==3857== Memcheck, a memory error detector
==3857== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
==3857== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
==3857== Command: ./soffice.bin /tmp/test-sorting.ods
==3857== 
==3857== Invalid read of size 4
==3857==    at 0x16E692CA: ScFormulaCell::SetCellGroup(boost::intrusive_ptr<ScFormulaCellGroup> const&) (operator_bool.hpp:13)
==3857==    by 0x16F625F5: sc::SharedFormulaUtil::unshareFormulaCell(std::pair<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > >, unsigned int> const&, ScFormulaCell&) (sharedformula.cxx:293)
==3857==    by 0x16DC83EF: ScColumn::DetachFormulaCell(std::pair<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > >, unsigned int> const&, ScFormulaCell&) (column3.cxx:338)
==3857==    by 0x16D9EF99: ScColumn::SwapRow(long, long) (column.cxx:886)
==3857==    by 0x16E9C031: ScTable::SwapRow(long, long) (table3.cxx:571)
==3857==    by 0x16E9C239: ScTable::SortReorder(ScSortInfoArray*, ScProgress*) (table3.cxx:361)
==3857==    by 0x16E9D3E2: ScTable::Sort(ScSortParam const&, bool, ScProgress*) (table3.cxx:690)
==3857==    by 0x16DF49CB: ScDocument::Sort(short, ScSortParam const&, bool, ScProgress*) (documen3.cxx:1374)
==3857==    by 0x17067F4C: ScDBDocFunc::Sort(short, ScSortParam const&, bool, bool, bool) (dbdocfun.cxx:575)
==3857==    by 0x172196DF: ScDBFunc::Sort(ScSortParam const&, bool, bool) (dbfunc.cxx:279)
==3857==    by 0x172197E3: ScDBFunc::UISort(ScSortParam const&, bool) (dbfunc.cxx:270)
==3857==    by 0x17212AEE: ScCellShell::ExecuteDB(SfxRequest&) (cellsh2.cxx:381)
==3857==    by 0x172068D4: SfxStubScCellShellExecuteDB(SfxShell*, SfxRequest&) (scslots.hxx:7002)
==3857==    by 0x48A9335: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (shell.hxx:181)
==3857==    by 0x48A2F73: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (dispatch.cxx:283)
==3857==    by 0x48A4C14: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&, SfxRequest&, unsigned short) (dispatch.cxx:960)
==3857==    by 0x4742136: SfxBindings::Execute_Impl(SfxRequest&, SfxSlot const*, SfxShell*) (bindings.cxx:1238)
==3857==    by 0x4761B37: SfxDispatchController_Impl::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) (unoctitm.cxx:731)
==3857==    by 0x4762069: SfxOfficeDispatch::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (unoctitm.cxx:359)
==3857==    by 0xDC014A6: framework::GenericToolbarController::ExecuteHdl_Impl(framework::GenericToolbarController*, framework::ExecuteInfo*) (generictoolbarcontroller.cxx:282)
==3857==    by 0x51AC826: Link::Call(void*) const (link.hxx:123)
==3857==    by 0x53D0950: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:1887)
==3857==    by 0x53D5AA7: SalFrame::CallCallback(unsigned short, void const*) const (in /data/opt/libreoffice/master/instdir/program/libvcllo.so)
==3857==    by 0x53D57F8: SalGenericDisplay::DispatchInternalEvent() (gendisp.cxx:90)
==3857==    by 0xAF72A68: GtkData::userEventFn(void*) (gtkdata.cxx:935)
==3857==    by 0xAF72ACB: call_userEventFn (gtkdata.cxx:945)
==3857==    by 0x60EF52F: g_idle_dispatch (gmain.c:5251)
==3857==    by 0x60F27DD: g_main_context_dispatch (gmain.c:3066)
==3857==    by 0x60F2B87: g_main_context_iterate.isra.23 (gmain.c:3713)
==3857==    by 0x60F2C47: g_main_context_iteration (gmain.c:3774)
==3857==    by 0xAF731E3: GtkInstance::Yield(bool, bool) (gtkinst.cxx:424)
==3857==    by 0x51A7863: ImplYield(bool, bool) (svapp.cxx:363)
==3857==    by 0x51A564C: Application::Yield() (svapp.cxx:395)
==3857==    by 0x51A567E: Application::Execute() (svapp.cxx:344)
==3857==    by 0x4091C11: desktop::Desktop::Main() (app.cxx:1680)
