Attachment 117046 Details for Bug 89554 – backtrace

backtrace

backtrace.txt (text/plain), 12.15 KB, created by Gordo on 2015-07-04 15:52:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gordo

Created: 2015-07-04 15:52:47 UTC

Size: 12.15 KB

patch

obsolete

>FAULTING_IP: 
>swlo!SwLayoutFrm::ContainsCntnt+10 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\findfrm.cxx @ 72]
>5da0f710 8a466e          mov     al,byte ptr [esi+6Eh]
>
>EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
>ExceptionAddress: 000000005da0f710 (swlo!SwLayoutFrm::ContainsCntnt+0x0000000000000010)
>   ExceptionCode: c0000005 (Access violation)
>  ExceptionFlags: 00000000
>NumberParameters: 2
>   Parameter[0]: 0000000000000000
>   Parameter[1]: 000000000000006e
>Attempt to read from address 000000000000006e
>
>FAULTING_THREAD:  0000000000001184
>
>PROCESS_NAME:  soffice.bin
>
>ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
>
>EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
>
>EXCEPTION_PARAMETER1:  0000000000000000
>
>EXCEPTION_PARAMETER2:  000000000000006e
>
>READ_ADDRESS:  000000000000006e 
>
>FOLLOWUP_IP: 
>swlo!SwLayoutFrm::ContainsCntnt+10 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\findfrm.cxx @ 72]
>5da0f710 8a466e          mov     al,byte ptr [esi+6Eh]
>
>NTGLOBALFLAG:  0
>
>APPLICATION_VERIFIER_FLAGS:  0
>
>CHKIMG_EXTENSION: !chkimg -lo 50 -d !USER32
>    755a25b4-755a25bb  8 bytes - USER32!$$VProc_ImageExportDirectory+264
>	[ e4 74 01 00 ff 74 01 00:83 45 05 02 8e 45 05 02 ]
>    755a25d0-755a25d7  8 bytes - USER32!$$VProc_ImageExportDirectory+280 (+0x1c)
>	[ 1a 75 01 00 35 75 01 00:15 45 05 02 20 45 05 02 ]
>    755a7d56-755a7d5b  6 bytes - USER32!PostThreadMessageW (+0x5786)
>	[ 8b ff 55 8b ec 5d:ff 25 1e 00 44 71 ]
>    755a8c38-755a8c3d  6 bytes - USER32!GetKeyState (+0xee2)
>	[ 8b ff 55 8b ec 64:ff 25 1e 00 1d 71 ]
>    755a9c90-755a9c95  6 bytes - USER32!PostMessageW (+0x1058)
>	[ 8b ff 55 8b ec 8b:ff 25 1e 00 4a 71 ]
>    755aac73-755aac78  6 bytes - USER32!SystemParametersInfoW (+0xfe3)
>	[ 6a 10 68 d0 ac 5a:ff 25 1e 00 ff 70 ]
>    755ac31b-755ac320  6 bytes - USER32!SendMessageW (+0x16a8)
>	[ 8b ff 55 8b ec 56:ff 25 1e 00 3e 71 ]
>    755accf2-755accf4  3 bytes - USER32!NtUserMoveWindow (+0x9d7)
>	[ b8 5e 10:ff 25 1e ]
>    755accf6-755accf7  2 bytes - USER32!NtUserMoveWindow+4 (+0x04)
>	[ 00 8d:11 71 ]
>    755acd2b-755acd2d  3 bytes - USER32!NtUserSetParent (+0x35)
>	[ b8 79 10:ff 25 1e ]
>    755acd2f-755acd30  2 bytes - USER32!NtUserSetParent+4 (+0x04)
>	[ 00 8d:14 71 ]
>    755ad547-755ad54c  6 bytes - USER32!SendMessageTimeoutW (+0x818)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 38 71 ]
>    755ad78c-755ad791  6 bytes - USER32!SendMessageCallbackW (+0x245)
>	[ 8b ff 55 8b ec 51:ff 25 1e 00 32 71 ]
>    755ad87e-755ad880  3 bytes - USER32!NtUserGetKeyboardState (+0xf2)
>	[ b8 7a 10:ff 25 1e ]
>    755ad882-755ad883  2 bytes - USER32!NtUserGetKeyboardState+4 (+0x04)
>	[ 00 8d:20 71 ]
>    755adab6-755adabb  6 bytes - USER32!SendNotifyMessageW (+0x234)
>	[ 8b ff 55 8b ec 8b:ff 25 1e 00 2c 71 ]
