I got this crash only once when undo/redoing and editing a little too fast. Not sure whether this is enough to fix it, so far I've not reproduced it. This is on Fedora 19 with LO 4.1.0.4-6.fc19. [New LWP 2247] [New LWP 2249] [New LWP 2266] [New LWP 2294] [New LWP 2313] [New LWP 2256] [New LWP 3408] [New LWP 2280] warning: Could not load shared library symbols for /lib64/libgraphite2.so.3. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `/usr/lib64/libreoffice/program/soffice.bin --writer --splash-pipe=5'. Program terminated with signal 6, Aborted. #0 0x00000032e2c35a19 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig); Thread 8 (Thread 0x7f04f1ee5700 (LWP 2280)): #0 0x00000032e2ceab6d in poll () at ../sysdeps/unix/syscall-template.S:81 No locals. #1 0x00007f04fb618698 in poll (__timeout=-1, __nfds=2, __fds=0x7f04f1f0a950) at /usr/include/bits/poll2.h:46 No locals. #2 ICEConnectionWorker (data=0xeb1010) at /usr/src/debug/libreoffice-4.1.0.4/vcl/unx/generic/app/sm.cxx:634 nConnectionsBefore = 1 bWakeup = <optimized out> g = <optimized out> t = <optimized out> pLocalFD = 0x7f04f1f0a950 nRet = <optimized out> pThis = <optimized out> #3 0x00007f0508d01fd7 in osl_thread_start_Impl (pData=0x1935f40) at /usr/src/debug/libreoffice-4.1.0.4/sal/osl/unx/thread.c:251 terminate = <optimized out> pImpl = 0x1935f40 #4 0x00000032e3407c53 in start_thread (arg=0x7f04f1ee5700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f04f1ee5700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139659215525632, -2218105766682593621, 0, 139659215526336, 139659215525632, 26435424, 2251332874418747051, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #5 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 7 (Thread 0x7f04ccbfe700 (LWP 3408)): #0 0x00000032e2ceab6d in poll () at ../sysdeps/unix/syscall-template.S:81 No locals. #1 0x00000038afe480f4 in g_main_context_poll (priority=2147483647, n_fds=1, fds=0x7f04c00008c0, timeout=-1, context=0x7f04d8001720) at gmain.c:3995 poll_func = 0x38afe56d50 <g_poll> #2 g_main_context_iterate (context=context@entry=0x7f04d8001720, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3696 max_priority = 2147483647 timeout = -1 some_ready = <optimized out> nfds = 1 allocated_nfds = 1 fds = 0x7f04c00008c0 #3 0x00000038afe481fc in g_main_context_iteration (context=0x7f04d8001720, may_block=may_block@entry=1) at gmain.c:3762 retval = <optimized out> #4 0x00000038afe48249 in glib_worker_main (data=<optimized out>) at gmain.c:5427 No locals. #5 0x00000038afe6c185 in g_thread_proxy (data=0x4a9e720) at gthread.c:798 thread = 0x4a9e720 #6 0x00000032e3407c53 in start_thread (arg=0x7f04ccbfe700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f04ccbfe700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139658591725312, -2218105766682593621, 0, 139658591726016, 139658591725312, 24, 2251287377293309611, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #7 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 6 (Thread 0x7f04f9a68700 (LWP 2256)): #0 0x00000032e2cf5ded in accept () at ../sysdeps/unix/syscall-template.S:81 No locals. #1 0x00007f0508cfc9f0 in osl_acceptPipe (pPipe=0x174a6d0) at /usr/src/debug/libreoffice-4.1.0.4/sal/osl/unx/pipe.c:457 s = <optimized out> flags = <optimized out> pAcceptedPipe = <optimized out> #2 0x00007f0508abaec3 in accept (Connection=..., this=0x1748db8) at /usr/src/debug/libreoffice-4.1.0.4/include/osl/pipe.hxx:132 No locals. #3 desktop::OfficeIPCThread::execute (this=0x1748d90) at /usr/src/debug/libreoffice-4.1.0.4/desktop/source/app/officeipcthread.cxx:678 aStreamPipe = {<osl::Pipe> = {m_handle = 0x0}, <No data fields>} #4 0x00007f0507b42c96 in salhelper::Thread::run (this=0x1748d90) at /usr/src/debug/libreoffice-4.1.0.4/salhelper/source/thread.cxx:40 No locals. #5 0x00007f0507b42e6a in osl::threadFunc (param=0x1748da0) at /usr/src/debug/libreoffice-4.1.0.4/include/osl/thread.hxx:187 pObj = 0x1748da0 #6 0x00007f0508d01fd7 in osl_thread_start_Impl (pData=0x1749d20) at /usr/src/debug/libreoffice-4.1.0.4/sal/osl/unx/thread.c:251 terminate = <optimized out> pImpl = 0x1749d20 #7 0x00000032e3407c53 in start_thread (arg=0x7f04f9a68700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f04f9a68700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139659345037056, -2218105766682593621, 0, 139659345037760, 139659345037056, 24419648, 2251315763805910699, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #8 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 5 (Thread 0x7f04d71a1700 (LWP 2313)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185 No locals. #1 