Attachment 93089 Details for Bug 74226 – crash analysis

crash analysis

draw_crash.txt (text/plain), 7.80 KB, created by Helmut Leininger on 2014-01-30 22:24:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Helmut Leininger

Created: 2014-01-30 22:24:42 UTC

Size: 7.80 KB

patch

obsolete

>ModLoad: 560f0000 56171000   C:\Program Files (x86)\LibreOffice 4\program\fwllo.dll
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>(1984.2374): C++ EH exception - code e06d7363 (first chance)
>Critical error detected c0000374
>(1984.2374): Break instruction exception - code 80000003 (first chance)
>eax=00000000 ebx=00000000 ecx=c0000374 edx=00000021 esi=00000002 edi=0156b5b0
>eip=77a52f9b esp=012fe8f8 ebp=012fe988 iopl=0         nv up ei pl zr na pe nc
>cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
>ntdll!RtlReportCriticalFailure+0x46:
>77a52f9b cc              int     3
>0:000> g
>(1984.2374): Unknown exception - code c0000374 (first chance)
>(1984.2374): Unknown exception - code c0000374 (!!! second chance !!!)
>eax=012fe91c ebx=00000000 ecx=00000001 edx=00000021 esi=00000002 edi=0156b5b0
>eip=77a52fd8 esp=012fe8f8 ebp=012fe988 iopl=0         nv up ei pl zr na pe nc
>cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
>ntdll!RtlReportCriticalFailure+0x83:
>77a52fd8 eb33            jmp     ntdll!RtlReportCriticalFailure+0xb8 (77a5300d)
>0:000> !analyze -v
>*******************************************************************************
>*                                                                             *
>*                        Exception Analysis                                   *
>*                                                                             *
>*******************************************************************************
>
>*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files (x86)\LibreOffice 4\program\soffice.bin - 
>*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\WINDOWS\SYSTEM32\urlmon.dll - 
>
>FAULTING_IP: 
>ntdll!RtlReportCriticalFailure+83
>77a52fd8 eb33            jmp     ntdll!RtlReportCriticalFailure+0xb8 (77a5300d)
>
>EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
>ExceptionAddress: 77a52fd8 (ntdll!RtlReportCriticalFailure+0x00000083)
>   ExceptionCode: c0000374
>  ExceptionFlags: 00000001
>NumberParameters: 1
>   Parameter[0]: 77a6d350
>
>CONTEXT:  00000000 -- (.cxr 0x0;r)
>eax=012fe91c ebx=00000000 ecx=00000001 edx=00000021 esi=00000002 edi=0156b5b0
>eip=77a52fd8 esp=012fe8f8 ebp=012fe988 iopl=0         nv up ei pl zr na pe nc
>cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
>ntdll!RtlReportCriticalFailure+0x83:
>77a52fd8 eb33            jmp     ntdll!RtlReportCriticalFailure+0xb8 (77a5300d)
>
>FAULTING_THREAD:  00002374
>
>PROCESS_NAME:  soffice.bin
>
>ERROR_CODE: (NTSTATUS) 0xc0000374 - Ein Heap wurde besch digt.
>
>EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - Ein Heap wurde besch digt.
>
>EXCEPTION_PARAMETER1:  77a6d350
>
>NTGLOBALFLAG:  0
>
>APPLICATION_VERIFIER_FLAGS:  0
>
>APP:  soffice.bin
>
>ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) x86fre
>
>LAST_CONTROL_TRANSFER:  from 77a55ac8 to 77a52fd8
>
>BUGCHECK_STR:  APPLICATION_FAULT_ACTIONABLE_HEAP_CORRUPTION_heap_failure_multiple_entries_corruption
>
>PRIMARY_PROBLEM_CLASS:  ACTIONABLE_HEAP_CORRUPTION_heap_failure_multiple_entries_corruption
>
>DEFAULT_BUCKET_ID:  ACTIONABLE_HEAP_CORRUPTION_heap_failure_multiple_entries_corruption
>
>STACK_TEXT:  
>77a6d388 77a0ea45 ntdll!RtlpFreeHeap+0x5feb6
>77a6d38c 779aeb7e ntdll!RtlFreeHeap+0x198
>77a6d390 75432851 kernelbase!GlobalFree+0x87
>77a6d394 5cfc1ce9 vcllo!WinSalBitmap::~WinSalBitmap+0x59
>77a6d398 5cfc1ecb vcllo!WinSalBitmap::`scalar deleting destructor'+0xb
>77a6d39c 5cda2b7f vcllo!ImpBitmap::~ImpBitmap+0xf
>77a6d3a0 5cdceda4 vcllo!OutputDevice::ImplDrawAlpha+0x624
