Download Word2007RTFSpec9.docx from http://www.microsoft.com/en-us/download/confirmation.aspx?id=10725 . Load into LO master. SIGSEGV: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff66d72d8 in cppu::WeakComponentImplHelperBase::acquire ( this=<error reading variable: Cannot access memory at address 0x7fffff7feff8>) at /ssd1/lo/master-suse/cppuhelper/source/implbase.cxx:228 228 { (gdb) bt #0 0x00007ffff66d72d8 in cppu::WeakComponentImplHelperBase::acquire ( this=<error reading variable: Cannot access memory at address 0x7fffff7feff8>) at /ssd1/lo/master-suse/cppuhelper/source/implbase.cxx:228 #1 0x00007ffff2c85e45 in cppu::WeakComponentImplHelper1<com::sun::star::graphic::XPrimitive2D>::acquire (this=0x7fffccf07718) at /ssd1/lo/master-suse/include/cppuhelper/compbase1.hxx:62 #2 0x00007ffff2c862ec in non-virtual thunk to cppu::WeakComponentImplHelper1<com::sun::star::graphic::XPrimitive2D>::acquire() (this=0x7fffccf07768) at /ssd1/lo/master-suse/drawinglayer/source/primitive2d/animatedprimitive2d.cxx:62 #3 0x00007ffff2cee84f in com::sun::star::uno::Reference<com::sun::star::graphic::XPrimitive2D>::Reference (this=0x7fffff7ff120, rRef= uno::Reference to (drawinglayer::primitive2d::MaskPrimitive2D *) 0x7fffccf07768) at /ssd1/lo/master-suse/include/com/sun/star/uno/Reference.hxx:120 #4 0x00007ffff2cee7ed in com::sun::star::uno::Reference<com::sun::star::graphic::XPrimitive2D>::Reference (this=0x7fffff7ff120, rRef= uno::Reference to (drawinglayer::primitive2d::MaskPrimitive2D *) 0x7fffccf07768) at /ssd1/lo/master-suse/include/com/sun/star/uno/Reference.h:121 #5 0x00007ffff2d23187 in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:54 #6 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #7 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #8 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #9 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #10 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #11 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #12 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #13 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #14 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #15 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #16 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #17 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #18 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #19 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #20 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #21 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #22 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #23 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #24 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #25 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this= 0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 etc
Oddly it doesn't happen for me with a Linux build from a few days back; confirmation with a recent master snapshot appreciated :-)
And here are the topmost entries of the stack showing where the recursion starts: #47339 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #47340 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #47341 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #47342 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #47343 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #47344 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #47345 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #47346 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145 #47347 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 2 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64 #47348 0x00007fffd6276ae8 in sdr::contact::ViewObjectContact::checkForPrimitive2DAnimations (this=0x11b9020) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:298 #47349 0x00007fffd6276742 in sdr::contact::ViewObjectContact::getPrimitive2DSequence (this=0x11b9020, rDisplayInfo=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:363 #47350 0x00007fffd6277111 in sdr::contact::ViewObjectContact::getPrimitive2DSequenceHierarchy (this=0x11b9020, rDisplayInfo=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:394 #47351 0x00007fffd627b842 in sdr::contact::ObjectContactOfObjListPainter::ProcessDisplay (this=0x7fffffff1960, rDisplayInfo=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/objectcontactofobjlistpainter.cxx:124 #47352 0x00007fffd64fb7e2 in SdrExchangeView::DrawMarkedObj (this=0x123e450, rOut=...) at /ssd1/lo/master-suse/svx/source/svdraw/svdxcgv.cxx:727 #47353 0x00007fffd61bf799 in E3dView::DrawMarkedObj (this=0x123e450, rOut=...) at /ssd1/lo/master-suse/svx/source/engine3d/view3d.cxx:316 #47354 0x00007fffd64fac95 in SdrExchangeView::GetMarkedObjMetaFile (this=0x123e450, bNoVDevIfOneMtfMarked=false) at /ssd1/lo/master-suse/svx/source/svdraw/svdxcgv.cxx:566 #47355 0x00007fffd6642360 in SvxShape::GetBitmap (this=0x7fffccdfc580, bMetaFile=0 '\000') at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:705 #47356 0x00007fffd664df45 in SvxShape::getPropertyValueImpl (this=0x7fffccdfc580, pProperty=0x1234018, rValue=empty uno::Any) at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:2653 #47357 0x00007fffd6657b20 in SvxShapeText::getPropertyValueImpl (this=0x7fffccdfc580, rName="Bitmap", pProperty=0x1234018, rValue=empty uno::Any) at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:4203 #47358 0x00007fffd6626c98 in SvxGraphicObject::getPropertyValueImpl (this=0x7fffccdfc580, rName="Bitmap", pProperty=0x1234018, rValue=empty uno::Any) at /ssd1/lo/master-suse/svx/source/unodraw/unoshap2.cxx:1700 #47359 0x00007fffd6649554 in SvxShape::_getPropertyValue (this=0x7fffccdfc580, PropertyName="Bitmap") at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:1819 #47360 0x00007fffd6649399 in SvxShape::getPropertyValue (this=0x7fffccdfc580, PropertyName="Bitmap") at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:1801 #47361 0x00007fffd6649a96 in non-virtual thunk to SvxShape::getPropertyValue(rtl::OUString const&) (this=0x7fffccdfc5c8, PropertyName="Bitmap") at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:1802 #47362 0x00007fffcf10f7de in SwXShape::_getPropAtAggrObj (this=0x7fffcce950f0, _rPropertyName="Bitmap") at /ssd1/lo/master-suse/sw/source/core/unocore/unodraw.cxx:1702 #47363 0x00007fffcf10f191 in SwXShape::getPropertyValue (this=0x7fffcce950f0, rPropertyName="Bitmap") at /ssd1/lo/master-suse/sw/source/core/unocore/unodraw.cxx:1650 #47364 0x00007fffcf110ad6 in non-virtual thunk to SwXShape::getPropertyValue(rtl::OUString const&) (this=0x7fffcce95128, rPropertyName="Bitmap") at /ssd1/lo/master-suse/sw/source/core/unocore/unodraw.cxx:1685 #47365 0x00007fffcdca83f6 in writerfilter::dmapper::OLEHandler::lcl_attribute (this=0x1111d90, rName=90001, rVal=...) at /ssd1/lo/master-suse/writerfilter/source/dmapper/OLEHandler.cxx:110 #47366 0x00007fffcddd2755 in writerfilter::LoggedProperties::attribute (this=0x1111d90, name=90001, val=...) at /ssd1/lo/master-suse/writerfilter/source/resourcemodel/LoggedResources.cxx:287 #47367 0x00007fffcddc1dd3 in writerfilter::ooxml::OOXMLPropertyImpl::resolve (this=0x11ba650, rProperties=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:173 #47368 0x00007fffcddc2df5 in writerfilter::ooxml::OOXMLPropertySetImpl::resolve (this=0x110b0c0, rHandler=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:421 #47369 0x00007fffcdbdb833 in writerfilter::dmapper::DomainMapper::sprmWithProps (this=0x105ee40, rSprm=..., rContext=boost::shared_ptr {<std::__debug::map<writerfilter::dmapper::PropertyDefinition, com::sun::star::uno::Any, std::less<writerfilter::dmapper::PropertyDefinition>, std::allocator<std::pair<writerfilter::dmapper::PropertyDefinition const, com::sun::star::uno::Any> > >> = std::__debug::map with 0 elements, _vptr$PropertyMap = 0x7fffce176de0 <vtable for writerfilter::dmapper::ParagraphPropertyMap+16>, m_aValues = empty uno::Sequence, m_cFootnoteSymbol = 0, m_nFootnoteFontId = -1, m_sFootnoteFontName = "", m_xFootnote = empty uno::Reference}, eSprmType=writerfilter::dmapper::SPRM_DEFAULT) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:3353 #47370 0x00007fffcdbcef12 in writerfilter::dmapper::DomainMapper::lcl_sprm (this=0x105ee40, rSprm=...) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:1494 #47371 0x00007fffcddd278f in writerfilter::LoggedProperties::sprm (this=0x105ee40, rSprm=...) at /ssd1/lo/master-suse/writerfilter/source/resourcemodel/LoggedResources.cxx:298 #47372 0x00007fffcddc1d79 in writerfilter::ooxml::OOXMLPropertyImpl::resolve (this=0x110a5a0, rProperties=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:170 #47373 0x00007fffcddc2df5 in writerfilter::ooxml::OOXMLPropertySetImpl::resolve (this=0x11baa10, rHandler=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:421 #47374 0x00007fffcdbdfef3 in writerfilter::dmapper::DomainMapper::lcl_props (this=0x105ee40, ref=boost::shared_ptr {_vptr$Reference = 0x7fffce1790e0 <vtable for writerfilter::ooxml::OOXMLPropertySetImpl+16>}) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:3853 #47375 0x00007fffcdbdff4c in non-virtual thunk to writerfilter::dmapper::DomainMapper::lcl_props(boost::shared_ptr<writerfilter::Reference<writerfilter::Properties> >) (this=0x105ee58, ref=boost::shared_ptr {_vptr$Reference = 0x7ffff2e186a8 <vtable for drawinglayer::primitive2d::MaskPrimitive2D+296>}) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:3854 #47376 0x00007fffcddd251c in writerfilter::LoggedStream::props (this=0x105ee58, ref=...) at /ssd1/lo/master-suse/writerfilter/source/resourcemodel/LoggedResources.cxx:211 #47377 0x00007fffcdd4f1e8 in writerfilter::ooxml::OOXMLFastContextHandler::sendPropertiesWithId (this=0x7fffcd7b0f18, rId=@0x7fffce006c44: 90005) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:1063 #47378 0x00007fffcdf09013 in writerfilter::ooxml::OOXMLFactory_wml::endAction (this=0x10b6620, pHandler=0x7fffcd7b0f18) at /ssd1/lo/master-suse/workdir/unxlngx6/CustomTarget/writerfilter/source/OOXMLFactory_wml.cxx:4668 #47379 0x00007fffcdd3cf92 in writerfilter::ooxml::OOXMLFactory::endAction (this=0x10b1fc0, pHandler=0x7fffcd7b0f18) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFactory.cxx:326 #47380 0x00007fffcdd4cca6 in writerfilter::ooxml::OOXMLFastContextHandler::lcl_endAction (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:415 #47381 0x00007fffcdd4cc52 in writerfilter::ooxml::OOXMLFastContextHandler::endAction (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:407 #47382 0x00007fffcdd507ec in writerfilter::ooxml::OOXMLFastContextHandlerProperties::lcl_endFastElement (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:1354 #47383 0x00007fffcdd547af in writerfilter::ooxml::OOXMLFastContextHandlerShape::lcl_endFastElement (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:2106 #47384 0x00007fffcdd4c17b in writerfilter::ooxml::OOXMLFastContextHandler::endFastElement (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:233 #47385 0x00007fffcdd4c1e2 in non-virtual thunk to writerfilter::ooxml::OOXMLFastContextHandler::endFastElement(int) (this=0x7fffcd7b0f40, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:242 #47386 0x00007fffdc22dd14 in sax_fastparser::FastSaxParser::callbackEndElement (this=0x7fffcda32c08) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:862 #47387 0x00007fffdc22ac25 in call_callbackEndElement (userData=0x7fffcda32c08, name=0x11416c0 "w:pict") at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:112 #47388 0x00007fffec6bb500 in ?? () from /usr/lib64/libexpat.so.1 #47389 0x00007fffec6bc46e in ?? () from /usr/lib64/libexpat.so.1 #47390 0x00007fffec6c077d in XML_ParseBuffer () from /usr/lib64/libexpat.so.1 #47391 0x00007fffdc22ae7e in sax_fastparser::FastSaxParser::parse (this=0x7fffcda32c08) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:659 #47392 0x00007fffdc22aa7b in sax_fastparser::FastSaxParser::parseStream (this=0x7fffcda32c08, maStructSource=...) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:473 #47393 0x00007fffdc22b3af in non-virtual thunk to sax_fastparser::FastSaxParser::parseStream(com::sun::star::xml::sax::InputSource const&) (this=0x7fffcda32c30, maStructSource=...) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:502 #47394 0x00007fffcdd37f69 in writerfilter::ooxml::OOXMLDocumentImpl::resolve (this=0x107c8b0, rStream=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLDocumentImpl.cxx:388 #47395 0x00007fffcdd26488 in WriterFilter::filter (this=0x7fffce1fbd18, aDescriptor=uno::Sequence of length 12 = {...}) at /ssd1/lo/master-suse/writerfilter/source/filter/ImportFilter.cxx:118 #47396 0x00007fffcdd271df in non-virtual thunk to WriterFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x7fffce1fbd40, aDescriptor=uno::Sequence of length 12 = {...}) at /ssd1/lo/master-suse/writerfilter/source/filter/ImportFilter.cxx:181 #47397 0x00007ffff608bc7f in SfxObjectShell::ImportFrom (this=0xf8e160, rMedium=..., bInsert=false) at /ssd1/lo/master-suse/sfx2/source/doc/objstor.cxx:2255 #47398 0x00007ffff60801d6 in SfxObjectShell::DoLoad (this=0xf8e160, pMed=0xf96c90) at /ssd1/lo/master-suse/sfx2/source/doc/objstor.cxx:752 #47399 0x00007ffff60db506 in SfxBaseModel::load (this=0x7fffdd588038, seqArguments=uno::Sequence of length 13 = {...}) at /ssd1/lo/master-suse/sfx2/source/doc/sfxbasemodel.cxx:1888 #47400 0x00007ffff60dc46f in non-virtual thunk to SfxBaseModel::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x7fffdd5880f0, seqArguments=uno::Sequence of length 13 = {...}) at /ssd1/lo/master-suse/sfx2/source/doc/sfxbasemodel.cxx:1964 #47401 0x00007ffff61fd34c in SfxFrameLoader_Impl::load (this=0x7fffdc1c6468, rArgs=uno::Sequence of length 11 = {...}, _rTargetFrame=uno::Reference to (framework::Frame *) 0x7fffeb117830) at /ssd1/lo/master-suse/sfx2/source/view/frmload.cxx:597 #47402 0x00007ffff61fdbe7 in non-virtual thunk to SfxFrameLoader_Impl::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&) (this=0x7fffdc1c6490, rArgs=uno::Sequence of length 11 = {...}, _rTargetFrame=uno::Reference to (framework::Frame *) 0x7fffeb117830) at /ssd1/lo/master-suse/sfx2/source/view/frmload.cxx:644 #47403 0x00007fffddbdae7a in framework::LoadEnv::impl_loadContent (this=0x7fffdefd44f8) at /ssd1/lo/master-suse/framework/source/loadenv/loadenv.cxx:1183 #47404 0x00007fffddbd6998 in framework::LoadEnv::startLoading (this=0x7fffdefd44f8) at /ssd1/lo/master-suse/framework/source/loadenv/loadenv.cxx:402 #47405 0x00007fffddb3adea in framework::LoadDispatcher::impl_dispatch (this=0x7fffdefd4478, rURL=..., lArguments=uno::Sequence of length 4 = {...}, xListener=empty uno::Reference) at /ssd1/lo/master-suse/framework/source/dispatch/loaddispatcher.cxx:119 #47406 0x00007fffddb3b87d in framework::LoadDispatcher::dispatchWithReturnValue (this=0x7fffdefd4478, rURL=..., lArguments=uno::Sequence of length 4 = {...}) at /ssd1/lo/master-suse/framework/source/dispatch/loaddispatcher.cxx:65 #47407 0x00007fffddb3b91e in non-virtual thunk to framework::LoadDispatcher::dispatchWithReturnValue(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x7fffdefd44a8, rURL=..., lArguments=uno::Sequence of length 4 = {...}) at /ssd1/lo/master-suse/framework/source/dispatch/loaddispatcher.cxx:66 #47408 0x00007ffff6a70602 in comphelper::SynchronousDispatch::dispatch (xStartPoint=uno::Reference to (framework::Desktop *) 0x7fffe5314628, sURL="file:///home/tml/Downloads/Word2007RTFSpec9.docx", sTarget="_default", nFlags=0, lArguments=uno::Sequence of length 4 = {...}) at /ssd1/lo/master-suse/comphelper/source/misc/synchronousdispatch.cxx:69 #47409 0x00007ffff7ea0b65 in desktop::DispatchWatcher::executeDispatchRequests (this=0x7fffdd59b710, aDispatchRequestsList=std::__debug::vector of length 1, capacity 1 = {...