>    755aec07-755aec0c  6 bytes - USER32!SendMessageTimeoutA (+0x1151)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 3b 71 ]
>    755aec54-755aec56  3 bytes - USER32!NtUserSetClipboardViewer (+0x4d)
>	[ b8 22 11:ff 25 1e ]
>    755aec58-755aec59  2 bytes - USER32!NtUserSetClipboardViewer+4 (+0x04)
>	[ 00 8d:0e 71 ]
>    755af171-755af176  6 bytes - USER32!SendMessageA (+0x519)
>	[ 8b ff 55 8b ec 56:ff 25 1e 00 41 71 ]
>    755af282-755af287  6 bytes - USER32!SetWindowLongA (+0x111)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 53 71 ]
>    755af2ca-755af2cf  6 bytes - USER32!GetAsyncKeyState (+0x48)
>	[ 8b ff 55 8b ec 51:ff 25 1e 00 1a 71 ]
>    755b02c0-755b02c5  6 bytes - USER32!SetWindowLongW (+0xff6)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 50 71 ]
>    755b03d2-755b03d7  6 bytes - USER32!SetWindowsHookExW (+0x112)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 59 71 ]
>    755b05c8-755b05cd  6 bytes - USER32!PostMessageA (+0x1f6)
>	[ 8b ff 55 8b ec 56:ff 25 1e 00 4d 71 ]
>    755b0827-755b082c  6 bytes - USER32!EnableWindow (+0x25f)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 fc 70 ]
>    755b1b58-755b1b5d  6 bytes - USER32!SetWindowsHookExA (+0x1331)
>	[ 8b ff 55 8b ec 6a:ff 25 1e 00 5c 71 ]
>    755b2ae6-755b2aeb  6 bytes - USER32!SystemParametersInfoA (+0xf8e)
>	[ 6a 10 68 40 2b 5b:ff 25 1e 00 02 71 ]
>    755b5cb5-755b5cba  6 bytes - USER32!PostThreadMessageA (+0x31cf)
>	[ 8b ff 55 8b ec a1:ff 25 1e 00 47 71 ]
>    755bf598-755bf59d  6 bytes - USER32!SendDlgItemMessageW (+0x98e3)
>	[ 8b ff 55 8b ec 83:ff 25 1e 00 26 71 ]
>    755c16b0-755c16b5  6 bytes - USER32!SendDlgItemMessageA (+0x2118)
>	[ 8b ff 55 8b ec 83:ff 25 1e 00 29 71 ]
>    755c653e-755c6543  6 bytes - USER32!SetWinEventHook (+0x4e8e)
>	[ 8b ff 55 8b ec 81:ff 25 1e 00 56 71 ]
>    755c7299-755c729e  6 bytes - USER32!GetClipboardData (+0xd5b)
>	[ 8b ff 55 8b ec 83:ff 25 1e 00 08 71 ]
>    755eab57-755eab5c  6 bytes - USER32!ExitWindowsEx (+0x238be)
>	[ 8b ff 55 8b ec 83:ff 25 1e 00 f9 70 ]
>    755fd73e-755fd743  6 bytes - USER32!mouse_event (+0x12be7)
>	[ 8b ff 55 8b ec 83:ff 25 1e 00 5f 71 ]
>    755fd782-755fd787  6 bytes - USER32!keybd_event (+0x44)
>	[ 8b ff 55 8b ec 83:ff 25 1e 00 62 71 ]
>    7560495a-7560495f  6 bytes - USER32!SendMessageCallbackA (+0x71d8)
>	[ 8b ff 55 8b ec 51:ff 25 1e 00 35 71 ]
>    756049bb-756049c0  6 bytes - USER32!SendNotifyMessageA (+0x61)
>	[ 8b ff 55 8b ec 8b:ff 25 1e 00 2f 71 ]
>    75605af6-75605af8  3 bytes - USER32!NtUserSendInput (+0x113b)
>	[ b8 84 10:ff 25 1e ]
>    75605afa-75605afb  2 bytes - USER32!NtUserSendInput+4 (+0x04)
>	[ 00 8d:23 71 ]
>    75605cc6-75605cc8  3 bytes - USER32!NtUserBlockInput (+0x1cc)
>	[ b8 76 12:ff 25 1e ]
>    75605cca-75605ccb  2 bytes - USER32!NtUserBlockInput+4 (+0x04)
>	[ 00 8d:0b 71 ]
>    756064c5-756064c7  3 bytes - USER32!NtUserRegisterHotKey (+0x7fb)
>	[ b8 ce 12:ff 25 1e ]
>    756064c9-756064ca  2 bytes - USER32!NtUserRegisterHotKey+4 (+0x04)
>	[ 00 8d:05 71 ]
>    756064e2-756064e4  3 bytes - USER32!NtUserRegisterRawInputDevices (+0x19)
>	[ b8 cf 12:ff 25 1e ]
>    756064e6-756064e7  2 bytes - USER32!NtUserRegisterRawInputDevices+4 (+0x04)