>77a6d3a4 5cdcfbc8 vcllo!OutputDevice::ImplDrawBitmapEx+0x528
>77a6d3a8 5cdd0345 vcllo!OutputDevice::DrawBitmapEx+0xa5
>77a6d3ac 568f49ee sdlo!sd::slidesorter::view::FramePainter::OffsetBitmap::PaintCenter+0xde
>77a6d3b0 568f526a sdlo!sd::slidesorter::view::FramePainter::PaintFrame+0x1ea
>77a6d3b4 5690628f sdlo!sd::slidesorter::view::PageObjectPainter::CreateBackgroundBitmap+0x3ef
>77a6d3b8 5690692f sdlo!sd::slidesorter::view::PageObjectPainter::GetBackground+0x4f
>77a6d3bc 56906f08 sdlo!sd::slidesorter::view::PageObjectPainter::GetBackgroundForState+0x138
>77a6d3c0 56906ffb sdlo!sd::slidesorter::view::PageObjectPainter::PaintBackground+0x2b
>77a6d3c4 569070bc sdlo!sd::slidesorter::view::PageObjectPainter::PaintPageObject+0x3c
>77a6d3c8 568f3c3a sdlo!sd::slidesorter::view::SlideSorterView::Paint+0x11a
>77a6d3cc 569000ad sdlo!std::_For_each<boost::shared_ptr<sd::slidesorter::view::ILayerPainter> *,boost::_bi::bind_t<void,boost::_mfi::mf2<void,sd::slidesorter::view::ILayerPainter,OutputDevice &,Rectangle const &>,boost::_bi::list3<boost::arg<1>,boost::reference_wrapper<OutputD+0x1d
>77a6d3d0 56900a58 sdlo!sd::slidesorter::view::`anonymous namespace'::Layer::Repaint+0xa8
>77a6d3d4 5690066d sdlo!std::_For_each<boost::shared_ptr<sd::slidesorter::view::`anonymous namespace'::Layer> *,boost::_bi::bind_t<void,boost::_mfi::mf2<void,sd::slidesorter::view::`anonymous namespace'::Layer,OutputDevice &,Rectangle const &>,boost::_bi::list3<boost::arg<1>,bo+0x1d
>77a6d3d8 569010b7 sdlo!sd::slidesorter::view::LayeredDevice::RepaintRectangle+0xa7
>77a6d3dc 568ffe71 sdlo!boost::detail::function::void_function_obj_invoker1<boost::_bi::bind_t<void,boost::_mfi::mf1<void,sd::slidesorter::view::LayeredDevice,Rectangle const &>,boost::_bi::list2<boost::_bi::value<sd::slidesorter::view::LayeredDevice *>,boost::arg<1> > >,void,R+0x11
>77a6d3e0 56900fc5 sdlo!sd::slidesorter::view::`anonymous namespace'::ForAllRectangles+0xe5
>77a6d3e4 56901632 sdlo!sd::slidesorter::view::LayeredDevice::Repaint+0x102
>77a6d3e8 568f38a2 sdlo!sd::slidesorter::view::SlideSorterView::CompleteRedraw+0x132
>77a6d3ec 568bacc8 sdlo!sd::slidesorter::controller::SlideSorterController::Paint+0x68
>77a6d3f0 568ed32b sdlo!sd::slidesorter::SlideSorterViewShell::Paint+0x2b
>77a6d3f4 569faa00 sdlo!sd::Window::Paint+0x20
>77a6d3f8 5cf9d63c vcllo!Window::ImplCallPaint+0x38c
>77a6d3fc 5cf9d70c vcllo!Window::ImplCallPaint+0x45c
>77a6d400 5cf9d70c vcllo!Window::ImplCallPaint+0x45c
>77a6d404 5cf9d70c vcllo!Window::ImplCallPaint+0x45c
>
>
>FOLLOWUP_IP: 
>vcllo!WinSalBitmap::~WinSalBitmap+59 [c:\cygwin\home\buildslave\source\libo-core\vcl\win\source\gdi\salbmp.cxx @ 220]
>5cfc1ce9 eb0e            jmp     vcllo!WinSalBitmap::~WinSalBitmap+0x69 (5cfc1cf9)
>
>FAULTING_SOURCE_LINE:  c:\cygwin\home\buildslave\source\libo-core\vcl\win\source\gdi\salbmp.cxx
>
>FAULTING_SOURCE_FILE:  c:\cygwin\home\buildslave\source\libo-core\vcl\win\source\gdi\salbmp.cxx
>
>FAULTING_SOURCE_LINE_NUMBER:  220
>
>SYMBOL_STACK_INDEX:  3
>
>SYMBOL_NAME:  vcllo!WinSalBitmap::~WinSalBitmap+59
>
>FOLLOWUP_NAME:  MachineOwner
>
>MODULE_NAME: vcllo
>
>IMAGE_NAME:  vcllo.dll
>
>DEBUG_FLR_IMAGE_TIMESTAMP:  52e7c266
>
>STACK_COMMAND:  dps 77a6d388 ; kb
>
>FAILURE_BUCKET_ID:  ACTIONABLE_HEAP_CORRUPTION_heap_failure_multiple_entries_corruption_c0000374_vcllo.dll!WinSalBitmap::_WinSalBitmap
>
>BUCKET_ID:  APPLICATION_FAULT_ACTIONABLE_HEAP_CORRUPTION_heap_failure_multiple_entries_corruption_vcllo!WinSalBitmap::_WinSalBitmap+59
>
>ANALYSIS_SOURCE:  UM
>
>FAILURE_ID_HASH_STRING:  um:actionable_heap_corruption_heap_failure_multiple_entries_corruption_c0000374_vcllo.dll!winsalbitmap::_winsalbitmap
>
>FAILURE_ID_HASH:  {9037fe55-aa1c-b3fd-55fa-f4a9f0dca35b}
>
>Followup: MachineOwner
>---------
>

Actions: View

Attachments on bug 74226: 93089 | 93091