Bug 70090 - FILEOPEN: Apparently endless recursion when loading Word2007RTFSpec9.docx
Summary: FILEOPEN: Apparently endless recursion when loading Word2007RTFSpec9.docx
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: graphics stack (show other bugs)
Version:
(earliest affected)
4.2.0.0.alpha0+ Master
Hardware: x86-64 (AMD64) Linux (All)
: medium major
Assignee: Stephan Bergmann
URL:
Whiteboard: target:4.2.0
Keywords:
Depends on:
Blocks:
 
Reported: 2013-10-03 17:45 UTC by How can I remove my account?
Modified: 2013-10-08 16:01 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description How can I remove my account? 2013-10-03 17:45:16 UTC
Download Word2007RTFSpec9.docx from http://www.microsoft.com/en-us/download/confirmation.aspx?id=10725 . Load into LO master. SIGSEGV:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff66d72d8 in cppu::WeakComponentImplHelperBase::acquire (
    this=<error reading variable: Cannot access memory at address 0x7fffff7feff8>)
    at /ssd1/lo/master-suse/cppuhelper/source/implbase.cxx:228
228	{
(gdb) bt
#0  0x00007ffff66d72d8 in cppu::WeakComponentImplHelperBase::acquire (
    this=<error reading variable: Cannot access memory at address 0x7fffff7feff8>)
    at /ssd1/lo/master-suse/cppuhelper/source/implbase.cxx:228
#1  0x00007ffff2c85e45 in cppu::WeakComponentImplHelper1<com::sun::star::graphic::XPrimitive2D>::acquire (this=0x7fffccf07718) at /ssd1/lo/master-suse/include/cppuhelper/compbase1.hxx:62
#2  0x00007ffff2c862ec in non-virtual thunk to cppu::WeakComponentImplHelper1<com::sun::star::graphic::XPrimitive2D>::acquire() (this=0x7fffccf07768)
    at /ssd1/lo/master-suse/drawinglayer/source/primitive2d/animatedprimitive2d.cxx:62
#3  0x00007ffff2cee84f in com::sun::star::uno::Reference<com::sun::star::graphic::XPrimitive2D>::Reference (this=0x7fffff7ff120, rRef=
    uno::Reference to (drawinglayer::primitive2d::MaskPrimitive2D *) 0x7fffccf07768)
    at /ssd1/lo/master-suse/include/com/sun/star/uno/Reference.hxx:120
#4  0x00007ffff2cee7ed in com::sun::star::uno::Reference<com::sun::star::graphic::XPrimitive2D>::Reference (this=0x7fffff7ff120, rRef=
    uno::Reference to (drawinglayer::primitive2d::MaskPrimitive2D *) 0x7fffccf07768)
    at /ssd1/lo/master-suse/include/com/sun/star/uno/Reference.h:121
#5  0x00007ffff2d23187 in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:54
#6  0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#7  0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#8  0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#9  0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#10 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#11 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#12 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#13 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#14 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#15 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#16 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#17 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#18 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#19 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#20 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#21 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#22 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#23 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#24 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...)
