0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

FAULTING_IP: 
swlo!SwLineLayout::SetNext+d [d:\losrc\libo\sw\source\core\text\porlay.hxx @ 161]
535a2c1d 894814          mov     dword ptr [eax+14h],ecx

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 535a2c1d (swlo!SwLineLayout::SetNext+0x0000000d)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000001
   Parameter[1]: 00000014
Attempt to write to address 00000014

FAULTING_THREAD:  00000da0

PROCESS_NAME:  soffice.bin

ERROR_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo

EXCEPTION_PARAMETER1:  00000001

EXCEPTION_PARAMETER2:  00000014

WRITE_ADDRESS:  00000014 

FOLLOWUP_IP: 
swlo!SwLineLayout::SetNext+d [d:\losrc\libo\sw\source\core\text\porlay.hxx @ 161]
535a2c1d 894814          mov     dword ptr [eax+14h],ecx

MOD_LIST: <ANALYSIS/>

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

BUGCHECK_STR:  APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_NULL_POINTER_READ_INVALID_POINTER_WRITE

PRIMARY_PROBLEM_CLASS:  NULL_CLASS_PTR_DEREFERENCE

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 535a080a to 535a2c1d

STACK_TEXT:  
00eacebc 535a080a 00000000 00ead044 00ead4c4 swlo!SwLineLayout::SetNext+0xd [d:\losrc\libo\sw\source\core\text\porlay.hxx @ 161]
00eacecc 5357b6e3 00000000 5cbafaa5 05274dcc swlo!SwTxtFormatter::Insert+0x2a [d:\losrc\libo\sw\source\core\text\itrform2.cxx @ 139]
00ead4c4 535daffc 00000001 0c0cbb50 0001bb50 swlo!SwTxtFrm::FormatQuick+0x403 [d:\losrc\libo\sw\source\core\text\frmform.cxx @ 1915]
00ead4d8 53580e4a 00000001 5cbaf4c9 05274dcc swlo!SwTxtFrm::GetFormatted+0x8c [d:\losrc\libo\sw\source\core\text\txtfrm.cxx @ 2108]
00eadaa8 534dd044 00eadad8 00000000 5cbaf545 swlo!SwTxtFrm::Paint+0x1ba [d:\losrc\libo\sw\source\core\text\frmpaint.cxx @ 604]
00eadb24 534dc312 00eadb68 00000000 0c0cadd0 swlo!SwLayoutFrm::Paint+0x364 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3403]
00eadb38 534dd044 00eadb68 00000000 5cbaf5d5 swlo!SwCellFrm::Paint+0x22 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3858]
00eadbb4 534dd044 00eadbe4 00000000 5cbaf251 swlo!SwLayoutFrm::Paint+0x364 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3403]
00eadc30 534de4a3 00eadce0 00000000 5cbaf2d1 swlo!SwLayoutFrm::Paint+0x364 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3403]
00eadcb0 534dd044 00eadce0 00000000 5cbaf34d swlo!SwTabFrm::Paint+0x113 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 4149]
00eadd2c 534cc545 00eadd70 00000000 0c0c4000 swlo!SwLayoutFrm::Paint+0x364 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3403]
00eadd40 534dd044 00eadd70 00000000 5cbaf3dd swlo!SwBodyFrm::Paint+0x15 [d:\losrc\libo\sw\source\core\layout\pagechg.cxx @ 194]
00eaddbc 534ddc29 00eae030 00000000 5cbace19 swlo!SwLayoutFrm::Paint+0x364 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3403]