>	[ 00 8d:17 71 ]
>224 errors : !USER32 (755a25b4-756064e7)
>
>BUGCHECK_STR:  APPLICATION_FAULT_MEMORY_CORRUPTION_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_READ_LARGE
>
>PRIMARY_PROBLEM_CLASS:  MEMORY_CORRUPTION_LARGE
>
>DEFAULT_BUCKET_ID:  MEMORY_CORRUPTION_LARGE
>
>LAST_CONTROL_TRANSFER:  from 000000005da7910a to 000000005da0f710
>
>STACK_TEXT:  
>00c0e7f0 5da7910a 00c0ea50 07b8a2f8 00c0ea84 swlo!SwLayoutFrm::ContainsCntnt+0x10 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\findfrm.cxx @ 72]
>00c0e850 5da79cef 00c0e9a8 00000000 00000000 swlo!SwLayoutFrm::GetCntntPos+0x55a [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\trvlfrm.cxx @ 1308]
>00c0e9c0 5da7a2a3 00c0ea30 00c0ea84 00c0ea50 swlo!SwPageFrm::GetCrsrOfst+0x14f [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\trvlfrm.cxx @ 215]
>00c0e9e8 5d7f5814 00c0ea30 0000525b 000077cb swlo!SwRootFrm::GetCrsrOfst+0xc3 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\trvlfrm.cxx @ 447]
>00c0eaa0 5de3039c 00c0ec70 00000000 00000001 swlo!SwCrsrShell::SetCrsr+0x174 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\crsr\crsrsh.cxx @ 758]
>00c0eb48 5de2e2f3 00000078 01c0ec70 00000001 swlo!SwTransferable::PrivateDrop+0x62c [c:\cygwin64\home\buildslave\source\libo-core\sw\source\uibase\dochdl\swdtflvr.cxx @ 3484]
>00c0ec04 5de59432 00c0ec44 0b737dc8 00002017 swlo!SwTransferable::PasteData+0x243 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\uibase\dochdl\swdtflvr.cxx @ 1276]
>00c0ec94 60ac62c7 00c0ec02 0abb1cc5 06d1d788 swlo!SwEditWin::ExecuteDrop+0x1b2 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\uibase\docvw\edtdd.cxx @ 236]
>00c0ed28 5f9df195 06d048c4 00c0ed48 0abb1bd7 svtlo!DropTargetHelper::DropTargetListener::drop+0x107 [c:\cygwin64\home\buildslave\source\libo-core\svtools\source\misc\transfer2.cxx @ 163]
>00c0eda4 5f9dca65 00c0eeb4 06d048c4 000002e0 vcllo!DNDListenerContainer::fireDropEvent+0x195 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\dndlcon.cxx @ 146]
>00c0ee04 5f9dc19f 06d1d7bc 00c0eeb4 00000082 vcllo!DNDEventDispatcher::fireDropEvent+0xe5 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\dndevdis.cxx @ 427]
>00c0ee54 5e609d16 062ee214 00c0eeb4 0a28c697 vcllo!DNDEventDispatcher::drop+0xef [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\dndevdis.cxx @ 118]
>00c0ee90 5e6090b8 062ee214 0a28c6e7 75a8140b dnd!DropTarget::fire_drop+0xa6 [c:\cygwin64\home\buildslave\source\libo-core\dtrans\source\win32\dnd\target.cxx @ 496]
>00c0eee0 5e602f5e 06f90cd8 10363170 00000000 dnd!DropTarget::Drop+0x1d8 [c:\cygwin64\home\buildslave\source\libo-core\dtrans\source\win32\dnd\target.cxx @ 467]
>00c0ef00 76c9ff59 055bd1f8 10363170 00000000 dnd!IDropTargetImpl::Drop+0x1e [c:\cygwin64\home\buildslave\source\libo-core\dtrans\source\win32\dnd\idroptarget.cxx @ 101]
>00c0ef34 752d8cf6 1027ed78 00000000 1038bf28 ole32!CPrivDragDrop::PrivDragDrop+0xcc
>00c0ef74 75360cc6 76c9fe8d 00c0f158 0000000b RPCRT4!Invoke+0x2a
>00c0f378 7536093e 10290370 055c6380 0b7bc4b8 RPCRT4!NdrStubCall2+0x24a
>00c0f3c0 76caa8c5 10290370 0b7bc4b8 055c6380 RPCRT4!CStdStubBuffer_Invoke+0xb9