    at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#25 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=
    0x7fffffff1550, rSource=uno::Sequence of length 1 = {...})
    at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64

etc
Comment 1 Michael Meeks 2013-10-04 09:27:49 UTC
Oddly it doesn't happen for me with a Linux build from a few days back; confirmation with a recent master snapshot appreciated :-)
Comment 2 How can I remove my account? 2013-10-04 10:00:54 UTC
And here are the topmost entries of the stack showing where the recursion starts:

#47339 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#47340 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#47341 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#47342 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#47343 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#47344 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#47345 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 1 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#47346 0x00007fffd627767f in (anonymous namespace)::AnimatedExtractingProcessor2D::processBasePrimitive2D (this=0x7fffffff1550, rCandidate=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:145
#47347 0x00007ffff2d2324a in drawinglayer::processor2d::BaseProcessor2D::process (this=0x7fffffff1550, rSource=uno::Sequence of length 2 = {...}) at /ssd1/lo/master-suse/drawinglayer/source/processor2d/baseprocessor2d.cxx:64
#47348 0x00007fffd6276ae8 in sdr::contact::ViewObjectContact::checkForPrimitive2DAnimations (this=0x11b9020) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:298
#47349 0x00007fffd6276742 in sdr::contact::ViewObjectContact::getPrimitive2DSequence (this=0x11b9020, rDisplayInfo=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:363
#47350 0x00007fffd6277111 in sdr::contact::ViewObjectContact::getPrimitive2DSequenceHierarchy (this=0x11b9020, rDisplayInfo=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/viewobjectcontact.cxx:394
#47351 0x00007fffd627b842 in sdr::contact::ObjectContactOfObjListPainter::ProcessDisplay (this=0x7fffffff1960, rDisplayInfo=...) at /ssd1/lo/master-suse/svx/source/sdr/contact/objectcontactofobjlistpainter.cxx:124
#47352 0x00007fffd64fb7e2 in SdrExchangeView::DrawMarkedObj (this=0x123e450, rOut=...) at /ssd1/lo/master-suse/svx/source/svdraw/svdxcgv.cxx:727
#47353 0x00007fffd61bf799 in E3dView::DrawMarkedObj (this=0x123e450, rOut=...) at /ssd1/lo/master-suse/svx/source/engine3d/view3d.cxx:316
#47354 0x00007fffd64fac95 in SdrExchangeView::GetMarkedObjMetaFile (this=0x123e450, bNoVDevIfOneMtfMarked=false) at /ssd1/lo/master-suse/svx/source/svdraw/svdxcgv.cxx:566
#47355 0x00007fffd6642360 in SvxShape::GetBitmap (this=0x7fffccdfc580, bMetaFile=0 '\000') at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:705
#47356 0x00007fffd664df45 in SvxShape::getPropertyValueImpl (this=0x7fffccdfc580, pProperty=0x1234018, rValue=empty uno::Any) at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:2653
#47357 0x00007fffd6657b20 in SvxShapeText::getPropertyValueImpl (this=0x7fffccdfc580, rName="Bitmap", pProperty=0x1234018, rValue=empty uno::Any) at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:4203
#47358 0x00007fffd6626c98 in SvxGraphicObject::getPropertyValueImpl (this=0x7fffccdfc580, rName="Bitmap", pProperty=0x1234018, rValue=empty uno::Any) at /ssd1/lo/master-suse/svx/source/unodraw/unoshap2.cxx:1700
#47359 0x00007fffd6649554 in SvxShape::_getPropertyValue (this=0x7fffccdfc580, PropertyName="Bitmap") at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:1819