0x00007f0508d20349 in osl_waitCondition (Condition=0x1f68770, pTimeout=0x0) at /usr/src/debug/libreoffice-4.1.0.4/sal/osl/unx/conditn.cxx:290 pCond = 0x1f68770 nRet = <optimized out> Result = osl_cond_result_ok #2 0x00007f04f01249d4 in wait (pTimeout=0x0, this=0x7f04dd16bbe0) at /usr/src/debug/libreoffice-4.1.0.4/include/osl/conditn.hxx:75 No locals. #3 GrammarCheckingIterator::DequeueAndCheck (this=0x7f04dd16ba88) at /usr/src/debug/libreoffice-4.1.0.4/linguistic/source/gciterator.cxx:626 bQueueEmpty = <optimized out> aLangPortions = {_pSequence = 0x7f05086c53a4 <cppu::g_emptySeq>, static s_pType = 0x0} aLangPortionsLocale = {_pSequence = 0x7f05086c53a4 <cppu::g_emptySeq>, static s_pType = 0x1ddb0a0} #4 0x00007f0508d01fd7 in osl_thread_start_Impl (pData=0x1f687e0) at /usr/src/debug/libreoffice-4.1.0.4/sal/osl/unx/thread.c:251 terminate = <optimized out> pImpl = 0x1f687e0 #5 0x00000032e3407c53 in start_thread (arg=0x7f04d71a1700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f04d71a1700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139658765408000, -2218105766682593621, 0, 139658765408704, 139658765408000, 32933888, 2251266253033535147, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #6 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 4 (Thread 0x7f04f11e2700 (LWP 2294)): #0 0x00000032e2ceab6d in poll () at ../sysdeps/unix/syscall-template.S:81 No locals. #1 0x00007f04fb631f95 in poll (__timeout=1000, __nfds=1, __fds=0x7f04f11e1c20) at /usr/include/bits/poll2.h:46 No locals. #2 x11::SelectionManager::dispatchEvent (this=this@entry=0x7f04f359ec08, millisec=millisec@entry=1000) at /usr/src/debug/libreoffice-4.1.0.4/vcl/unx/generic/dtrans/X11_selection.cxx:3721 aPollFD = {fd = 37, events = 1, revents = 0} aGuard = {<osl::ClearableGuard<osl::Mutex>> = {pT = 0x0}, pResetT = 0x7f04f359efa0} #3 0x00007f04fb6320ee in x11::SelectionManager::run (pThis=0x7f04f359ec08) at /usr/src/debug/libreoffice-4.1.0.4/vcl/unx/generic/dtrans/X11_selection.cxx:3755 aNow = {tv_sec = 1376303177, tv_usec = 597896} This = 0x7f04f359ec08 aLast = {tv_sec = 1376303177, tv_usec = 597896} xContext = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04fbf5ae98}, <No data fields>} #4 0x00007f0508d01fd7 in osl_thread_start_Impl (pData=0x1d178c0) at /usr/src/debug/libreoffice-4.1.0.4/sal/osl/unx/thread.c:251 terminate = <optimized out> pImpl = 0x1d178c0 #5 0x00000032e3407c53 in start_thread (arg=0x7f04f11e2700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f04f11e2700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139659201881856, -2218105766682593621, 0, 139659201882560, 139659201881856, 23, 2251332188834592427, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #6 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 3 (Thread 0x7f04fa269700 (LWP 2266)): #0 0x00000032e2ceab6d in poll () at ../sysdeps/unix/syscall-template.S:81 No locals. #1 0x00000038afe480f4 in g_main_context_poll (priority=2147483647, n_fds=3, fds=0x7f04f40010e0, timeout=-1, context=0x18070c0) at gmain.c:3995 poll_func = 0x38afe56d50 <g_poll> #2 g_main_context_iterate (context=0x18070c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3696 max_priority = 2147483647 timeout = -1 some_ready = <optimized out> nfds = 3 allocated_nfds = 3 fds = 0x7f04f40010e0 #3 0x00000038afe4855a in g_main_loop_run (loop=0x1807050) at gmain.c:3895 __PRETTY_FUNCTION__ = "g_main_loop_run" #4 0x00000038b0ec6d66 in gdbus_shared_thread_func (user_data=0x1807090) at gdbusprivate.c:278 data = 0x1807090 #5 0x00000038afe6c185 in g_thread_proxy (data=0x1801cf0) at gthread.c:798 thread = 0x1801cf0 #6 0x00000032e3407c53 in start_thread (arg=0x7f04fa269700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f04fa269700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139659353429760, -2218105766682593621, 0, 139659353430464, 139659353429760, 23, 2251308073130096299, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #7 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 2 (Thread 0x7f0502cab700 (LWP 2249)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 No locals. #1 0x00007f0508d086e8 in rtl_cache_wsupdate_wait (seconds=10) at /usr/src/debug/libreoffice-4.1.0.4/sal/rtl/alloc_cache.cxx:1376 now = {tv_sec = 1376303171, tv_usec = 258268} wakeup = {tv_sec = 1376303181, tv_nsec = 258268000} #2 rtl_cache_wsupdate_all (arg=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/sal/rtl/alloc_cache.cxx:1516 No locals. #3 0x00000032e3407c53 in start_thread (arg=0x7f0502cab700) at pthread_create.c:308 __res = <optimized out> pd = 