>00c0f408 76caaa59 0b7bc4b8 054f9854 055d0448 ole32!SyncStubInvoke+0x3c
>00c0f454 76bd624e 0b7bc4b8 0b9ac420 10290370 ole32!StubInvoke+0xb9
>00c0f530 76bd615f 055c6380 00000000 10290370 ole32!CCtxComChnl::ContextInvoke+0xfa
>00c0f54c 76bd6e75 0b7bc4b8 00000001 10290370 ole32!MTAInvoke+0x1a
>00c0f578 76caa981 0b7bc4b8 00000001 10290370 ole32!STAInvoke+0x46
>00c0f5ac 76caa79b d0908070 055c6380 10290370 ole32!AppInvoke+0xaa
>00c0f688 76caae2d 0b7bc460 055cba40 00000000 ole32!ComInvokeWithLockAndIPID+0x32c
>00c0f6b0 76bd6c4d 0b7bc460 00000400 00c99540 ole32!ComInvoke+0xc5
>00c0f6c4 76bd6c0c 0b7bc460 00000000 76bd6b6f ole32!ThreadDispatch+0x23
>00c0f708 755a8817 000c038e 00000400 0000babe ole32!ThreadWndProc+0x167
>00c0f734 755a898e 76bd6b6f 000c038e 00000400 USER32!InternalCallWinProc+0x23
>00c0f7ac 755a8ab9 00000000 76bd6b6f 000c038e USER32!UserCallWinProcCheckWow+0x109
>00c0f810 755a8b10 76bd6b6f 00000000 00c0f854 USER32!DispatchMessageWorker+0x380
>00c0f820 5fd4a3a7 00c0f838 00ca8028 00000001 USER32!DispatchMessageW+0xf
>00c0f854 5fd4abc3 00ca8001 00000000 60001720 vcllo!ImplSalYield+0xd7 [c:\cygwin64\home\buildslave\source\libo-core\vcl\win\source\app\salinst.cxx @ 610]
>00c0f878 5fcce599 00ca8001 00000000 056ce4bc vcllo!WinSalInstance::Yield+0xa3 [c:\cygwin64\home\buildslave\source\libo-core\vcl\win\source\app\salinst.cxx @ 653]
>00c0f890 6401f463 0abb0a31 60001720 00c436f3 vcllo!Application::Execute+0x69 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 341]
>00c0fa20 5fcd4d64 00000000 00000001 5fcd5119 sofficeapp!desktop::Desktop::Main+0xdc3 [c:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\app.cxx @ 1640]
>00c0fa2c 5fcd5119 00fa6148 00c0fa90 6404c2f0 vcllo!ImplSVMain+0x24 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 163]
>00c0fa38 6404c2f0 0abb0a81 00c436f3 64083378 vcllo!SVMain+0x29 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 197]
>00c0fa90 010a101e 00c436f3 010a12af 010a0000 sofficeapp!soffice_main+0x80 [c:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\sofficemain.cxx @ 101]
>WARNING: Stack unwind information not available. Following frames may be wrong.
>00c0fae4 75aff804 7efde000 00c0fb30 775ed7bd soffice+0x101e
>00c0faf0 775ed7bd 7efde000 76a027d8 00000000 KERNEL32!BaseThreadInitThunk+0xe
>00c0fb30 775ed9cf 010a1183 7efde000 00000000 ntdll_77570000!__RtlUserThreadStart+0x23
>00c0fb48 00000000 010a1183 7efde000 00000000 ntdll_77570000!_RtlUserThreadStart+0x1b
>
>
>STACK_COMMAND:  .cxr 0000000000000000 ; kb ; ~0s ; kb
>
>SYMBOL_NAME:  memory_corruption!USER32
>
>FOLLOWUP_NAME:  MachineOwner
>
>MODULE_NAME: memory_corruption
>
>IMAGE_NAME:  memory_corruption
>
>DEBUG_FLR_IMAGE_TIMESTAMP:  0
>
>FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE_c0000005_memory_corruption!USER32
>
>BUCKET_ID:  X64_APPLICATION_FAULT_MEMORY_CORRUPTION_NULL_CLASS_PTR_DEREFERENCE_INVALID_POINTER_READ_LARGE_memory_corruption!USER32
>
>WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/soffice_bin/4_4_4_3/558a331a/swlo_dll/4_4_4_3/558a343e/c0000005/002df710.htm?Retriage=1
>
>Followup: MachineOwner
>---------

Actions: View

Attachments on bug 89554: 113592 | 113594 | 117046