#47360 0x00007fffd6649399 in SvxShape::getPropertyValue (this=0x7fffccdfc580, PropertyName="Bitmap") at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:1801
#47361 0x00007fffd6649a96 in non-virtual thunk to SvxShape::getPropertyValue(rtl::OUString const&) (this=0x7fffccdfc5c8, PropertyName="Bitmap") at /ssd1/lo/master-suse/svx/source/unodraw/unoshape.cxx:1802
#47362 0x00007fffcf10f7de in SwXShape::_getPropAtAggrObj (this=0x7fffcce950f0, _rPropertyName="Bitmap") at /ssd1/lo/master-suse/sw/source/core/unocore/unodraw.cxx:1702
#47363 0x00007fffcf10f191 in SwXShape::getPropertyValue (this=0x7fffcce950f0, rPropertyName="Bitmap") at /ssd1/lo/master-suse/sw/source/core/unocore/unodraw.cxx:1650
#47364 0x00007fffcf110ad6 in non-virtual thunk to SwXShape::getPropertyValue(rtl::OUString const&) (this=0x7fffcce95128, rPropertyName="Bitmap") at /ssd1/lo/master-suse/sw/source/core/unocore/unodraw.cxx:1685
#47365 0x00007fffcdca83f6 in writerfilter::dmapper::OLEHandler::lcl_attribute (this=0x1111d90, rName=90001, rVal=...) at /ssd1/lo/master-suse/writerfilter/source/dmapper/OLEHandler.cxx:110
#47366 0x00007fffcddd2755 in writerfilter::LoggedProperties::attribute (this=0x1111d90, name=90001, val=...) at /ssd1/lo/master-suse/writerfilter/source/resourcemodel/LoggedResources.cxx:287
#47367 0x00007fffcddc1dd3 in writerfilter::ooxml::OOXMLPropertyImpl::resolve (this=0x11ba650, rProperties=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:173
#47368 0x00007fffcddc2df5 in writerfilter::ooxml::OOXMLPropertySetImpl::resolve (this=0x110b0c0, rHandler=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:421
#47369 0x00007fffcdbdb833 in writerfilter::dmapper::DomainMapper::sprmWithProps (this=0x105ee40, rSprm=..., rContext=boost::shared_ptr {<std::__debug::map<writerfilter::dmapper::PropertyDefinition, com::sun::star::uno::Any, std::less<writerfilter::dmapper::PropertyDefinition>, std::allocator<std::pair<writerfilter::dmapper::PropertyDefinition const, com::sun::star::uno::Any> > >> = std::__debug::map with 0 elements, _vptr$PropertyMap = 0x7fffce176de0 <vtable for writerfilter::dmapper::ParagraphPropertyMap+16>, m_aValues = empty uno::Sequence, m_cFootnoteSymbol = 0, m_nFootnoteFontId = -1, m_sFootnoteFontName = "", m_xFootnote = empty uno::Reference}, eSprmType=writerfilter::dmapper::SPRM_DEFAULT) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:3353
#47370 0x00007fffcdbcef12 in writerfilter::dmapper::DomainMapper::lcl_sprm (this=0x105ee40, rSprm=...) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:1494
#47371 0x00007fffcddd278f in writerfilter::LoggedProperties::sprm (this=0x105ee40, rSprm=...) at /ssd1/lo/master-suse/writerfilter/source/resourcemodel/LoggedResources.cxx:298
#47372 0x00007fffcddc1d79 in writerfilter::ooxml::OOXMLPropertyImpl::resolve (this=0x110a5a0, rProperties=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:170
#47373 0x00007fffcddc2df5 in writerfilter::ooxml::OOXMLPropertySetImpl::resolve (this=0x11baa10, rHandler=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLPropertySetImpl.cxx:421
#47374 0x00007fffcdbdfef3 in writerfilter::dmapper::DomainMapper::lcl_props (this=0x105ee40, ref=boost::shared_ptr {_vptr$Reference = 0x7fffce1790e0 <vtable for writerfilter::ooxml::OOXMLPropertySetImpl+16>}) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:3853
#47375 0x00007fffcdbdff4c in non-virtual thunk to writerfilter::dmapper::DomainMapper::lcl_props(boost::shared_ptr<writerfilter::Reference<writerfilter::Properties> >) (this=0x105ee58, ref=boost::shared_ptr {_vptr$Reference = 0x7ffff2e186a8 <vtable for drawinglayer::primitive2d::MaskPrimitive2D+296>}) at /ssd1/lo/master-suse/writerfilter/source/dmapper/DomainMapper.cxx:3854
