalTwoRect * rPosAry = , class SalGraphics * pSrcGraphics = 0x000001ce`becf7d80)+0x167 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\outdev\outdev.cxx @ 641] 04 00000098`a5f8d570 00007ff8`1938bbe9 mergedlo!OutputDevice::drawOutDevDirect(class OutputDevice * rSrcDev = 0x000001ce`bee6de40, struct SalTwoRect * rPosAry = 0x00000098`a5f8d6b0)+0x119 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\outdev\outdev.cxx @ 621] 05 00000098`a5f8d5c0 00007ff8`18a2d324 mergedlo!OutputDevice::DrawOutDev(class Point * rDestPt = 0x00000098`a5f8d7a8 X:0, Y:13, class Size * rDestSize = 0x00000098`a5f8d798 W:1783, H:756, class Point * rSrcPt = 0x00000098`a5f8d7a8 X:0, Y:13, class Size * rSrcSize = 0x00000098`a5f8d798 W:1783, H:756, class OutputDevice * rOutDev = 0x000001ce`bee6de40)+0x499 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\outdev\outdev.cxx @ 532] 06 00000098`a5f8d750 00007ff8`18a2ddcc mergedlo!sdr::overlay::OverlayManagerBuffered::ImpSaveBackground(class vcl::Region * rRegion = , class OutputDevice * pPreRenderDevice = )+0x224 [C:\cygwin64\home\buildslave\source\libo-core\svx\source\sdr\overlay\overlaymanagerbuffered.cxx @ 173] 07 00000098`a5f8d8a0 00007ff8`18b9b19d mergedlo!sdr::overlay::OverlayManagerBuffered::completeRedraw(class vcl::Region * rRegion = 0x000001ce`b70d9668, class OutputDevice * pPreRenderDevice = )+0x3c [C:\cygwin64\home\buildslave\source\libo-core\svx\source\sdr\overlay\overlaymanagerbuffered.cxx @ 388] 08 00000098`a5f8d910 00007ff8`18976cb7 mergedlo!SdrPaintView::EndCompleteRedraw(class SdrPaintWindow * rPaintWindow = 0x000001ce`b70d9640, bool bPaintFormLayer = )+0x12d [C:\cygwin64\home\buildslave\source\libo-core\svx\source\svdraw\svdpntv.cxx @ 667] 09 00000098`a5f8d970 00007ff8`18b9b31b mergedlo!FmFormView::EndCompleteRedraw(class SdrPaintWindow * rPaintWindow = , bool bPaintFormLayer = )+0x17 [C:\cygwin64\home\buildslave\source\libo-core\svx\source\form\fmview.cxx @ 451] 0a 00000098`a5f8d9a0 00007ff8`136a6a2d mergedlo!SdrPaintView::EndDrawLayers(class SdrPaintWindow * rPaintWindow = , bool bPaintFormLayer = )+0x1b [C:\cygwin64\home\buildslave\source\libo-core\svx\source\svdraw\svdpntv.cxx @ 702] 0b 00000098`a5f8d9d0 00007ff8`136a54a1 sclo!ScGridWindow::DrawContent(class OutputDevice * rDevice = 0x000001ce`af540720, struct ScTableInfo * rTableInfo = , class ScOutputData * aOutputData = 0x00000098`a5f8e0c0, bool bLogicText = false)+0x139d [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\gridwin4.cxx @ 1020] 0c 00000098`a5f8df90 00007ff8`136a4d6f sclo!ScGridWindow::Draw(short nX1 = 0n0, long nY1 = 0n24048, short nX2 = 0n16, long nY2 = 0n24084, ScUpdateMode eMode = Marks (0n1))+0x6f1 [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\gridwin4.cxx @ 592] 0d 00000098`a5f8e250 00007ff8`19161ae5 sclo!ScGridWindow::Paint(class OutputDevice * __formal = 0x000001ce`b71045f8, class tools::Rectangle * rRect = )+0x44f [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\gridwin4.cxx @ 457] 0e 00000098`a5f8e330 00007ff8`19162982 mergedlo!PaintHelper::DoPaint(class