==3857==    by 0x51A9615: ImplSVMain() (svmain.cxx:155)
==3857==    by 0x51A96E7: SVMain() (svmain.cxx:188)
==3857==    by 0x40A9228: soffice_main (sofficemain.cxx:85)
==3857==    by 0x80485AB: main (main.c:48)
==3857==  Address 0x18746eb4 is 28 bytes inside a block of size 88 free'd
==3857==    at 0x402B6AD: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==3857==    by 0x16D8C79F: mdds::default_deleter<ScFormulaCell> std::for_each<__gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, mdds::default_deleter<ScFormulaCell> >(__gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, __gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, mdds::default_deleter<ScFormulaCell>) [clone .isra.190] (default_deleter.hpp:40)
==3857==    by 0x16D8D759: mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> >::overwrite_values(mdds::mtv::base_element_block&, unsigned int, unsigned int) (multi_type_vector_types.hpp:587)
==3857==    by 0x16D934FD: mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_new_block_to_middle(unsigned int, unsigned int, unsigned int, bool) (multi_type_vector_def.inl:2645)
==3857==    by 0x16DB4BF3: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_cell_to_middle_of_block<svl::SharedString>(unsigned int, unsigned int, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:619)
==3857==    by 0x16DB787C: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_impl<svl::SharedString>(unsigned int, unsigned int, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:367)
==3857==    by 0x16DB79FE: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set<svl::SharedString>(mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > const&, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:289)
==3857==    by 0x16D9F866: ScColumn::SwapRow(long, long) (column.cxx:1068)
==3857==    by 0x16E9C031: ScTable::SwapRow(long, long) (table3.cxx:571)
==3857==    by 0x16E9C239: ScTable::SortReorder(ScSortInfoArray*, ScProgress*) (table3.cxx:361)
==3857==    by 0x16E9D3E2: ScTable::Sort(ScSortParam const&, bool, ScProgress*) (table3.cxx:690)
==3857==    by 0x16DF49CB: ScDocument::Sort(short, ScSortParam const&, bool, ScProgress*) (documen3.cxx:1374)
==3857==    by 0x17067F4C: ScDBDocFunc::Sort(short, ScSortParam const&, bool, bool, bool) (dbdocfun.cxx:575)
==3857==    by 0x172196DF: ScDBFunc::Sort(ScSortParam const&, bool, bool) (dbfunc.cxx:279)
==3857==    by 0x172197E3: ScDBFunc::UISort(ScSortParam const&, bool) (dbfunc.cxx:270)
==3857==    by 0x17212AEE: ScCellShell::ExecuteDB(SfxRequest&) (cellsh2.cxx:381)
==3857==    by 0x172068D4: SfxStubScCellShellExecuteDB(SfxShell*, SfxRequest&) (scslots.hxx:7002)
==3857==    by 0x48A9335: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (shell.hxx:181)
==3857==    by 0x48A2F73: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (dispatch.cxx:283)
==3857==    by 0x48A4C14: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&, SfxRequest&, unsigned short) (dispatch.cxx:960)
==3857==    by 0x4742136: SfxBindings::Execute_Impl(SfxRequest&, SfxSlot const*, SfxShell*) (bindings.cxx:1238)
==3857==    by 0x4761B37: SfxDispatchController_Impl::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) (unoctitm.cxx:731)
==3857==    by 0x4762069: SfxOfficeDispatch::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (unoctitm.cxx:359)
==3857==    by 0xDC014A6: framework::GenericToolbarController::ExecuteHdl_Impl(framework::GenericToolbarController*, framework::ExecuteInfo*) (generictoolbarcontroller.cxx:282)
==3857==    by 0x51AC826: Link::Call(void*) const (link.hxx:123)
==3857==    by 0x53D0950: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:1887)