#47376 0x00007fffcddd251c in writerfilter::LoggedStream::props (this=0x105ee58, ref=...) at /ssd1/lo/master-suse/writerfilter/source/resourcemodel/LoggedResources.cxx:211
#47377 0x00007fffcdd4f1e8 in writerfilter::ooxml::OOXMLFastContextHandler::sendPropertiesWithId (this=0x7fffcd7b0f18, rId=@0x7fffce006c44: 90005) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:1063
#47378 0x00007fffcdf09013 in writerfilter::ooxml::OOXMLFactory_wml::endAction (this=0x10b6620, pHandler=0x7fffcd7b0f18) at /ssd1/lo/master-suse/workdir/unxlngx6/CustomTarget/writerfilter/source/OOXMLFactory_wml.cxx:4668
#47379 0x00007fffcdd3cf92 in writerfilter::ooxml::OOXMLFactory::endAction (this=0x10b1fc0, pHandler=0x7fffcd7b0f18) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFactory.cxx:326
#47380 0x00007fffcdd4cca6 in writerfilter::ooxml::OOXMLFastContextHandler::lcl_endAction (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:415
#47381 0x00007fffcdd4cc52 in writerfilter::ooxml::OOXMLFastContextHandler::endAction (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:407
#47382 0x00007fffcdd507ec in writerfilter::ooxml::OOXMLFastContextHandlerProperties::lcl_endFastElement (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:1354
#47383 0x00007fffcdd547af in writerfilter::ooxml::OOXMLFastContextHandlerShape::lcl_endFastElement (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:2106
#47384 0x00007fffcdd4c17b in writerfilter::ooxml::OOXMLFastContextHandler::endFastElement (this=0x7fffcd7b0f18, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:233
#47385 0x00007fffcdd4c1e2 in non-virtual thunk to writerfilter::ooxml::OOXMLFastContextHandler::endFastElement(int) (this=0x7fffcd7b0f40, Element=593712) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLFastContextHandler.cxx:242
#47386 0x00007fffdc22dd14 in sax_fastparser::FastSaxParser::callbackEndElement (this=0x7fffcda32c08) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:862
#47387 0x00007fffdc22ac25 in call_callbackEndElement (userData=0x7fffcda32c08, name=0x11416c0 "w:pict") at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:112
#47388 0x00007fffec6bb500 in ?? () from /usr/lib64/libexpat.so.1
#47389 0x00007fffec6bc46e in ?? () from /usr/lib64/libexpat.so.1
#47390 0x00007fffec6c077d in XML_ParseBuffer () from /usr/lib64/libexpat.so.1
#47391 0x00007fffdc22ae7e in sax_fastparser::FastSaxParser::parse (this=0x7fffcda32c08) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:659
#47392 0x00007fffdc22aa7b in sax_fastparser::FastSaxParser::parseStream (this=0x7fffcda32c08, maStructSource=...) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:473
#47393 0x00007fffdc22b3af in non-virtual thunk to sax_fastparser::FastSaxParser::parseStream(com::sun::star::xml::sax::InputSource const&) (this=0x7fffcda32c30, maStructSource=...) at /ssd1/lo/master-suse/sax/source/fastparser/fastparser.cxx:502
#47394 0x00007fffcdd37f69 in writerfilter::ooxml::OOXMLDocumentImpl::resolve (this=0x107c8b0, rStream=...) at /ssd1/lo/master-suse/writerfilter/source/ooxml/OOXMLDocumentImpl.cxx:388
#47395 0x00007fffcdd26488 in WriterFilter::filter (this=0x7fffce1fbd18, aDescriptor=uno::Sequence of length 12 = {...}) at /ssd1/lo/master-suse/writerfilter/source/filter/ImportFilter.cxx:118
#47396 0x00007fffcdd271df in non-virtual thunk to WriterFilter::filter(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x7fffce1fbd40, aDescriptor=uno::Sequence of length 12 = {...}) at /ssd1/lo/master-suse/writerfilter/source/filter/ImportFilter.cxx:181
#47397 0x00007ffff608bc7f in SfxObjectShell::ImportFrom (this=0xf8e160, rMedium=..., bInsert=false) at /ssd1/lo/master-suse/sfx2/source/doc/objstor.cxx:2255