0x7f0502cab700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139659498403584, -2218105766682593621, 0, 139659498404288, 139659498403584, 0, 2251150122486560427, -2210579061043267925}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #4 0x00000032e2cf513d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 No locals. Thread 1 (Thread 0x7f0502cbd840 (LWP 2247)): #0 0x00000032e2c35a19 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = 0 pid = 2247 selftid = 2247 #1 0x00000032e2c37128 in __GI_abort () at abort.c:90 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x4d908e8, sa_sigaction = 0x4d908e8}, sa_mask = {__val = {0, 33469760, 218544269478, 214748364805, 0, 45, 218552626432, 83207296, 33469760, 139659183564992, 218544296661, 45, 218553543149, 218556512800, 45, 0}}, sa_flags = -486819296, sa_restorer = 0x32e6cbec10} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00000032e6c60545 in __gnu_cxx::__verbose_terminate_handler () at ../../../../libstdc++-v3/libsupc++/vterminate.cc:95 terminating = true t = <optimized out> #3 0x00000032e6c5e6a6 in __cxxabiv1::__terminate (handler=<optimized out>) at ../../../../libstdc++-v3/libsupc++/eh_terminate.cc:38 No locals. #4 0x00000032e6c5e6d3 in std::terminate () at ../../../../libstdc++-v3/libsupc++/eh_terminate.cc:48 No locals. #5 0x00000032e6c5f1bf in __cxxabiv1::__cxa_pure_virtual () at ../../../../libstdc++-v3/libsupc++/pure.cc:50 No locals. #6 0x00007f04e76ccefb in SwHistoryBookmark::SetInDoc (this=0x4f5a480, pDoc=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/core/undo/rolbck.cxx:644 undoGuard = {m_rUndoRedo = @0x1feb540, m_bUndoWasEnabled = false} pMarkAccess = 0x1fe93a0 pPam = {_M_ptr = 0x7f04f006a8c0} pMark = 0x4d908e8 rNds = @0x1fe5f20: {<BigPtrArray> = BigPtrArray of length 666 = { [ 0] 0x7f04df1eb7b8 StartNode , [ 1] 0x7f04df1cd0e8 EndNode , [ 2] 0x7f04df1eb7e8 StartNode , [ 3] 0x7f04df1eb998 StartNode , [ 4] 0x7f04dc0e42e8 TextNode {pData = 0x7f04dc1178d8}, [ 5] 0x7f04df1cd228 EndNode , [ 6] 0x7f04df1eb9c8 StartNode , [ 7] 0x7f04dc0e4668 TextNode {pData = 0x7f04dd15eba0}, [ 8] 0x7f04df1cd248 EndNode , [ 9] 0x7f04d4bdd820 StartNode , [ 10] 0x7f04c63bad58 TextNode {pData = 0x7f04dd88c878}, [ 11] 0x7f04dc008c80 EndNode , [ 12] 0x7f04df1cd108 EndNode , [ 13] 0x7f04df1eb818 StartNode , [ 14] 0x7f04df1cd128 EndNode , [ 15] 0x7f04df1eb848 StartNode , [ 16] 0x7f04df1cd148 EndNode , [ 17] 0x7f04df1eb878 StartNode , [ 18] 0x7f04df1c3f20 TextNode {pData = 0x7f04dc0e3038}, [ 19] 0x7f04dc0e4048 TextNode {pData = 0x7f04cd894638}, [ 20] 0x7f04dc0e4128 TextNode {pData = 0x7f04fbf5d608}, [ 21] 0x7f04dc0e4208 TextNode {pData = 0x7f04fbf3e208}, [ 22] 0x7f04dc0e43c8 TextNode {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, [ 23] 0x7f04dc0249e8 TextNode {pData = 0x7f04c4146aa8}, [ 24] 0x7f04dc0e44a8 TextNode {pData = 0x7f04b49e2008}, [ 25] 0x7f04dc0e4588 TextNode {pData = 0x7f04fbf3e708}, [ 26] 0x7f04dc0e4748 TextNode {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, [ 27] 0x7f04dc0e4828 TextNode {pData = 0x7f04fbf5dc08}, [ 28] 0x7f04dc0e4908 TextNode {pData = 0x7f04dd157560}, [ 29] 0x7f04d419fe48 TextNode {pData = 0x7f04fa788608}, [ 30] 0x7f04dc024128 TextNode {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, [ 31] 0x7f04dc024208 TextNode {pData = 0x7f04c4146e28}, [ 32] 0x7f04b465c588 TextNode {pData = 0x7f04dc0f6498}, [ 33] 0x7f04dc0e4ac8 TextNode {pData = 0x7f04b4a869c8}, [ 34] 0x7f04d4bc9818 TextNode {pData = 0x7f04cd7d2f18}, [ 35] 0x7f04d4bc98f8 TextNode {pData = 0x7f04b49b6d20}, [ 36] 0x7f04b49e9908 TextNode {pData = 0x7f04b4a03018}, [ 37] 0x7f04c63bac78 TextNode {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, [ 38] 0x7f04dc0e4c88 TextNode {pData = 0x7f04dc0e56b0}, [ 39] 0x2087280 TableNode , [ 40] 0x7f04df1eb9f8 StartNode , [ 41] 0x7f04dc0e4e48 TextNode {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, [ 42] 0x7f04df1cd288 EndNode , [ 43] 0x7f04df1eba28 StartNode , [ 44] 0x7f04dc0e4f28 TextNode {pData = 0x7f04dc0e38d0}, [ 45] 0x7f04df1cd2a8 EndNode , [ 46] 0x7f04df1eba58 StartNode , [ 47] 0x7f04dc0e8038 TextNode {pData = 0x7f04dc0e38f8}, [ 48] 0x7f04df1cd2c8 EndNode , [ 49] 0x7f04df1eba88 StartNode , [ 50] 0x7f04dc0e8118 TextNode {pData = 0x7f04dc0e3920}, [ 51] 0x7f04df1cd2e8 EndNode , [ 52] 0x7f04df1ebab8 StartNode , [ 53] 0x7f04dc0e81f8 TextNode {pData = 0x7f04dc0e3948}, [ 54] 0x7f04df1cd308 EndNode , [ 55] 0x7f04df1ebae8 StartNode , [ 56] 0x7f04dc0e82d8 TextNode {pData = 0x7f04dc0e3970}, [ 57] 0x7f04df1cd328 EndNode , [ 58] 0x7f04df1ebb18 StartNode , [ 59] 0x7f04dc0e83b8 TextNode {pData = 0x7f04dc0e3998}, [ 60] 0x7f04df1cd348 EndNode , [ 61] 