==3857==    by 0x53D5AA7: SalFrame::CallCallback(unsigned short, void const*) const (in /data/opt/libreoffice/master/instdir/program/libvcllo.so)
==3857==    by 0x53D57F8: SalGenericDisplay::DispatchInternalEvent() (gendisp.cxx:90)
==3857==    by 0xAF72A68: GtkData::userEventFn(void*) (gtkdata.cxx:935)
==3857==    by 0xAF72ACB: call_userEventFn (gtkdata.cxx:945)
==3857==    by 0x60EF52F: g_idle_dispatch (gmain.c:5251)
==3857==    by 0x60F27DD: g_main_context_dispatch (gmain.c:3066)
==3857==    by 0x60F2B87: g_main_context_iterate.isra.23 (gmain.c:3713)
==3857==    by 0x60F2C47: g_main_context_iteration (gmain.c:3774)
==3857==    by 0xAF731E3: GtkInstance::Yield(bool, bool) (gtkinst.cxx:424)
==3857==    by 0x51A7863: ImplYield(bool, bool) (svapp.cxx:363)
==3857==    by 0x51A564C: Application::Yield() (svapp.cxx:395)
==3857==    by 0x51A567E: Application::Execute() (svapp.cxx:344)
==3857==    by 0x4091C11: desktop::Desktop::Main() (app.cxx:1680)
==3857==    by 0x51A9615: ImplSVMain() (svmain.cxx:155)
==3857==    by 0x51A96E7: SVMain() (svmain.cxx:188)
==3857==    by 0x40A9228: soffice_main (sofficemain.cxx:85)
==3857==    by 0x80485AB: main (main.c:48)
==3857== 
==3857== Invalid read of size 4
==3857==    at 0x16E692F0: ScFormulaCell::SetCellGroup(boost::intrusive_ptr<ScFormulaCellGroup> const&) (intrusive_ptr.hpp:172)
==3857==    by 0x16F625F5: sc::SharedFormulaUtil::unshareFormulaCell(std::pair<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > >, unsigned int> const&, ScFormulaCell&) (sharedformula.cxx:293)
==3857==    by 0x16DC83EF: ScColumn::DetachFormulaCell(std::pair<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > >, unsigned int> const&, ScFormulaCell&) (column3.cxx:338)
==3857==    by 0x16D9EF99: ScColumn::SwapRow(long, long) (column.cxx:886)
==3857==    by 0x16E9C031: ScTable::SwapRow(long, long) (table3.cxx:571)
==3857==    by 0x16E9C239: ScTable::SortReorder(ScSortInfoArray*, ScProgress*) (table3.cxx:361)
==3857==    by 0x16E9D3E2: ScTable::Sort(ScSortParam const&, bool, ScProgress*) (table3.cxx:690)
==3857==    by 0x16DF49CB: ScDocument::Sort(short, ScSortParam const&, bool, ScProgress*) (documen3.cxx:1374)
==3857==    by 0x17067F4C: ScDBDocFunc::Sort(short, ScSortParam const&, bool, bool, bool) (dbdocfun.cxx:575)
==3857==    by 0x172196DF: ScDBFunc::Sort(ScSortParam const&, bool, bool) (dbfunc.cxx:279)
==3857==    by 0x172197E3: ScDBFunc::UISort(ScSortParam const&, bool) (dbfunc.cxx:270)
==3857==    by 0x17212AEE: ScCellShell::ExecuteDB(SfxRequest&) (cellsh2.cxx:381)
==3857==    by 0x172068D4: SfxStubScCellShellExecuteDB(SfxShell*, SfxRequest&) (scslots.hxx:7002)
==3857==    by 0x48A9335: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (shell.hxx:181)
==3857==    by 0x48A2F73: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (dispatch.cxx:283)
==3857==    by 0x48A4C14: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&, SfxRequest&, unsigned short) (dispatch.cxx:960)
==3857==    by 0x4742136: SfxBindings::Execute_Impl(SfxRequest&, SfxSlot const*, SfxShell*) (bindings.cxx:1238)
==3857==    by 0x4761B37: SfxDispatchController_Impl::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) (unoctitm.cxx:731)
==3857==    by 0x4762069: SfxOfficeDispatch::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (unoctitm.cxx:359)
==3857==    by 0xDC014A6: framework::GenericToolbarController::ExecuteHdl_Impl(framework::GenericToolbarController*, framework::ExecuteInfo*) (generictoolbarcontroller.cxx:282)
==3857==    by 0x51AC826: Link::Call(void*) const (link.hxx:123)