#47398 0x00007ffff60801d6 in SfxObjectShell::DoLoad (this=0xf8e160, pMed=0xf96c90) at /ssd1/lo/master-suse/sfx2/source/doc/objstor.cxx:752
#47399 0x00007ffff60db506 in SfxBaseModel::load (this=0x7fffdd588038, seqArguments=uno::Sequence of length 13 = {...}) at /ssd1/lo/master-suse/sfx2/source/doc/sfxbasemodel.cxx:1888
#47400 0x00007ffff60dc46f in non-virtual thunk to SfxBaseModel::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x7fffdd5880f0, seqArguments=uno::Sequence of length 13 = {...}) at /ssd1/lo/master-suse/sfx2/source/doc/sfxbasemodel.cxx:1964
#47401 0x00007ffff61fd34c in SfxFrameLoader_Impl::load (this=0x7fffdc1c6468, rArgs=uno::Sequence of length 11 = {...}, _rTargetFrame=uno::Reference to (framework::Frame *) 0x7fffeb117830) at /ssd1/lo/master-suse/sfx2/source/view/frmload.cxx:597
#47402 0x00007ffff61fdbe7 in non-virtual thunk to SfxFrameLoader_Impl::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&) (this=0x7fffdc1c6490, rArgs=uno::Sequence of length 11 = {...}, _rTargetFrame=uno::Reference to (framework::Frame *) 0x7fffeb117830) at /ssd1/lo/master-suse/sfx2/source/view/frmload.cxx:644
#47403 0x00007fffddbdae7a in framework::LoadEnv::impl_loadContent (this=0x7fffdefd44f8) at /ssd1/lo/master-suse/framework/source/loadenv/loadenv.cxx:1183
#47404 0x00007fffddbd6998 in framework::LoadEnv::startLoading (this=0x7fffdefd44f8) at /ssd1/lo/master-suse/framework/source/loadenv/loadenv.cxx:402
#47405 0x00007fffddb3adea in framework::LoadDispatcher::impl_dispatch (this=0x7fffdefd4478, rURL=..., lArguments=uno::Sequence of length 4 = {...}, xListener=empty uno::Reference) at /ssd1/lo/master-suse/framework/source/dispatch/loaddispatcher.cxx:119
#47406 0x00007fffddb3b87d in framework::LoadDispatcher::dispatchWithReturnValue (this=0x7fffdefd4478, rURL=..., lArguments=uno::Sequence of length 4 = {...}) at /ssd1/lo/master-suse/framework/source/dispatch/loaddispatcher.cxx:65
#47407 0x00007fffddb3b91e in non-virtual thunk to framework::LoadDispatcher::dispatchWithReturnValue(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) (this=0x7fffdefd44a8, rURL=..., lArguments=uno::Sequence of length 4 = {...}) at /ssd1/lo/master-suse/framework/source/dispatch/loaddispatcher.cxx:66
#47408 0x00007ffff6a70602 in comphelper::SynchronousDispatch::dispatch (xStartPoint=uno::Reference to (framework::Desktop *) 0x7fffe5314628, sURL="file:///home/tml/Downloads/Word2007RTFSpec9.docx", sTarget="_default", nFlags=0, lArguments=uno::Sequence of length 4 = {...}) at /ssd1/lo/master-suse/comphelper/source/misc/synchronousdispatch.cxx:69
#47409 0x00007ffff7ea0b65 in desktop::DispatchWatcher::executeDispatchRequests (this=0x7fffdd59b710, aDispatchRequestsList=std::__debug::vector of length 1, capacity 1 = {...}, bNoTerminate=false) at /ssd1/lo/master-suse/desktop/source/app/dispatchwatcher.cxx:384
#47410 0x00007ffff7eaea2f in desktop::OfficeIPCThread::ExecuteCmdLineRequests (aRequest=...) at /ssd1/lo/master-suse/desktop/source/app/officeipcthread.cxx:1061
#47411 0x00007ffff7e64d65 in desktop::Desktop::OpenClients () at /ssd1/lo/master-suse/desktop/source/app/app.cxx:2464
#47412 0x00007ffff7e630a8 in desktop::Desktop::OpenClients_Impl (this=0x7fffffffda78) at /ssd1/lo/master-suse/desktop/source/app/app.cxx:1983
#47413 0x00007ffff7e62178 in desktop::Desktop::LinkStubOpenClients_Impl (pThis=0x7fffffffda78, pCaller=0x0) at /ssd1/lo/master-suse/desktop/source/app/app.cxx:1978
#47414 0x00007ffff39d8c97 in Link::Call (this=0xea48e0, pCaller=0x0) at /ssd1/lo/master-suse/include/tools/link.hxx:123