vcl::Region * pRegion = 0x00000000`00000000)+0x265 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 313] 0f 00000098`a5f8e500 00007ff8`191659bd mergedlo!vcl::Window::ImplCallPaint(class vcl::Region * pRegion = 0x00000000`00000000, ImplPaintFlags nPaintFlags = )+0x142 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 617] 10 00000098`a5f8e5c0 00007ff8`1368afad mergedlo!vcl::Window::PaintImmediately(void)+0x20d [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 1336] 11 (Inline Function) --------`-------- sclo!ScGridWindow::DrawAfterScroll(void)+0x9 [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\gridwin3.cxx @ 306] 12 00000098`a5f8e660 00007ff8`13714f7c sclo!ScGridWindow::ScrollPixel(int64 nDifX = 0n0, int64 nDifY = 0n-756)+0xbd [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\gridwin.cxx @ 4929] 13 00000098`a5f8e690 00007ff8`1372795a sclo!ScTabView::ScrollY(int64 nDeltaY = 0n36, ScVSplitPos eWhich = SC_SPLIT_BOTTOM (0n1), bool bUpdBars = true)+0x26c [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\tabview.cxx @ 1300] 14 00000098`a5f8e730 00007ff8`13727b94 sclo!ScTabView::AlignToCursor(short nCurX = 0n18, long nCurY = 0n24048, ScFollowMode eMode = , ScSplitPos * pWhich = 0x00000000`00000000)+0xafa [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\tabview3.cxx @ 1155] 15 00000098`a5f8e8b0 00007ff8`13727fb8 sclo!ScTabView::MoveCursorAbs(short nCurX = , long nCurY = 0n24048, ScFollowMode eMode = SC_FOLLOW_FIX (0n2), bool bShift = false, bool bControl = false, bool bKeepOld = true, bool bKeepSel = false)+0xe4 [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\tabview3.cxx @ 1218] 16 00000098`a5f8e920 00007ff8`1364d0b5 sclo!ScTabView::MoveCursorRel(short nMovX = 0n18, long nMovY = 0n36, ScFollowMode eMode = SC_FOLLOW_FIX (0n2), bool bShift = false, bool bKeepSel = false)+0x228 [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\tabview3.cxx @ 1320] 17 00000098`a5f8e990 00007ff8`18042ab9 sclo!ScCellShell::ExecuteCursor(class SfxRequest * rReq = 0x00000098`a5f8ed58)+0x3a5 [C:\cygwin64\home\buildslave\source\libo-core\sc\source\ui\view\cellsh4.cxx @ 229] 18 00000098`a5f8ea20 00007ff8`1803bd3f mergedlo!SfxDispatcher::Call_Impl(class SfxShell * rShell = 0x000001ce`b70d89c0, class SfxSlot * rSlot = 0x00007ff8`13ee7010, class SfxRequest * rReq = 0x00000098`a5f8ed58, bool bRecord = true)+0x279 [C:\cygwin64\home\buildslave\source\libo-core\sfx2\source\control\dispatch.cxx @ 256] 19 00000098`a5f8eae0 00007ff8`1809033a mergedlo!SfxBindings::Execute_Impl(class SfxRequest * aReq = 0x00000098`a5f8ed58, class SfxSlot * pSlot = 0x00007ff8`13ee7010, class SfxShell * pShell = 0x000001ce`b70d89c0)+0x34f [C:\cygwin64\home\buildslave\source\libo-core\sfx2\source\control\bindings.cxx @ 1063] 1a 00000098`a5f8eba0 00007ff8`1808de7d mergedlo!SfxDispatchController_Impl::dispatch(struct com::sun::star::util::URL * aURL = , class com::sun::star::uno::Sequence * aArgs = , class com::sun::star::uno::Reference * rListener = 0x00000098`a5f8eee0 empty)+0x101a [C:\cygwin64\home\buildslave\source\libo-core\sfx2\source\control\unoctitm.cxx @ 687] 1b 00000098`a5f8ee30 00007ff8`185ce287 mergedlo!SfxOfficeDispatch::dispatch(struct com::sun::star::util::URL * aURL = 0x000001ce`bf8bb450, class com::sun::star::uno::Sequence * aArgs = 0x00000098`a5f8ef38 Sequence (empty))+0x22d [C:\cygwin64\home\buildslave\source\libo-core\sfx2\source\control\unoctitm.cxx @ 254] 1c 00000098`a5f8eee0 00007ff8`1929b1e4 mergedlo!svt::`anonymous namespace'::AsyncAccelExec::impl_ts_asyncCallback(void)+0xc7 [C:\cygwin64\home\buildslave\source\libo-core\svtools\source\misc\acceleratorexecute.cxx @ 482] 1d (Inline Function) --------`-------- mergedlo!Link::Call(void)+0x12 [C:\cygwin64\home\buildslave\source\libo-core\include\tools\link.hxx @ 111] 1e (Inline Function) --------`-------- mergedlo!ImplHandleUserEvent(void)+0x21 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\winproc.cxx @ 2014] 1f 00000098`a5f8ef30 00007ff8`1985c5fc mergedlo!ImplWindowFrameProc(class vcl::Window * _pWindow = 0x000001ce`a7336fc0, SalEvent nEvent = UserEvent (0n19), void * pEvent = 0x000001ce`c7e4f770)+0xa14 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\winproc.cxx @ 2584] 20 00000098`a5f8f160 00007ff8`3b462900 mergedlo!SalFrame::CallCallback(SalEvent nEvent = , void * pEvent = )+0x1c [C:\cygwin64\home\buildslave\source\libo-core\vcl\inc\salframe.hxx @ 308] 21 (Inline Function) --------`-------- vclplug_winlo!ImplHandleUserEvent(void)+0x2a [C:\cygwin64\home\buildslave\source\libo-core\vcl\win\window\salframe.cxx @ 4135] 22 00000098`a5f8f190 00007ff8`3b4630ad vclplug_winlo!SalFrameWndProc(struct HWND__ * hWnd = 0x00000000`0010078c, unsigned int nMsg = 0x482, unsigned int64 wParam = 0, int64 lParam = 0n1987628562288, bool * rDef = 0x00000098`a5f8f320)+0x10d0 [C:\cygwin64\home\buildslave\source\libo-core\vcl\win\window\salframe.cxx @ 5783] 23 00000098`a5f8f2f0 00007ff8`a8a0e858 vclplug_winlo!SalFrameWndProcW(struct HWND__ * hWnd = 0x00000000`0010078c, unsigned int nMsg = 0x482, unsigned int64 wParam = 0, int64 lParam = 0n1987628562288)+0x4d [C:\cygwin64\home\buildslave\source\libo-core\vcl\win\window\salframe.cxx @ 5891] 24 00000098`a5f8f380 00007ff8`a8a0e299 USER32!UserCallWinProcCheckWow+0x2f8 25 00000098`a5f8f510 00007ff8`3b3f1516 USER32!DispatchMessageWorker+0x249 26 00000098`a5f8f590 00007ff8`3b3f1785 vclplug_winlo!ImplSalDispatchMessage(struct tagMSG * pMsg = 0x00000098`a5f8f610 {msg=0x482 wp=0x0 lp=0x1cec7e4f770})+0x46 [C:\cygwin64\home\buildslave\source\libo-core\vcl\win\app\salinst.cxx @ 417] 27 00000098`a5f8f5e0 00007ff8`3b3f1931 vclplug_winlo!ImplSalYield(bool bWait = true, bool bHandleAllCurrentEvents = false)+0x95 [C:\cygwin64\home\buildslave\source\libo-core\vcl\win\app\salinst.cxx @ 449] 28 00000098`a5f8f660 00007ff8`1967e2cd vclplug_winlo!WinSalInstance::DoYield(bool bWait = true, bool bHandleAllCurrentEvents = false)+0x91 [C:\cygwin64\home\buildslave\source\libo-core\vcl\win\app\salinst.cxx @ 522] 29 (Inline Function) --------`-------- mergedlo!ImplYield(void)+0x2d [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 465] 2a (Inline Function) --------`-------- mergedlo!Application::Yield(void)+0x2d [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 532] 2b 00000098`a5f8f690 00007ff8`18323db5 mergedlo!Application::Execute(void)+0x16d [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 444] 2c 00000098`a5f8f6e0 00007ff8`1968cee2 mergedlo!desktop::Desktop::Main(void)+0x1275 [C:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\app.cxx @ 1601] 2d 00000098`a5f8f9c0 00007ff8`183464d7 mergedlo!ImplSVMain(void)+0x62 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 199] 2e (Inline Function) --------`-------- mergedlo!SVMain(void)+0x5 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 231] 2f 00000098`a5f8fa00 00007ff7`3561101b mergedlo!soffice_main(void)+0x407 [C:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\sofficemain.cxx @ 98] 30 (Inline Function) --------`-------- soffice!sal_main(void)+0x6 [C:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\main.c @ 49] 31 00000098`a5f8fb10 00007ff7`356112d4 soffice!main(int argc = , char ** argv = )+0x1b [C:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\main.c @ 47] 32 (Inline Function) --------`-------- soffice!invoke_main(void)+0x22 [d:\a01\_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 78] 33 00000098`a5f8fb40 00007ff8`a9a77034 soffice!__scrt_common_main_seh(void)+0x10c [d:\a01\_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 288] 34 00000098`a5f8fb80 00007ff8`a9c22651 KERNEL32!BaseThreadInitThunk+0x14 35 00000098`a5f8fbb0 00000000`00000000 ntdll!RtlUserThreadStart+0x21 1 Id: 25a8.190c Suspend: 1 Teb: 00000098`a54b4000 Unfrozen # Child-SP RetAddr Call Site 00 00000098`a85cfbe8 00007ff8`a7831ace ntdll!NtWaitForSingleObject+0x14 01 00000098`a85cfbf0 00007ff8`19d06ad3 KERNELBASE!WaitForSingleObjectEx+0x8e 02 00000098`a85cfc90 00007ff8`a9a77034 mergedlo!google_breakpad::ExceptionHandler::ExceptionHandlerThreadMain(void * lpParameter = 0x000001ce`a199fca0)+0x33 [E:\r\workdir\UnpackedTarball\breakpad\src\client\windows\handler\exception_handler.cc @ 392] 03 00000098`a85cfcd0 00007ff8`a9c22651 KERNEL32!BaseThreadInitThunk+0x14 04 00000098`a85cfd00 00000000`00000000 ntdll!RtlUserThreadStart+0x21 2 Id: 25a8.1890 Suspend: 1 Teb: 00000098`a54b6000 Unfrozen # Child-SP RetAddr Call Site 00 00000098`a8f5f698 00007ff8`a8a2078e win32u!NtUserMsgWaitForMultipleObjectsEx+0x14 01 00000098`a8f5f6a0 00007ff8`8a2f90e0 USER32!RealMsgWaitForMultipleObjectsEx+0x1e 02 00000098`a8f5f6e0 00007ff8`8a2f903f gdiplus!BackgroundThreadProc+0x70 03 00000098`a8f5f750 00007ff8`a9a77034 gdiplus!DllRefCountSafeThreadThunk+0x1f 04 00000098`a8f5f780 00007ff8`a9c22651 KERNEL32!BaseThreadInitThunk+0x14 05 00000098`a8f5f7b0 00000000`00000000 ntdll!RtlUserThreadStart+0x21 3 Id: 25a8.2008 Suspend: 1 Teb: 00000098`a54ba000 Unfrozen "PipeIPC" # Child-SP RetAddr Call Site 00 00000098`aa27f6c8 00007ff8`a7831ace ntdll!NtWaitForSingleObject+0x14 01 00000098`aa27f6d0 00007ff8`a783b305 KERNELBASE!WaitForSingleObjectEx+0x8e 