==3857==    by 0x53D0950: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:1887)
==3857==    by 0x53D5AA7: SalFrame::CallCallback(unsigned short, void const*) const (in /data/opt/libreoffice/master/instdir/program/libvcllo.so)
==3857==    by 0x53D57F8: SalGenericDisplay::DispatchInternalEvent() (gendisp.cxx:90)
==3857==    by 0xAF72A68: GtkData::userEventFn(void*) (gtkdata.cxx:935)
==3857==    by 0xAF72ACB: call_userEventFn (gtkdata.cxx:945)
==3857==    by 0x60EF52F: g_idle_dispatch (gmain.c:5251)
==3857==    by 0x60F27DD: g_main_context_dispatch (gmain.c:3066)
==3857==    by 0x60F2B87: g_main_context_iterate.isra.23 (gmain.c:3713)
==3857==    by 0x60F2C47: g_main_context_iteration (gmain.c:3774)
==3857==    by 0xAF731E3: GtkInstance::Yield(bool, bool) (gtkinst.cxx:424)
==3857==    by 0x51A7863: ImplYield(bool, bool) (svapp.cxx:363)
==3857==    by 0x51A564C: Application::Yield() (svapp.cxx:395)
==3857==    by 0x51A567E: Application::Execute() (svapp.cxx:344)
==3857==    by 0x4091C11: desktop::Desktop::Main() (app.cxx:1680)
==3857==    by 0x51A9615: ImplSVMain() (svmain.cxx:155)
==3857==    by 0x51A96E7: SVMain() (svmain.cxx:188)
==3857==    by 0x40A9228: soffice_main (sofficemain.cxx:85)
==3857==    by 0x80485AB: main (main.c:48)
==3857==  Address 0x18746eb4 is 28 bytes inside a block of size 88 free'd
==3857==    at 0x402B6AD: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==3857==    by 0x16D8C79F: mdds::default_deleter<ScFormulaCell> std::for_each<__gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, mdds::default_deleter<ScFormulaCell> >(__gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, __gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, mdds::default_deleter<ScFormulaCell>) [clone .isra.190] (default_deleter.hpp:40)
==3857==    by 0x16D8D759: mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> >::overwrite_values(mdds::mtv::base_element_block&, unsigned int, unsigned int) (multi_type_vector_types.hpp:587)
==3857==    by 0x16D934FD: mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_new_block_to_middle(unsigned int, unsigned int, unsigned int, bool) (multi_type_vector_def.inl:2645)
==3857==    by 0x16DB4BF3: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_cell_to_middle_of_block<svl::SharedString>(unsigned int, unsigned int, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:619)
==3857==    by 0x16DB787C: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_impl<svl::SharedString>(unsigned int, unsigned int, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:367)
==3857==    by 0x16DB79FE: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set<svl::SharedString>(mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > const&, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:289)
==3857==    by 0x16D9F866: ScColumn::SwapRow(long, long) (column.cxx:1068)
==3857==    by 0x16E9C031: ScTable::SwapRow(long, long) (table3.cxx:571)
==3857==    by 0x16E9C239: ScTable::SortReorder(ScSortInfoArray*, ScProgress*) (table3.cxx:361)
==3857==    by 0x16E9D3E2: ScTable::Sort(ScSortParam const&, bool, ScProgress*) (table3.cxx:690)
==3857==    by 0x16DF49CB: ScDocument::Sort(short, ScSortParam const&, bool, ScProgress*) (documen3.cxx:1374)
==3857==    by 0x17067F4C: ScDBDocFunc::Sort(short, ScSortParam const&, bool, bool, bool) (dbdocfun.cxx:575)
==3857==    by 0x172196DF: ScDBFunc::Sort(ScSortParam const&, bool, bool) (dbfunc.cxx:279)
==3857==    by 0x172197E3: ScDBFunc::UISort(ScSortParam const&, bool) (dbfunc.cxx:270)
==3857==    by 0x17212AEE: ScCellShell::ExecuteDB(SfxRequest&) (cellsh2.cxx:381)
==3857==    by 0x172068D4: SfxStubScCellShellExecuteDB(SfxShell*, SfxRequest&) (scslots.hxx:7002)