#47415 0x00007ffff40f0cd0 in ImplHandleUserEvent (pSVEvent=0xcb5f10) at /ssd1/lo/master-suse/vcl/source/window/winproc.cxx:1975
#47416 0x00007ffff40edd35 in ImplWindowFrameProc (pWindow=0xcdd220, nEvent=22, pEvent=0xcb5f10) at /ssd1/lo/master-suse/vcl/source/window/winproc.cxx:2590
#47417 0x00007ffff4103f2d in SalFrame::CallCallback (this=0xcdd7d0, nEvent=22, pEvent=0xcb5f10) at /ssd1/lo/master-suse/vcl/inc/salframe.hxx:243
#47418 0x00007ffff4102f98 in SalGenericDisplay::DispatchInternalEvent (this=0xc97530) at /ssd1/lo/master-suse/vcl/generic/app/gendisp.cxx:91
#47419 0x00007fffeb031e16 in GtkData::userEventFn (data=0x41d7b0) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkdata.cxx:935
#47420 0x00007fffeb031f2e in call_userEventFn (data=0x41d7b0) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkdata.cxx:945
#47421 0x00007ffff05e47d5 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#47422 0x00007ffff05e4b08 in ?? () from /usr/lib64/libglib-2.0.so.0
#47423 0x00007ffff05e4bc4 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#47424 0x00007fffeb030a4e in GtkData::Yield (this=0x41d7b0, bWait=true, bHandleAllCurrentEvents=false) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkdata.cxx:576
#47425 0x00007fffeb035b47 in GtkInstance::Yield (this=0x41d700, bWait=true, bHandleAllCurrentEvents=false) at /ssd1/lo/master-suse/vcl/unx/gtk/app/gtkinst.cxx:425
#47426 0x00007ffff39f7221 in ImplYield (i_bWait=true, i_bAllEvents=false) at /ssd1/lo/master-suse/vcl/source/app/svapp.cxx:364
#47427 0x00007ffff39f2da3 in Application::Yield () at /ssd1/lo/master-suse/vcl/source/app/svapp.cxx:396
#47428 0x00007ffff39f2d70 in Application::Execute () at /ssd1/lo/master-suse/vcl/source/app/svapp.cxx:345
#47429 0x00007ffff7e600b5 in desktop::Desktop::Main (this=0x7fffffffda78) at /ssd1/lo/master-suse/desktop/source/app/app.cxx:1670
#47430 0x00007ffff3a03388 in ImplSVMain () at /ssd1/lo/master-suse/vcl/source/app/svmain.cxx:162
#47431 0x00007ffff3a04b66 in SVMain () at /ssd1/lo/master-suse/vcl/source/app/svmain.cxx:198
#47432 0x00007ffff7eb74b1 in soffice_main () at /ssd1/lo/master-suse/desktop/source/app/sofficemain.cxx:81
#47433 0x000000000040095d in sal_main () at /ssd1/lo/master-suse/desktop/source/app/main.c:48
#47434 0x0000000000400937 in main (argc=3, argv=0x7fffffffdc28) at /ssd1/lo/master-suse/desktop/source/app/main.c:47
Comment 3 How can I remove my account? 2013-10-04 11:30:20 UTC
FWIW, same crash on Mac in a master tree built about a week ago.
Comment 4 How can I remove my account? 2013-10-06 07:25:18 UTC
Seems to be a compiler bug. I see the crash if I compile drawing layer and svx with Clang, not if I compile them with gcc. Apparently in drawinglayer/source/processor2d/baseprocessor2d.cxx , line 64, with gcc the call to processBasePrimitive2D() refers to the one twenty lines earlier in the same file, while with Clang it refers to the one in svx/source/sdr/contact/viewobjectcontact.cxx, line 98. Whether this is a bug in Clang or gcc I don't know, or is it perhaps a grey area in the language specification? The joys of overloading, it makes the code so much easier to read, both for people and compilers.
Comment 5 How can I remove my account? 2013-10-06 07:48:20 UTC
Nah, it isn't that simple, there is something more complex going on. Sigh.
Comment 6 Commit Notification 2013-10-08 15:59:27 UTC
Stephan Bergmann committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=57d9c96d96d818f19d34d4930cc8ffc8c24e43e2

fdo#70090: Avoid race in copy vs. modification of aRetval Sequence



The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds
Affected users are encouraged to test the fix and report feedback.