0x7f04df1ebb48 StartNode , [ 62] 0x7f04dc0e8498 TextNode {pData = 0x7f04dc0ed348}, [ 63] 0x7f04df1cd368 EndNode , [ 64] 0x7f04df1ebb78 StartNode , [ 65] 0x7f04dc0e8578 TextNode {pData = 0x7f04c642ec48}, [ 66] 0x7f04df1cd388 EndNode , [ 67] 0x7f04df1ebba8 StartNode , [ 68] 0x7f04dc0e8658 TextNode {pData = 0x7f04b4a86a08}, [ 69] 0x7f04df1cd3a8 EndNode , [ 70] 0x7f04df1ebbd8 StartNode , [ 71] 0x7f04dc0e8738 TextNode {pData = 0x7f04b4a86088}, [ 72] 0x7f04df1cd3c8 EndNode , [ 73] 0x7f04df1ebc08 StartNode , [ 74] 0x7f04dc0e8818 TextNode {pData = 0x7f04b4a82218}, [ 75] 0x7f04df1cd3e8 EndNode , [ 76] 0x7f04df1ebc38 StartNode , [ 77] 0x7f04dc0e88f8 TextNode {pData = 0x7f04b4a386d0}, [ 78] 0x7f04df1cd408 EndNode , [ 79] 0x7f04df1ebc68 StartNode , [ 80] 0x7f04dc0e89d8 TextNode {pData = 0x7f04b4a38a10}, [ 81] 0x7f04df1cd428 EndNode , [ 82] 0x7f04df1ebc98 StartNode , [ 83] 0x7f04dc0e8ab8 TextNode {pData = 0x7f04dc0ed360}, [ 84] 0x7f04df1cd448 EndNode , [ 85] 0x7f04df1ebcc8 StartNode , [ 86] 0x7f04dc0e8b98 TextNode {pData = 0x7f04b4a6e698}, [ 87] 0x7f04df1cd468 EndNode , [ 88] 0x7f04df1ebcf8 StartNode , [ 89] 0x7f04dc0e8c78 TextNode {pData = 0x7f04b4a9a208}, [ 90] 0x7f04df1cd488 EndNode , [ 91] 0x7f04df1ebd28 StartNode , [ 92] 0x7f04dc0e8d58 TextNode {pData = 0x7f04c64255d0}, [ 93] 0x7f04df1cd4a8 EndNode , [ 94] 0x7f04df1ebd58 StartNode , [ 95] 0x7f04dc0e8e38 TextNode {pData = 0x7f04c64256d0}, [ 96] 0x7f04df1cd4c8 EndNode , [ 97] 0x7f04df1ebd88 StartNode , [ 98] 0x7f04dc0e8f18 TextNode {pData = 0x7f04b4a8b950}, [ 99] 0x7f04df1cd4e8 EndNode , [ 100] 0x7f04df1ebdb8 StartNode , [ 101] 0x7f04dc02c040 TextNode {pData = 0x7f04b4a9fa98}, [ 102] 0x7f04df1cd508 EndNode , [ 103] 0x7f04df1ebde8 StartNode , [ 104] 0x7f04dc02c120 TextNode {pData = 0x7f04dc0ed3a8}, [ 105] 0x7f04df1cd528 EndNode , [ 106] 0x7f04df1ebe18 StartNode , [ 107] 0x7f04dc02c200 TextNode {pData = 0x7f04b4a9a548}, [ 108] 0x7f04df1cd548 EndNode , [ 109] 0x7f04df1ebe48 StartNode , [ 110] 0x7f04dc02c2e0 TextNode {pData = 0x7f04b4a6ead8}, [ 111] 0x7f04df1cd568 EndNode , [ 112] 0x7f04df1ebe78 StartNode , [ 113] 0x7f04dc02c3c0 TextNode {pData = 0x7f04b4a6e998}, [ 114] 0x7f04df1cd588 EndNode , [ 115] 0x7f04df1ebea8 StartNode , [ 116] 0x7f04dc02c4a0 TextNode {pData = 0x7f04b4a6e4d8}, [ 117] 0x7f04df1cd5a8 EndNode , [ 118] 0x7f04df1ebed8 StartNode , [ 119] 0x7f04dc02c580 TextNode {pData = 0x7f04b4a86008}, [ 120] 0x7f04df1cd5c8 EndNode , [ 121] 0x7f04df1ebf08 StartNode , [ 122] 0x7f04dc02c660 TextNode {pData = 0x7f04b4a82858}, [ 123] 0x7f04df1cd5e8 EndNode , [ 124] 0x7f04df1ebf38 StartNode , [ 125] 0x7f04dc02c740 TextNode {pData = 0x7f04dc0ed2e8}, [ 126] 0x7f04df1cd608 EndNode , [ 127] 0x7f04df1ebf68 StartNode , [ 128] 0x7f04dc02c820 TextNode {pData = 0x7f04b4a86d88}, [ 129] 0x7f04df1cd628 EndNode , [ 130] 0x7f04df1ebf98 StartNode , [ 131] 0x7f04dc02c900 TextNode {pData = 0x7f04b4a86c88}, [ 132] 0x7f04df1cd648 EndNode , [ 133] 0x7f04dc02e010 StartNode , [ 134] 0x7f04dc02c9e0 TextNode {pData = 0x7f04b4a38510}, [ 135] 0x7f04df1cd668 EndNode , [ 136] 0x7f04dc02e040 StartNode , [ 137] 0x7f04dc02cac0 TextNode {pData = 0x7f04b4a9fad8}, [ 138] 0x7f04df1cd688 EndNode , [ 139] 0x7f04dc02e070 StartNode , [ 140] 0x7f04dc02cba0 TextNode {pData = 0x7f04b4a82818}, [ 141] 0x7f04df1cd6a8 EndNode , [ 142] 0x7f04dc02e0a0 StartNode , [ 143] 0x7f04dc02cc80 TextNode {pData = 0x7f04b4a82198}, [ 144] 0x7f04df1cd6c8 EndNode , [ 145] 0x7f04dc02e0d0 StartNode , [ 146] 0x7f04dc02cd60 TextNode {pData = 0x7f04dc0ed270}, [ 147] 0x7f04df1cd6e8 EndNode , [ 148] 0x7f04dc02e100 StartNode , [ 149] 0x7f04dc02ce40 TextNode {pData = 0x7f04b4a385d0}, [ 150] 0x7f04df1cd708 EndNode , [ 151] 0x7f04dc02e130 StartNode , [ 152] 0x7f04dc02cf20 TextNode {pData = 0x7f04b4a9fdd8}, [ 153] 0x7f04df1cd728 EndNode , [ 154] 0x7f04dc02e160 StartNode , [ 155] 0x7f04dc02f048 TextNode {pData = 0x7f04b4a38550}, [ 156] 0x7f04df1cd748 EndNode , [ 157] 0x7f04dc02e190 StartNode , [ 158] 0x7f04dc02f128 TextNode {pData = 0x7f04d4dc0248}, [ 159] 0x7f04df1cd768 EndNode , [ 160] 0x7f04dc02e1c0 StartNode , [ 161] 0x7f04dc02f208 TextNode {pData = 0x7f04b4a384d0}, [ 162] 0x7f04df1cd788 EndNode , [ 163] 0x7f04dc02e1f0 StartNode , [ 164] 0x7f04dc02f2e8 TextNode {pData = 0x7f04b4a38090}, [ 165] 0x7f04df1cd7a8 EndNode , [ 166] 0x7f04dc02e220 StartNode , [ 167] 0x7f04dc02f3c8 TextNode {pData = 0x7f04dc02d228}, [ 168] 0x7f04df1cd7c8 EndNode , [ 169] 0x7f04dc02e250 StartNode , [ 170] 0x7f04dc02f4a8 TextNode {pData = 0x7f04b4a82e18}, [ 171] 0x7f04df1cd7e8 EndNode , [ 172] 0x7f04dc02e280 StartNode , [ 173] 0x7f04dc02f588 TextNode {pData = 0x7f04b4a6eb58}, [ 