==3857==    by 0x48A9335: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (shell.hxx:181)
==3857==    by 0x48A2F73: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (dispatch.cxx:283)
==3857==    by 0x48A4C14: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&, SfxRequest&, unsigned short) (dispatch.cxx:960)
==3857==    by 0x4742136: SfxBindings::Execute_Impl(SfxRequest&, SfxSlot const*, SfxShell*) (bindings.cxx:1238)
==3857==    by 0x4761B37: SfxDispatchController_Impl::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) (unoctitm.cxx:731)
==3857==    by 0x4762069: SfxOfficeDispatch::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (unoctitm.cxx:359)
==3857==    by 0xDC014A6: framework::GenericToolbarController::ExecuteHdl_Impl(framework::GenericToolbarController*, framework::ExecuteInfo*) (generictoolbarcontroller.cxx:282)
==3857==    by 0x51AC826: Link::Call(void*) const (link.hxx:123)
==3857==    by 0x53D0950: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:1887)
==3857==    by 0x53D5AA7: SalFrame::CallCallback(unsigned short, void const*) const (in /data/opt/libreoffice/master/instdir/program/libvcllo.so)
==3857==    by 0x53D57F8: SalGenericDisplay::DispatchInternalEvent() (gendisp.cxx:90)
==3857==    by 0xAF72A68: GtkData::userEventFn(void*) (gtkdata.cxx:935)
==3857==    by 0xAF72ACB: call_userEventFn (gtkdata.cxx:945)
==3857==    by 0x60EF52F: g_idle_dispatch (gmain.c:5251)
==3857==    by 0x60F27DD: g_main_context_dispatch (gmain.c:3066)
==3857==    by 0x60F2B87: g_main_context_iterate.isra.23 (gmain.c:3713)
==3857==    by 0x60F2C47: g_main_context_iteration (gmain.c:3774)
==3857==    by 0xAF731E3: GtkInstance::Yield(bool, bool) (gtkinst.cxx:424)
==3857==    by 0x51A7863: ImplYield(bool, bool) (svapp.cxx:363)
==3857==    by 0x51A564C: Application::Yield() (svapp.cxx:395)
==3857==    by 0x51A567E: Application::Execute() (svapp.cxx:344)
==3857==    by 0x4091C11: desktop::Desktop::Main() (app.cxx:1680)
==3857==    by 0x51A9615: ImplSVMain() (svmain.cxx:155)
==3857==    by 0x51A96E7: SVMain() (svmain.cxx:188)
==3857==    by 0x40A9228: soffice_main (sofficemain.cxx:85)
==3857==    by 0x80485AB: main (main.c:48)
==3857== 
==3857== Invalid write of size 4
==3857==    at 0x16E692F3: ScFormulaCell::SetCellGroup(boost::intrusive_ptr<ScFormulaCellGroup> const&) (intrusive_ptr.hpp:173)
==3857==    by 0x16F625F5: sc::SharedFormulaUtil::unshareFormulaCell(std::pair<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > >, unsigned int> const&, ScFormulaCell&) (sharedformula.cxx:293)
==3857==    by 0x16DC83EF: ScColumn::DetachFormulaCell(std::pair<mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > >, unsigned int> const&, ScFormulaCell&) (column3.cxx:338)
==3857==    by 0x16D9EF99: ScColumn::SwapRow(long, long) (column.cxx:886)
==3857==    by 0x16E9C031: ScTable::SwapRow(long, long) (table3.cxx:571)
==3857==    by 0x16E9C239: ScTable::SortReorder(ScSortInfoArray*, ScProgress*) (table3.cxx:361)
==3857==    by 0x16E9D3E2: ScTable::Sort(ScSortParam const&, bool, ScProgress*) (table3.cxx:690)
==3857==    by 0x16DF49CB: ScDocument::Sort(short, ScSortParam const&, bool, ScProgress*) (documen3.cxx:1374)
==3857==    by 0x17067F4C: ScDBDocFunc::Sort(short, ScSortParam const&, bool, bool, bool) (dbdocfun.cxx:575)
==3857==    by 0x172196DF: ScDBFunc::Sort(ScSortParam const&, bool, bool) (dbfunc.cxx:279)
==3857==    by 0x172197E3: ScDBFunc::UISort(ScSortParam const&, bool) (dbfunc.cxx:270)
==3857==    by 0x17212AEE: ScCellShell::ExecuteDB(SfxRequest&) (cellsh2.cxx:381)
==3857==    by 0x172068D4: SfxStubScCellShellExecuteDB(SfxShell*, SfxRequest&) (scslots.hxx:7002)