02 00000098`aa27f770 00007ff8`78c8f330 KERNELBASE!GetOverlappedResult+0xc5 03 00000098`aa27f7b0 00007ff8`18341a9f sal3!osl_acceptPipe(struct oslPipeImpl * pPipe = 0x000001ce`a63ac3c0)+0xa0 [C:\cygwin64\home\buildslave\source\libo-core\sal\osl\w32\pipe.cxx @ 314] 04 (Inline Function) --------`-------- mergedlo!osl::Pipe::accept(void)+0xa [C:\cygwin64\home\buildslave\source\libo-core\include\osl\pipe.hxx @ 155] 05 00000098`aa27f850 00007ff8`844e2a3b mergedlo!desktop::PipeIpcThread::execute(void)+0x3f [C:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\officeipcthread.cxx @ 1132] 06 00000098`aa27f8b0 00007ff8`844e26f8 salhelper3MSC!salhelper::Thread::run(void)+0x2b [C:\cygwin64\home\buildslave\source\libo-core\salhelper\source\thread.cxx @ 40] 07 00000098`aa27f8e0 00007ff8`78ca19d3 salhelper3MSC!threadFunc(void * param = 0x000001ce`a687c9a0)+0x18 [C:\cygwin64\home\buildslave\source\libo-core\include\osl\thread.hxx @ 190] 08 00000098`aa27f910 00007ff8`a75f1bb2 sal3!oslWorkerWrapperFunction(void * pData = 0x000001ce`a676ec80)+0x23 [C:\cygwin64\home\buildslave\source\libo-core\sal\osl\w32\thread.cxx @ 63] 09 00000098`aa27f940 00007ff8`a9a77034 ucrtbase!thread_start)+0x5d [C:\cygwin64\home\buildslave\source\libo-core\sal\osl\w32\conditn.cxx @ 82] 03 (Inline Function) --------`-------- mergedlo!osl::Condition::wait(void)+0x15 [C:\cygwin64\home\buildslave\source\libo-core\include\osl\conditn.hxx @ 123] 04 00000098`aac0fd70 00007ff8`844e2a3b mergedlo!WatchdogThread::execute(void)+0x62 [C:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\watchdog.cxx @ 128] 05 00000098`aac0fdb0 00007ff8`844e26f8 salhelper3MSC!salhelper::Thread::run(void)+0x2b [C:\cygwin64\home\buildslave\source\libo-core\salhelper\source\thread.cxx @ 40] 06 00000098`aac0fde0 00007ff8`78ca19d3 salhelper3MSC!threadFunc(void * param = 0x000001ce`a6dfc5f0)+0x18 [C:\cygwin64\home\buildslave\source\libo-core\include\osl\thread.hxx @ 190] 07 00000098`aac0fe10 00007ff8`a75f1bb2 sal3!oslWorkerWrapperFunction(void * pData = 0x000001ce`a6dfcac0)+0x23 [C:\cygwin64\home\buildslave\source\libo-core\sal\osl\w32\thread.cxx @ 63] 08 00000098`aac0fe40 00007ff8`a9a77034 ucrtbase!thread_start)+0x5d [C:\cygwin64\home\buildslave\source\libo-core\sal\osl\w32\conditn.cxx @ 82] 03 (Inline Function) --------`-------- updchklo!osl::Condition::wait(void)+0xe [C:\cygwin64\home\buildslave\source\libo-core\include\osl\conditn.hxx @ 123] 04 00000098`b285f870 00007ff8`636ebcd8 updchklo!`anonymous namespace'::UpdateCheckThread::run(void)+0x380 [C:\cygwin64\home\buildslave\source\libo-core\extensions\source\update\check\updatecheck.cxx @ 521] 05 00000098`b285f950 00007ff8`78ca19d3 updchklo!threadFunc(void * param = 0x000001ce`b64fa890)+0x18 [C:\cygwin64\home\buildslave\source\libo-core\include\osl\thread.hxx @ 190] 06 00000098`b285f980 00007ff8`a75f1bb2 sal3!oslWorkerWrapperFunction(void * pData = 0x000001ce`a1982c50)+0x23 [C:\cygwin64\home\buildslave\source\libo-core\sal\osl\w32\thread.cxx @ 63] 07 00000098`b285f9b0 00007ff8`a9a77034 ucrtbase!thread_start