Attachment 144169 Details for Bug 117086 – valgrind log of first used of deleted SwFrame

valgrind log of first used of deleted SwFrame

valgrind.log (text/plain), 2.40 KB, created by Caolán McNamara on 2018-08-14 13:23:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Caolán McNamara

Created: 2018-08-14 13:23:16 UTC

Size: 2.40 KB

patch

obsolete

>==5367== Invalid read of size 1
>==5367==    at 0x4BCD03AA: IsInTab (frame.hxx:928)
>==5367==    by 0x4BCD03AA: SwFrame::FindFootnoteBossFrame(bool) (findfrm.cxx:423)
>==5367==    by 0x4BCD67A7: SwFlowFrame::MoveFwd(bool, bool, bool) (flowfrm.cxx:1909)
>==5367==    by 0x4BCC92F1: SwContentFrame::MakeAll(OutputDevice*) (calcmove.cxx:1762)
>==5367==    by 0x4BCC5F16: SwFrame::OptPrepareMake() (calcmove.cxx:367)
>==5367==    by 0x4BCFEF47: OptCalc (frame.hxx:1051)
>==5367==    by 0x4BCFEF47: SwLayAction::FormatContent_(SwContentFrame const*, SwPageFrame const*) (layact.cxx:1777)
>==5367==    by 0x4BCFF88D: SwLayAction::FormatFlyContent(SwFlyFrame const*) (layact.cxx:1802)
>==5367==    by 0x4BD0A663: SwObjectFormatter::FormatObj_(SwAnchoredObject&) (objectformatter.cxx:345)
>==5367==    by 0x4BD0A958: SwObjectFormatterLayFrame::DoFormatObj(SwAnchoredObject&, bool) (objectformatterlayfrm.cxx:76)
>==5367==    by 0x4BD0AB2A: SwObjectFormatterLayFrame::AdditionalFormatObjsOnPage() (objectformatterlayfrm.cxx:156)
>==5367==    by 0x4BD0A0E0: SwObjectFormatter::FormatObjsAtFrame(SwFrame&, SwPageFrame const&, SwLayAction*) (objectformatter.cxx:191)
>==5367==    by 0x4BD01FD2: SwLayAction::InternalAction(OutputDevice*) (layact.cxx:708)
>==5367==    by 0x4BD025B0: SwLayAction::Action(OutputDevice*) (layact.cxx:341)
>==5367==  Address 0x5065a695 is 181 bytes inside a block of size 248 free'd
>==5367==    at 0x4C2FDAC: free (vg_replace_malloc.c:530)
>==5367==    by 0x4BD11277: (anonymous namespace)::doInsertPage(SwRootFrame*, SwPageFrame**, SwFrameFormat*, SwPageDesc*, bool, SwPageFrame**) (pagechg.cxx:1270)
>==5367==    by 0x4BD11424: SwFrame::InsertPage(SwPageFrame*, bool) (pagechg.cxx:1324)
>==5367==    by 0x4BCD4386: SwFrame::GetNextLeaf(MakePageType) (flowfrm.cxx:997)
>==5367==    by 0x4BCD6625: SwFlowFrame::MoveFwd(bool, bool, bool) (flowfrm.cxx:1876)
>==5367==    by 0x4BCD6EE2: SwFlowFrame::CheckMoveFwd(bool&, bool, bool) (flowfrm.cxx:1789)
>==5367==    by 0x4BCC868C: SwContentFrame::MakeAll(OutputDevice*) (calcmove.cxx:1322)
>==5367==    by 0x4BCC5BC2: SwFrame::PrepareMake(OutputDevice*) (calcmove.cxx:309)
>==5367==    by 0x4BCE37FE: SwFlyAtContentFrame::MakeAll(OutputDevice*) (flycnt.cxx:423)
>==5367==    by 0x4BCC5C4C: SwFrame::PrepareMake(OutputDevice*) (calcmove.cxx:343)
>==5367==    by 0x4BCD6776: SwFlowFrame::MoveFwd(bool, bool, bool) (flowfrm.cxx:1904)
>==5367==    by 0x4BCC92F1: SwContentFrame::MakeAll(OutputDevice*) (calcmove.cxx:1762)

Actions: View

Attachments on bug 117086: 141457 | 141458 | 141462 | 142095 | 144169