==3857==    by 0x48A9335: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (shell.hxx:181)
==3857==    by 0x48A2F73: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (dispatch.cxx:283)
==3857==    by 0x48A4C14: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&, SfxRequest&, unsigned short) (dispatch.cxx:960)
==3857==    by 0x4742136: SfxBindings::Execute_Impl(SfxRequest&, SfxSlot const*, SfxShell*) (bindings.cxx:1238)
==3857==    by 0x4761B37: SfxDispatchController_Impl::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) (unoctitm.cxx:731)
==3857==    by 0x4762069: SfxOfficeDispatch::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (unoctitm.cxx:359)
==3857==    by 0xDC014A6: framework::GenericToolbarController::ExecuteHdl_Impl(framework::GenericToolbarController*, framework::ExecuteInfo*) (generictoolbarcontroller.cxx:282)
==3857==    by 0x51AC826: Link::Call(void*) const (link.hxx:123)
==3857==    by 0x53D0950: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:1887)
==3857==    by 0x53D5AA7: SalFrame::CallCallback(unsigned short, void const*) const (in /data/opt/libreoffice/master/instdir/program/libvcllo.so)
==3857==    by 0x53D57F8: SalGenericDisplay::DispatchInternalEvent() (gendisp.cxx:90)
==3857==    by 0xAF72A68: GtkData::userEventFn(void*) (gtkdata.cxx:935)
==3857==    by 0xAF72ACB: call_userEventFn (gtkdata.cxx:945)
==3857==    by 0x60EF52F: g_idle_dispatch (gmain.c:5251)
==3857==    by 0x60F27DD: g_main_context_dispatch (gmain.c:3066)
==3857==    by 0x60F2B87: g_main_context_iterate.isra.23 (gmain.c:3713)
==3857==    by 0x60F2C47: g_main_context_iteration (gmain.c:3774)
==3857==    by 0xAF731E3: GtkInstance::Yield(bool, bool) (gtkinst.cxx:424)
==3857==    by 0x51A7863: ImplYield(bool, bool) (svapp.cxx:363)
==3857==    by 0x51A564C: Application::Yield() (svapp.cxx:395)
==3857==    by 0x51A567E: Application::Execute() (svapp.cxx:344)
==3857==    by 0x4091C11: desktop::Desktop::Main() (app.cxx:1680)
==3857==    by 0x51A9615: ImplSVMain() (svmain.cxx:155)
==3857==    by 0x51A96E7: SVMain() (svmain.cxx:188)
==3857==    by 0x40A9228: soffice_main (sofficemain.cxx:85)
==3857==    by 0x80485AB: main (main.c:48)
==3857==  Address 0x18746eb4 is 28 bytes inside a block of size 88 free'd
==3857==    at 0x402B6AD: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==3857==    by 0x16D8C79F: mdds::default_deleter<ScFormulaCell> std::for_each<__gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, mdds::default_deleter<ScFormulaCell> >(__gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, __gnu_cxx::__normal_iterator<ScFormulaCell**, std::vector<ScFormulaCell*, std::allocator<ScFormulaCell*> > >, mdds::default_deleter<ScFormulaCell>) [clone .isra.190] (default_deleter.hpp:40)
==3857==    by 0x16D8D759: mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> >::overwrite_values(mdds::mtv::base_element_block&, unsigned int, unsigned int) (multi_type_vector_types.hpp:587)
==3857==    by 0x16D934FD: mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_new_block_to_middle(unsigned int, unsigned int, unsigned int, bool) (multi_type_vector_def.inl:2645)
==3857==    by 0x16DB4BF3: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_cell_to_middle_of_block<svl::SharedString>(unsigned int, unsigned int, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:619)
==3857==    by 0x16DB787C: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set_impl<svl::SharedString>(unsigned int, unsigned int, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:367)