174] 0x7f04df1cd808 EndNode , [ 175] 0x7f04dc02e2b0 StartNode , [ 176] 0x7f04dc02f668 TextNode {pData = 0x7f04b4a6eb98}, [ 177] 0x7f04df1cd828 EndNode , [ 178] 0x7f04dc02e2e0 StartNode , [ 179] 0x7f04dc02f748 TextNode {pData = 0x7f04b4a86508}, [ 180] 0x7f04df1cd848 EndNode , [ 181] 0x7f04dc02e310 StartNode , [ 182] 0x7f04dc02f828 TextNode {pData = 0x7f04b4a82658}, [ 183] 0x7f04df1cd868 EndNode , [ 184] 0x7f04dc02e340 StartNode , [ 185] 0x7f04dc02f908 TextNode {pData = 0x7f04b4a6ef18}, [ 186] 0x7f04df1cd888 EndNode , [ 187] 0x7f04dc02e370 StartNode , [ 188] 0x7f04dc02f9e8 TextNode {pData = 0x7f04dc02d308}, [ 189] 0x7f04df1cd8a8 EndNode , [ 190] 0x7f04dc02e3a0 StartNode , [ 191] 0x7f04dc02fac8 TextNode {pData = 0x7f04c642e248}, [ 192] 0x7f04df1cd8c8 EndNode , [ 193] 0x7f04dc02e3d0 StartNode , [ 194] 0x7f04dc02fba8 TextNode {pData = 0x7f04b4a16098}, [ 195] 0x7f04df1cd8e8 EndNode , [ 196] 0x7f04dc02e400 StartNode , [ 197] 0x7f04dc02fc88 TextNode {pData = 0x7f04b4a38b50}, [ 198] 0x7f04df1cd908 EndNode , [ 199] 0x7f04dc02e430 StartNode ...}, <boost::noncopyable_::noncopyable> = {<No data fields>}, pRoot = 0x7f04f006a370, pMyDoc = 0x1fe60c0, pEndOfPostIts = 0x7f04df1cd0e8, pEndOfInserts = 0x7f04df1cd108, pEndOfAutotext = 0x7f04df1cd128, pEndOfRedlines = 0x7f04df1cd148, pEndOfContent = 0x7f04df1cd168, pOutlineNds = 0x1fe8550, bInNodesDel = 0 '\000', bInDelUpdOutl = 0 '\000', bInDelUpdNum = 0 '\000'} #7 0x00007f04e76cda2c in SwHistory::Rollback (this=this@entry=0x4544f10, pDoc=pDoc@entry=0x1fe60c0, nStart=nStart@entry=0) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/core/undo/rolbck.cxx:1130 pHHt = 0x4f5a480 i = 0 #8 0x00007f04e76d75ad in SwUndoDelete::UndoImpl (this=0x7f04a67bc450, rContext=...) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/core/undo/undel.cxx:907 aHstr = {m_SwpHstry = {<std::vector<SwHistoryHint*, std::allocator<SwHistoryHint*> >> = std::vector of length 19, capacity 19 = {0x53e1080, 0x26e68f0, 0x3a8c9c0, 0x4a6e610, 0x6ce7490, 0x22f67a0, 0x9ae3810, 0x3e007f0, 0x61def30, 0x548b5c0, 0x3b8b490, 0x56ad6a0, 0x24f37f0, 0x34dbbc0, 0x4ccc1c0, 0x203e710, 0x3e61920, 0x1fe0170, 0x56e1960}, <No data fields>}, m_nEndDiff = 0} aPos = SwPosition (node 648, offset 148) bNodeMove = <optimized out> pMovedNode = <optimized out> nCalcStt = <optimized out> aIdx = SwNodeIndex (node 651) pInsNd = 0x0 #9 0x00007f04e76d821d in SwUndo::UndoWithContext (this=0x7f04a67bc450, rContext=...) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/core/undo/undobj.cxx:230 pContext = 0x7fff299807f0 #10 0x00007f05071fe0f3 in SfxUndoManager::ImplUndo (this=0x1feb548, i_contextOrNull=0x7fff299807f0) at /usr/src/debug/libreoffice-4.1.0.4/svl/source/undo/undo.cxx:794 aGuard = {m_rManagerData = @0x1feb590, m_aGuard = {<osl::ClearableGuard<osl::Mutex>> = {pT = 0x0}, pResetT = 0x1feb590}, m_aUndoActionsCleanup = empty std::list, m_notifiers = empty std::list} aDoingGuard = {<comphelper::ScopeGuard> = {<boost::noncopyable_::noncopyable> = {<No data fields>}, m_func = {<boost::function_base> = {vtable = 0x7f0507432cc1 <void boost::function0<void>::assign_to<boost::_bi::bind_t<void, void (*)(bool&), boost::_bi::list1<boost::reference_wrapper<bool> > > >(boost::_bi::bind_t<void, void (*)(bool&), boost::_bi::list1<boost::reference_wrapper<bool> > >)::stored_vtable+1>, functor = {obj_ptr = 0x7f05071ffdd0 <comphelper::FlagGuard::ResetFlag(bool&)>, type = {type = 0x7f05071ffdd0 <comphelper::FlagGuard::ResetFlag(bool&)>, const_qualified = 185, volatile_qualified = 181}, func_ptr = 0x7f05071ffdd0 <comphelper::FlagGuard::ResetFlag(bool&)>, bound_memfunc_ptr = {memfunc_ptr = (void (boost::detail::function::X::*)(boost::detail::function::X * const, int)) 0x7f05071ffdd0 <comphelper::FlagGuard::ResetFlag(bool&)>, this adjustment 33469881, obj_ptr = 0x7f04d4bc6c38}, obj_ref = {obj_ptr = 0x7f05071ffdd0 <comphelper::FlagGuard::ResetFlag(bool&)>, is_const_qualified = 185, is_volatile_qualified = 181}, data = -48 '\320'}}, static args = <optimized out>, static arity = <optimized out>}, m_excHandling = comphelper::ScopeGuard::IGNORE_EXCEPTIONS}, <No data fields>} sActionComment = "Supprimer Paragraphes" aLockGuard = {m_manager = @0x1feb548} pAction = 0x7f04a67bc450 #11 0x00007f05071fe2f5 in SfxUndoManager::UndoWithContext (this=<optimized out>, i_context=...) at /usr/src/debug/libreoffice-4.1.0.4/svl/source/undo/undo.cxx:761 No locals. #12 0x00007f04e76cbad5 in sw::UndoManager::impl_DoUndoRedo (this=0x1feb540, undoOrRedo=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/core/undo/docundo.cxx:476 c = {m_pDoc = 0x1fe60c0} pEditShell = 0x205d8e0 