}, bNoTerminate=false) at /ssd1/lo/master-suse/desktop/source/app/dispatchwatcher.cxx:384 #47410 0x00007ffff7eaea2f in desktop::OfficeIPCThread::ExecuteCmdLineRequests (aRequest=...) at /ssd1/lo/master-suse/desktop/source/app/officeipcthread.cxx:1061 #47411 0x00007ffff7e64d65 in desktop::Desktop::OpenClients () at /ssd1/lo/master-suse/desktop/source/app/app.cxx:2464 #47412 0x00007ffff7e630a8 in desktop::Desktop::OpenClients_Impl (this=0x7fffffffda78) at /ssd1/lo/master-suse/desktop/source/app/app.cxx:1983 #47413 0x00007ffff7e62178 in desktop::Desktop::LinkStubOpenClients_Impl (pThis=0x7fffffffda78, pCaller=0x0) at /ssd1/lo/master-suse/desktop/source/app/app.cxx:1978 #47414 0x00007ffff39d8c97 in Link::Call (this=0xea48e0, pCaller=0x0) at /ssd1/lo/master-suse/include/tools/link.hxx:123 #47415 0x00007ffff40f0cd0 in ImplHandleUserEvent (pSVEvent=0xcb5f10) at /ssd1/lo/master-suse/vcl/source/window/winproc.cxx:1975 #47416 0x00007ffff40edd35 in ImplWindowFrameProc (pWindow=0xcdd220, nEvent=22, pEvent=0xcb5f10) at /ssd1/lo/master-suse/vcl/source/window/winproc.cxx:2590 #47417 0x00007ffff4103f2d in SalFrame::CallCallback (this=0xcdd7d0, nEvent=22, pEvent=0xcb5f10) at /ssd1/lo/master-suse/vcl/inc/salframe.hxx:243 #47418 0x00007ffff4102f98 in SalGenericDisplay::DispatchInternalEvent (this=0xc97530) at /ssd1/lo/master-suse/vcl/generic/app/gendisp.cxx:91 #47419 0x00007fffeb031e16 in GtkData::userEventFn (data=0x41d7b0) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkdata.cxx:935 #47420 0x00007fffeb031f2e in call_userEventFn (data=0x41d7b0) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkdata.cxx:945 #47421 0x00007ffff05e47d5 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0 #47422 0x00007ffff05e4b08 in ?? () from /usr/lib64/libglib-2.0.so.0 #47423 0x00007ffff05e4bc4 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0 #47424 0x00007fffeb030a4e in GtkData::Yield (this=0x41d7b0, bWait=true, bHandleAllCurrentEvents=false) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkdata.cxx:576 #47425 0x00007fffeb035b47 in GtkInstance::Yield (this=0x41d700, bWait=true, bHandleAllCurrentEvents=false) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkinst.cxx:425 #47426 0x00007ffff39f7221 in ImplYield (i_bWait=true, i_bAllEvents=false) at /ssd1/lo/master-suse/vcl/source/app/svapp.cxx:364 #47427 0x00007ffff39f2da3 in Application::Yield () at /ssd1/lo/master-suse/vcl/source/app/svapp.cxx:396 #47428 0x00007ffff39f2d70 in Application::Execute () at /ssd1/lo/master-suse/vcl/source/app/svapp.cxx:345 #47429 0x00007ffff7e600b5 in desktop::Desktop::Main (this=0x7fffffffda78) at /ssd1/lo/master-suse/desktop/source/app/app.cxx:1670 #47430 0x00007ffff3a03388 in ImplSVMain () at /ssd1/lo/master-suse/vcl/source/app/svmain.cxx:162 #47431 0x00007ffff3a04b66 in SVMain () at /ssd1/lo/master-suse/vcl/source/app/svmain.cxx:198 #47432 0x00007ffff7eb74b1 in soffice_main () at /ssd1/lo/master-suse/desktop/source/app/sofficemain.cxx:81 #47433 0x000000000040095d in sal_main () at /ssd1/lo/master-suse/desktop/source/app/main.c:48 #47434 0x0000000000400937 in main (argc=3, argv=0x7fffffffdc28) at /ssd1/lo/master-suse/desktop/source/app/main.c:47
FWIW, same crash on Mac in a master tree built about a week ago.
Seems to be a compiler bug. I see the crash if I compile drawing layer and svx with Clang, not if I compile them with gcc. Apparently in drawinglayer/source/processor2d/baseprocessor2d.cxx , line 64, with gcc the call to processBasePrimitive2D() refers to the one twenty lines earlier in the same file, while with Clang it refers to the one in svx/source/sdr/contact/viewobjectcontact.cxx, line 98. Whether this is a bug in Clang or gcc I don't know, or is it perhaps a grey area in the language specification? The joys of overloading, it makes the code so much easier to read, both for people and compilers.
Nah, it isn't that simple, there is something more complex going on. Sigh.
Stephan Bergmann committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=57d9c96d96d818f19d34d4930cc8ffc8c24e43e2 fdo#70090: Avoid race in copy vs. modification of aRetval Sequence The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.