00eae078 537e2d86 00eae164 00000000 5cbacff9 swlo!SwRootFrm::Paint+0xa99 [d:\losrc\libo\sw\source\core\layout\paintfrm.cxx @ 3117]
00eae198 531d8337 00eae2b0 5cbacf85 00000000 swlo!ViewShell::Paint+0x2d6 [d:\losrc\libo\sw\source\core\view\viewsh.cxx @ 1709]
00eae1e4 539bb8b0 00eae2b0 050b3a88 04c88dd8 swlo!SwCrsrShell::Paint+0x97 [d:\losrc\libo\sw\source\core\crsr\crsrsh.cxx @ 1159]
00eae218 58b8efcb 00eae2b0 420b5fe3 00000000 swlo!SwEditWin::Paint+0x110 [d:\losrc\libo\sw\source\ui\docvw\edtwin2.cxx @ 525]
00eae2ec 58b8f10a 04c86a60 0000001c 420b5ecb vcllo!Window::ImplCallPaint+0x52b [d:\losrc\libo\vcl\source\window\window.cxx @ 2491]
00eae3c4 58b8f10a 04c86b50 0000001c 420b5993 vcllo!Window::ImplCallPaint+0x66a [d:\losrc\libo\vcl\source\window\window.cxx @ 2521]
00eae49c 58b8f10a 04c86fb0 0000001c 420b587b vcllo!Window::ImplCallPaint+0x66a [d:\losrc\libo\vcl\source\window\window.cxx @ 2521]
00eae574 58b8f10a 04c86b28 0000001c 420b5b43 vcllo!Window::ImplCallPaint+0x66a [d:\losrc\libo\vcl\source\window\window.cxx @ 2521]
00eae64c 58b8f10a 04c86ba0 0000001c 420b5a2b vcllo!Window::ImplCallPaint+0x66a [d:\losrc\libo\vcl\source\window\window.cxx @ 2521]
00eae724 58b8ea90 00000000 0000001c 04b76800 vcllo!Window::ImplCallPaint+0x66a [d:\losrc\libo\vcl\source\window\window.cxx @ 2521]
00eae73c 58b915e0 04b76800 00eae754 58b9a59f vcllo!Window::ImplCallOverlapPaint+0x80 [d:\losrc\libo\vcl\source\window\window.cxx @ 2563]
00eae748 58b9a59f 04c2a740 00eae76c 6debebb4 vcllo!Window::ImplHandlePaintHdl+0xa0 [d:\losrc\libo\vcl\source\window\window.cxx @ 2589]
00eae754 6debebb4 04b76800 04c2a740 76ab0230 vcllo!Window::LinkStubImplHandlePaintHdl+0xf [d:\losrc\libo\vcl\source\window\window.cxx @ 2575]
00eae76c 5874e457 04c2a740 04c2a740 00eae7a8 tllo!Link::Call+0x24 [d:\losrc\libo\include\tools\link.hxx @ 123]
00eae77c 5874e061 01000000 00eae79c 5873ac76 vcllo!Timer::Timeout+0x17 [d:\losrc\libo\vcl\source\app\timer.cxx @ 246]
00eae7a8 58bbcdc8 00202ee0 00eae7fc 58bbcf39 vcllo!Timer::ImplTimerCallbackProc+0xd1 [d:\losrc\libo\vcl\source\app\timer.cxx @ 134]
00eae7b4 58bbcf39 420b5af3 00000000 58bbce50 vcllo!SalTimer::CallCallback+0x18 [d:\losrc\libo\vcl\inc\saltimer.hxx @ 54]
00eae7fc 76a462fa 00000000 00000113 0000721a vcllo!SalTimerProc+0xe9 [d:\losrc\libo\vcl\win\source\app\saltimer.cxx @ 125]
00eae828 76a47b16 58bbce50 00000000 00000113 USER32!InternalCallWinProc+0x23
00eae8a0 76a479c7 00000000 58bbce50 00000000 USER32!UserCallWinProc+0x104
00eae8f8 76a4788a 00eae934 00000000 00eae914 USER32!DispatchMessageWorker+0x155
00eae908 58bae7ed 00eae934 00eae928 58bb91d5 USER32!DispatchMessageW+0xf
00eae914 58bb91d5 00eae934 00000000 001fae00 vcllo!ImplDispatchMessage+0xd [d:\losrc\libo\vcl\win\source\app\saldata.cxx @ 116]
00eae928 58bb9326 00eae934 00000000 00000113 vcllo!ImplSalDispatchMessage+0x35 [d:\losrc\libo\vcl\win\source\app\salinst.cxx @ 638]