==3857==    by 0x16DB79FE: mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::set<svl::SharedString>(mdds::__mtv::iterator_base<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv::default_element_block<52, svl::SharedString>, mdds::mtv::noncopyable_managed_element_block<53, EditTextObject>, mdds::mtv::noncopyable_managed_element_block<54, ScFormulaCell> > >::iterator_trait, mdds::__mtv::private_data_forward_update<mdds::__mtv::iterator_value_node<unsigned int, mdds::mtv::base_element_block> > > const&, unsigned int, svl::SharedString const&) (multi_type_vector_def.inl:289)
==3857==    by 0x16D9F866: ScColumn::SwapRow(long, long) (column.cxx:1068)
==3857==    by 0x16E9C031: ScTable::SwapRow(long, long) (table3.cxx:571)
==3857==    by 0x16E9C239: ScTable::SortReorder(ScSortInfoArray*, ScProgress*) (table3.cxx:361)
==3857==    by 0x16E9D3E2: ScTable::Sort(ScSortParam const&, bool, ScProgress*) (table3.cxx:690)
==3857==    by 0x16DF49CB: ScDocument::Sort(short, ScSortParam const&, bool, ScProgress*) (documen3.cxx:1374)
==3857==    by 0x17067F4C: ScDBDocFunc::Sort(short, ScSortParam const&, bool, bool, bool) (dbdocfun.cxx:575)
==3857==    by 0x172196DF: ScDBFunc::Sort(ScSortParam const&, bool, bool) (dbfunc.cxx:279)
==3857==    by 0x172197E3: ScDBFunc::UISort(ScSortParam const&, bool) (dbfunc.cxx:270)
==3857==    by 0x17212AEE: ScCellShell::ExecuteDB(SfxRequest&) (cellsh2.cxx:381)
==3857==    by 0x172068D4: SfxStubScCellShellExecuteDB(SfxShell*, SfxRequest&) (scslots.hxx:7002)
==3857==    by 0x48A9335: SfxShell::CallExec(void (*)(SfxShell*, SfxRequest&), SfxRequest&) (shell.hxx:181)
==3857==    by 0x48A2F73: SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) (dispatch.cxx:283)
==3857==    by 0x48A4C14: SfxDispatcher::_Execute(SfxShell&, SfxSlot const&, SfxRequest&, unsigned short) (dispatch.cxx:960)
==3857==    by 0x4742136: SfxBindings::Execute_Impl(SfxRequest&, SfxSlot const*, SfxShell*) (bindings.cxx:1238)
==3857==    by 0x4761B37: SfxDispatchController_Impl::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) (unoctitm.cxx:731)
==3857==    by 0x4762069: SfxOfficeDispatch::dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (unoctitm.cxx:359)
==3857==    by 0xDC014A6: framework::GenericToolbarController::ExecuteHdl_Impl(framework::GenericToolbarController*, framework::ExecuteInfo*) (generictoolbarcontroller.cxx:282)
==3857==    by 0x51AC826: Link::Call(void*) const (link.hxx:123)
==3857==    by 0x53D0950: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:1887)
==3857==    by 0x53D5AA7: SalFrame::CallCallback(unsigned short, void const*) const (in /data/opt/libreoffice/master/instdir/program/libvcllo.so)
==3857==    by 0x53D57F8: SalGenericDisplay::DispatchInternalEvent() (gendisp.cxx:90)
==3857==    by 0xAF72A68: GtkData::userEventFn(void*) (gtkdata.cxx:935)
==3857==    by 0xAF72ACB: call_userEventFn (gtkdata.cxx:945)
==3857==    by 0x60EF52F: g_idle_dispatch (gmain.c:5251)
==3857==    by 0x60F27DD: g_main_context_dispatch (gmain.c:3066)
==3857==    by 0x60F2B87: g_main_context_iterate.isra.23 (gmain.c:3713)
==3857==    by 0x60F2C47: g_main_context_iteration (gmain.c:3774)
==3857==    by 0xAF731E3: GtkInstance::Yield(bool, bool) (gtkinst.cxx:424)
==3857==    by 0x51A7863: ImplYield(bool, bool) (svapp.cxx:363)
==3857==    by 0x51A564C: Application::Yield() (svapp.cxx:395)
==3857==    by 0x51A567E: Application::Execute() (svapp.cxx:344)
==3857==    by 0x4091C11: desktop::Desktop::Main() (app.cxx:1680)
==3857==    by 0x51A9615: ImplSVMain() (svmain.cxx:155)
==3857==    by 0x51A96E7: SVMain() (svmain.cxx:188)
==3857==    by 0x40A9228: soffice_main (sofficemain.cxx:85)
==3857==    by 0x80485AB: main (main.c:48)
==3857==