bSaveCursors = <optimized out> context = {<SfxUndoContext> = {_vptr.SfxUndoContext = 0x7f04e7f31e50 <vtable for sw::UndoRedoContext+16>}, m_rDoc = @0x1fe60c0, m_rCursorSupplier = @0x205da60, m_pSelFmt = 0x0, m_pMarkList = 0x0} bRet = false #13 0x00007f04e7501e9e in SwEditShell::Undo (this=this@entry=0x205d8e0, nCount=nCount@entry=1) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/core/edit/edundo.cxx:134 i = 0 nLastUndoId = REPEAT_START bRestoreCrsr = false aCurr = {pPrev = 0x205d8e0, pRoot = 0x205df70} bRet = false #14 0x00007f04e7af543e in SwWrtShell::Do (this=this@entry=0x205d8e0, eDoType=SwWrtShell::UNDO, nCnt=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/ui/wrtsh/wrtundo.cxx:47 bSaveDoesUndo = 1 '\001' bCreateXSelection = <optimized out> bFrmSelected = <optimized out> #15 0x00007f04e79d86b7 in SwBaseShell::ExecUndo (this=<optimized out>, rReq=...) at /usr/src/debug/libreoffice-4.1.0.4/sw/source/ui/shells/basesh.cxx:475 pItem = 0x1fe0a50 nCnt = 1 #16 0x00007f050783ec78 in SfxShell::CallExec (this=0x56500d0, pFunc=0x7f04e79d8750 <SfxStubSwBaseShellExecUndo(SfxShell*, SfxRequest&)>, rReq=...) at /usr/src/debug/libreoffice-4.1.0.4/include/sfx2/shell.hxx:185 No locals. #17 0x00007f050783861e in SfxDispatcher::Call_Impl (this=0x207d620, rShell=..., rSlot=..., rReq=..., bRecord=1 '\001') at /usr/src/debug/libreoffice-4.1.0.4/sfx2/source/control/dispatch.cxx:243 bThisDispatcherAlive = 1 '\001' pOldInCallAliveFlag = 0x0 pFunc = 0x7f04e79d8750 <SfxStubSwBaseShellExecUndo(SfxShell*, SfxRequest&)> bAutoUpdate = 0 '\000' #18 0x00007f050783a1f0 in SfxDispatcher::_Execute (this=0x207d620, rShell=..., rSlot=..., rReq=..., eCallMode=4) at /usr/src/debug/libreoffice-4.1.0.4/sfx2/source/control/dispatch.cxx:924 No locals. #19 0x00007f05075f86fd in SfxBindings::Execute_Impl (this=0x1fe0a50, aReq=..., pSlot=pSlot@entry=0x7f04e7fc60b8 <aSwBaseShellSlots_Impl+1560>, pShell=pShell@entry=0x56500d0) at /usr/src/debug/libreoffice-4.1.0.4/sfx2/source/control/bindings.cxx:1293 No locals. #20 0x00007f050762c73a in SfxDispatchController_Impl::dispatch (this=0x3a776b0, aURL=..., aArgs=..., rListener=...) at /usr/src/debug/libreoffice-4.1.0.4/sfx2/source/control/unoctitm.cxx:736 aReq = {<SfxHint> = {_vptr.SfxHint = 0x7f0507b097d0 <vtable for SfxRequest+16>}, nSlot = 5701, pArgs = 0x0, pImp = 0x5460760} xSet = {px = 0x0} pSlot = 0x7f04e7fc60b8 <aSwBaseShellSlots_Impl+1560> aURLObj = {m_aAbsURIRef = {pData = 0x7f04b4a9d290, nCapacity = 9}, m_aScheme = {m_nBegin = 0, m_nLength = 4}, m_aUser = {m_nBegin = -1, m_nLength = 0}, m_aAuth = {m_nBegin = -1, m_nLength = 0}, m_aHost = {m_nBegin = -1, m_nLength = 0}, m_aPort = {m_nBegin = -1, m_nLength = 0}, m_aPath = {m_nBegin = 5, m_nLength = 4}, m_aQuery = {m_nBegin = -1, m_nLength = 0}, m_aFragment = {m_nBegin = -1, m_nLength = 0}, m_eScheme = INET_PROT_UNO, m_eSmartScheme = INET_PROT_HTTP} nModifier = <optimized out> nAddArgs = <optimized out> aInternalSet = {<SfxItemSet> = {_vptr.SfxItemSet = 0x7f050742e810 <vtable for SfxAllItemSet+16>, _pPool = 0x176bef0, _pParent = 0x0, _aItems = 0x61b3e90, _pWhichRanges = 0x5468ac0, _nCount = 1}, aDefault = {<SfxPoolItem> = {_vptr.SfxPoolItem = 0x7f050742ebf0 <vtable for SfxVoidItem+16>, m_nRefCount = 0, m_nWhich = 0, m_nKind = 0}, <No data fields>}, nFree = 8} pShell = 0x56500d0 lNewArgs = {_pSequence = 0x7f05086c53a4 <cppu::g_emptySeq>, static s_pType = 0x17700a0} bTemp = <optimized out> aAddArgs = std::vector of length 0, capacity 0 xFrameRef = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04dd157b88}, <No data fields>} bSuccess = 0 '\000' pItem = 0x0 nCall = <optimized out> nMarkArg = <optimized out> eMapUnit = SFX_MAPUNIT_TWIP aGuard = {m_solarMutex = @0xe778e0} #21 0x00007f050762dc42 in SfxOfficeDispatch::dispatch (this=0x7f04cd957188, aURL=..., aArgs=...) at /usr/src/debug/libreoffice-4.1.0.4/sfx2/source/control/unoctitm.cxx:369 layer = {m_aEnvTypeName = {pData = 0x7f04b4a17af8}, m_xPreviousContext = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x1910b60}, <No data fields>}} #22 0x00007f0506da9107 in svt::AsyncAccelExec::impl_ts_asyncCallback (this=0x3bad7a0) at /usr/src/debug/libreoffice-4.1.0.4/svtools/source/misc/acceleratorexecute.cxx:472 No locals. #23 0x00007f050591a67a in Call (pCaller=<optimized out>, this=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/include/tools/link.hxx:123 No locals. #24 DoEvent_Impl (pEvent=<optimized out>, this=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/helper/evntpost.cxx:47 No locals. #25 vcl::EventPoster::LinkStubDoEvent_Impl (pThis=<optimized