00eae95c 58bb9db0 00000001 00000000 001fae00 vcllo!ImplSalYield+0xb6 [d:\losrc\libo\vcl\win\source\app\salinst.cxx @ 669]
00eae984 587405ce 00000001 00000000 58e3cb88 vcllo!WinSalInstance::Yield+0xd0 [d:\losrc\libo\vcl\win\source\app\salinst.cxx @ 714]
00eae99c 58741daf 00000001 00000000 00eae9bc vcllo!ImplYield+0x8e [d:\losrc\libo\vcl\source\app\svapp.cxx @ 423]
00eae9ac 5873f27b 00000000 58e3cb88 00eaf92c vcllo!Application::Yield+0xf [d:\losrc\libo\vcl\source\app\svapp.cxx @ 456]
00eae9bc 71434a8f 420b412e 00000000 001c33fe vcllo!Application::Execute+0x2b [d:\losrc\libo\vcl\source\app\svapp.cxx @ 401]
00eaf92c 5874c4de 026660d0 00000001 7177edf5 sofficeapp!desktop::Desktop::Main+0x238f [d:\losrc\libo\desktop\source\app\app.cxx @ 1708]
00eaf948 5874ca2f 026660d0 00eaf9b8 7146aedd vcllo!ImplSVMain+0x6e [d:\losrc\libo\vcl\source\app\svmain.cxx @ 162]
00eaf954 7146aedd 420b41ba 7149e668 00000000 vcllo!SVMain+0x2f [d:\losrc\libo\vcl\source\app\svmain.cxx @ 199]
00eaf9b8 0035100a 42e1a93f 00eaf9d0 0035103a sofficeapp!soffice_main+0xad [d:\losrc\libo\desktop\source\app\sofficemain.cxx @ 82]
00eaf9c4 0035103a 001f1e40 00eaf9e8 00351078 soffice!sal_main+0xa [d:\losrc\libo\desktop\source\app\main.c @ 48]
00eaf9d0 00351078 00000002 001f1e40 00000002 soffice!main+0x1a [d:\losrc\libo\desktop\source\app\main.c @ 47]
00eaf9e8 003512ca 00350000 00000000 001c33fe soffice!WinMain+0x28 [d:\losrc\libo\desktop\source\app\main.c @ 47]
00eafa34 771933aa 7efde000 00eafa80 77bd9ef2 soffice!__tmainCRTStartup+0x121 [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 528]
00eafa40 77bd9ef2 7efde000 729cb6ad 00000000 kernel32!BaseThreadInitThunk+0xe
00eafa80 77bd9ec5 0035119f 7efde000 00000000 ntdll!__RtlUserThreadStart+0x70
00eafa98 00000000 0035119f 7efde000 00000000 ntdll!_RtlUserThreadStart+0x1b


FAULTING_SOURCE_CODE:  
   157:     virtual ~SwLineLayout();
   158: 
   159:     inline SwLineLayout *GetNext() { return pNext; }
   160:     inline const SwLineLayout *GetNext() const { return pNext; }
>  161:     inline void SetNext( SwLineLayout *pNew ) { pNext = pNew; }
   162: 
   163:     void Init( SwLinePortion *pNextPortion = NULL);
   164: 
   165:     // Collects the data for the line
   166:     void CalcLine( SwTxtFormatter &rLine, SwTxtFormatInfo &rInf );


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  swlo!SwLineLayout::SetNext+d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: swlo

IMAGE_NAME:  swlo.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  51c82cf6

STACK_COMMAND:  ~0s ; kb

FAILURE_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE_c0000005_swlo.dll!SwLineLayout::SetNext

BUCKET_ID:  APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_NULL_POINTER_READ_INVALID_POINTER_WRITE_swlo!SwLineLayout::SetNext+d

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/soffice_bin/4_2_0_0/51c82b01/swlo_dll/4_2_0_0/51c82cf6/c0000005/004a2c1d.htm?Retriage=1

Followup: MachineOwner
---------