out>, pCaller=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/helper/evntpost.cxx:50 No locals. #26 0x00007f05059c628a in Call (pCaller=<optimized out>, this=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/include/tools/link.hxx:123 No locals. #27 ImplHandleUserEvent (pSVEvent=0x6e5ee80) at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/window/winproc.cxx:1986 No locals. #28 ImplWindowFrameProc (pWindow=<optimized out>, nEvent=<optimized out>, pEvent=0x6e5ee80) at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/window/winproc.cxx:2601 nRet = 0 #29 0x00007f05059cc938 in CallCallback (pEvent=0x6e5ee80, nEvent=22, this=0x1770b30) at /usr/src/debug/libreoffice-4.1.0.4/vcl/inc/salframe.hxx:243 No locals. #30 SalGenericDisplay::DispatchInternalEvent (this=0xefb480) at /usr/src/debug/libreoffice-4.1.0.4/vcl/generic/app/gendisp.cxx:91 pData = 0x6e5ee80 pFrame = 0x1770b30 nEvent = 22 #31 0x00007f04fbabfe4f in GtkData::userEventFn (data=data@entry=0xe77a10) at /usr/src/debug/libreoffice-4.1.0.4/vcl/unx/gtk/app/gtkdata.cxx:935 bContinue = 1 aGuard = {pT = 0xe778e0} pThis = 0xe77a10 pData = <optimized out> #32 0x00007f04fbabfec1 in call_userEventFn (data=0xe77a10) at /usr/src/debug/libreoffice-4.1.0.4/vcl/unx/gtk/app/gtkdata.cxx:945 No locals. #33 0x00000038afe47e06 in g_main_dispatch (context=0xea4cd0) at gmain.c:3054 dispatch = 0x38afe44e60 <g_idle_dispatch> was_in_call = 0 user_data = 0xe77a10 callback = 0x7f04fbabfea0 <call_userEventFn(void*)> cb_funcs = 0x38b012a900 <g_source_callback_funcs> cb_data = 0x3c5d080 need_destroy = <optimized out> current_source_link = {data = 0x4f12870, next = 0x0} source = 0x4f12870 current = 0xf1a7c0 i = 0 #34 g_main_context_dispatch (context=context@entry=0xea4cd0) at gmain.c:3630 No locals. #35 0x00000038afe48158 in g_main_context_iterate (context=context@entry=0xea4cd0, block=block@entry=0, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3701 max_priority = -100 timeout = 0 some_ready = 1 nfds = <optimized out> allocated_nfds = 4 fds = 0x20429d0 #36 0x00000038afe481fc in g_main_context_iteration (context=0xea4cd0, may_block=0) at gmain.c:3762 retval = <optimized out> #37 0x00007f04fbabfbd9 in GtkData::Yield (this=0xe77a10, bWait=<optimized out>, bHandleAllCurrentEvents=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/vcl/unx/gtk/app/gtkdata.cxx:574 nMaxEvents = 0 wasOneEvent = 1 aReleaser = {m_nYieldCount = 1} bDispatchThread = true bWasEvent = false #38 0x00007f05056f8e34 in ImplYield (i_bAllEvents=false, i_bWait=true) at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/app/svapp.cxx:422 pSVData = 0x7f0505d46de0 <rtl::Static<ImplSVData, (anonymous namespace)::private_aImplSVData>::get()::instance> #39 Application::Yield (i_bAllEvents=i_bAllEvents@entry=false) at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/app/svapp.cxx:456 No locals. #40 0x00007f05056f8ed7 in Application::Execute () at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/app/svapp.cxx:401 pSVData = 0x7f0505d46de0 <rtl::Static<ImplSVData, (anonymous namespace)::private_aImplSVData>::get()::instance> #41 0x00007f0508a96d9c in desktop::Desktop::Main (this=0x7fff299815e0) at /usr/src/debug/libreoffice-4.1.0.4/desktop/source/app/app.cxx:1720 layer2 = {m_aEnvTypeName = {pData = 0x7f04f1f18588}, m_xPreviousContext = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04fa6530f0}, <No data fields>}} bTerminateRequested = 0 '\000' nAcquireCount = <optimized out> aConfigErrHandler = {m_pContext = 0x0, m_xHandler = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x0}, <No data fields>}} xRestartManager = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04fa654698}, <No data fields>} layer = {m_aEnvTypeName = {pData = 0x7f04fa64b6a8}, m_xPreviousContext = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04fbf681b0}, <No data fields>}} xContext = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04fbf5ae98}, <No data fields>} aOptions = {<utl::detail::Options> = {<utl::ConfigurationBroadcaster> = {_vptr.ConfigurationBroadcaster = 0x7f05070f9230 <vtable for SvtAccessibilityOptions+16>, mpList = 0x0, m_nBroadcastBlocked = 0, m_nBlockedHint = 0}, <utl::ConfigurationListener> = {_vptr.ConfigurationListener = 0x7f05070f9268 <vtable for SvtAccessibilityOptions+72>}, <No data fields>}, <SfxListener> = {_vptr.SfxListener = 0x7f05070f9290 <vtable for SvtAccessibilityOptions+112>, aBCs = std::deque with 0 elements}, static sm_pSingleImplConfig = 0x1846ef0, static sm_nAccessibilityRefCount = 17} aUnknown = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>} inst_fin = <optimized out> xDesktop = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x0}, <No data fields>} aAppearanceCfg = {<utl::ConfigItem> = {<utl::ConfigurationBroadcaster> = {_vptr.ConfigurationBroadcaster = 0x7f05070f92f0 <vtable for SvtTabAppearanceCfg+16>, mpList = 0x0, m_nBroadcastBlocked = 0, m_nBlockedHint = 0}, sSubTree = {pData = 0x7f04f353ff68}, m_xHierarchyAccess = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x7f04fa5d7f58}, <No data fields>}, xChangeLstnr = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x0}, <No data fields>}, pImpl = 0x1846e20}, nDragMode = 2, nScaleFactor = 100, nSnapMode = 2, nMiddleMouse = 2, nAAMinPixelHeight = 8, bMenuMouseFollow = 1 '\001', bFontAntialiasing = 1 '\001', static bInitialized = 1 '\001'} #42 0x00007f0505700c51 in ImplSVMain () at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/app/svmain.cxx:162 pSVData = 0x7f0505d46de0 <rtl::Static<ImplSVData, (anonymous namespace)::private_aImplSVData>::get()::instance> nReturn = 1 bInit = <optimized out> #43 0x00007f0505700c72 in SVMain () at /usr/src/debug/libreoffice-4.1.0.4/vcl/source/app/svmain.cxx:198 nRet = 32517 #44 0x00007f0508abe655 in soffice_main () at /usr/src/debug/libreoffice-4.1.0.4/desktop/source/app/sofficemain.cxx:82 aDesktop = {<Application> = {_vptr.Application = 0x7f0508ce6950 <vtable for desktop::Desktop+16>}, m_rSplashScreen = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x0}, <No data fields>}, m_bCleanedExtensionCache = false, m_bServicesRegistered = true, m_aBootstrapError = desktop::Desktop::BE_OK, m_aBootstrapErrorMessage = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, m_aBootstrapStatus = desktop::Desktop::BS_OK, m_xLockfile = {px = 0x175d650}, m_firstRunTimer = {_vptr.Timer = 0x7f0505d24070 <vtable for Timer+16>, mpTimerData = 0x0, mnTimeout = 1, mbActive = 0 '\000', mbAuto = 0 '\000', maTimeoutHdl = {pInst = 0x0, pFunc = 0x0}}, static pResMgr = 0x0} rCmdLineArgs = @0x7f0508ce8f60: {<boost::noncopyable_::noncopyable> = {<No data fields>}, m_cwdUrl = {<boost::optional_detail::optional_base<rtl::OUString>> = {<boost::optional_detail::optional_tag> = {<No data fields>}, m_initialized = true, m_storage = {dummy_ = {data = "\310q\366\373\004\177\000", aligner_ = {<No data fields>}}}}, <No data fields>}, m_minimized = false, m_invisible = false, m_norestore = false, m_headless = false, m_quickstart = false, m_noquickstart = false, m_terminateafterinit = false, m_nofirststartwizard = false, m_nologo = false, m_nolockcheck = false, m_nodefault = false, m_help = false, m_writer = true, m_calc = false, m_draw = false, m_impress = false, m_global = false, m_math = false, m_web = false, m_base = false, m_helpwriter = false, m_helpcalc = false, m_helpdraw = false, m_helpbasic = false, m_helpmath = false, m_helpimpress = false, m_helpbase = false, m_psn = false, m_version = false, m_splashpipe = true, m_unknown = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, m_bEmpty = false, m_bDocumentArgs = true, m_accept = std::vector of length 0, capacity 0, m_unaccept = std::vector of length 0, capacity 0, m_openlist = std::vector of length 0, capacity 0, m_viewlist = std::vector of length 0, capacity 0, m_startlist = std::vector of length 0, capacity 0, m_forceopenlist = std::vector of length 0, capacity 0, m_forcenewlist = std::vector of length 0, capacity 0, m_printlist = std::vector of length 0, capacity 0, m_printtolist = std::vector of length 0, capacity 0, m_printername = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, m_conversionlist = std::vector of length 0, capacity 0, m_conversionparams = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, m_conversionout = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, m_infilter = std::vector of length 0, capacity 0, m_language = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}, m_pidfile = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>}} aUnknown = {pData = 0x7f0508d2b460 <aImplEmpty_rtl_uString>} #45 0x000000000040071b in sal_main () at /usr/src/debug/libreoffice-4.1.0.4/desktop/source/app/main.c:48 ret = <optimized out> #46 main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/libreoffice-4.1.0.4/desktop/source/app/main.c:47 ret = 0
Note that the four functions starting at frame 6 of thread 1: SwHistoryBookmark::SetInDoc SwHistory::Rollback SwUndoDelete::UndoImpl SfxUndoManager::UndoWithContext are also visible in the backtrace attached to bug 75996 "Crash, when undoing steps in attachment from bug #48582"
yes this looks like it is bug 75996 which has reproduction steps *** This bug has been marked as a duplicate of bug 75996 ***