https://bugs.freedesktop.org/show_bug.cgi?id=72695
Priority: medium
Bug ID: 72695
CC: [email protected]
Assignee: [email protected]
Summary: crash on concurrent SwXTextDocument::dispose and
SwXTextFrame::release
Severity: normal
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: Other
Status: NEW
Version: 4.3.0.0.alpha0+ Master
Component: Writer
Product: LibreOffice
this is a really good stack trace that nicely illustrates the
double-free in SwXFrame::Modify:
Thread A:
vcllo.dll!vcl::SolarMutexObject::acquire() Line 35 C++
vcllo.dll!SalYieldMutex::acquire() Line 144 C++
vcllo.dll!SolarMutexGuard::SolarMutexGuard() Line 426 C++
> swlo.dll!sw::UnoImplPtr<SwXFrame::Impl>::~UnoImplPtr<SwXFrame::Impl>()
> Line 110 C++
swlo.dll!SwXFrame::~SwXFrame() Line 901 C++
swlo.dll!SwXTextFrame::~SwXTextFrame() Line 2521 C++
swlo.dll!SwXTextFrame::`scalar deleting destructor'(unsigned int) C++
cppuhelper3MSC.dll!cppu::OWeakObject::release() Line 204 C++
swlo.dll!cppu::WeakImplHelper6<com::sun::star::lang::XServiceInfo,com::sun::star::beans::XPropertySet,com::sun::star::beans::XPropertyState,com::sun::star::drawing::XShape,com::sun::star::container::XNamed,com::sun::star::lang::XUnoTunnel>::release()
Line 111 C++
swlo.dll!SwXTextFrame::release() Line 2530 C++
Thread B:
msvcr110d.dll!__crtMessageBoxW(const wchar_t * lpText, const wchar_t *
lpCaption, unsigned int uType) Line 249 C
msvcr110d.dll!_wassert(const wchar_t * expr, const wchar_t * filename,
unsigned int lineno) Line 327 C
sal3.dll!`anonymous namespace'::rtl_arena_hash_remove(rtl_arena_st *
arena, unsigned long addr, unsigned long size) Line 384 C++
sal3.dll!rtl_arena_free(rtl_arena_st * arena, void * addr, unsigned long
size) Line 1044 C++
sal3.dll!rtl_freeMemory_CUSTOM(void * p) Line 146 C++
sal3.dll!rtl_freeMemory(void * p) Line 341 C++
cppuhelper3MSC.dll!cppu::OWeakObject::operator delete(void * pMem) Line 87
C++
swlo.dll!SwXFrame::`scalar deleting destructor'(unsigned int) C++
cppuhelper3MSC.dll!cppu::OWeakObject::release() Line 204 C++
swlo.dll!cppu::WeakImplHelper6<com::sun::star::lang::XServiceInfo,com::sun::star::beans::XPropertySet,com::sun::star::beans::XPropertyState,com::sun::star::drawing::XShape,com::sun::star::container::XNamed,com::sun::star::lang::XUnoTunnel>::release()
Line 111 C++
swlo.dll!com::sun::star::uno::Reference<com::sun::star::uno::XInterface>::~Reference<com::sun::star::uno::XInterface>()
Line 106 C++
swlo.dll!com::sun::star::lang::EventObject::~EventObject() C++
> swlo.dll!SwXFrame::Modify(const SfxPoolItem * pOld, const SfxPoolItem *
> pNew) Line 2029 C++
swlo.dll!SwClient::ModifyNotification(const SfxPoolItem * pOldValue, const
SfxPoolItem * pNewValue) Line 102 C++
swlo.dll!SwFmt::~SwFmt() Line 240 C++
swlo.dll!SwFrmFmt::~SwFrmFmt() C++
swlo.dll!SwFlyFrmFmt::~SwFlyFrmFmt() Line 2639 C++
swlo.dll!SwFlyFrmFmt::`vector deleting destructor'(unsigned int) C++
swlo.dll!DeleteAndDestroy(SwFrmFmts & rFmts, int aStartIdx, int aEndIdx)
Line 438 C++
swlo.dll!SwDoc::~SwDoc() Line 646 C++
swlo.dll!SwDoc::`vector deleting destructor'(unsigned int) C++
swlo.dll!SwDocShell::RemoveLink() Line 450 C++
swlo.dll!SwDocShell::~SwDocShell() Line 370 C++
swlo.dll!SwDocShell::`vbase destructor'() C++
swlo.dll!SwDocShell::`vector deleting destructor'(unsigned int) C++
tllo.dll!SvRefBase::QueryDelete() Line 29 C++
tllo.dll!SvRefBase::ReleaseReference() Line 188 C++
sfxlo.dll!SfxObjectShellRef::~SfxObjectShellRef() Line 756 C++
sfxlo.dll!IMPL_SfxBaseModel_DataContainer::~IMPL_SfxBaseModel_DataContainer()
Line 246 C++
sfxlo.dll!IMPL_SfxBaseModel_DataContainer::`scalar deleting
destructor'(unsigned int) C++
sfxlo.dll!SfxBaseModel::dispose() Line 831 C++
swlo.dll!SwXTextDocument::dispose() Line 573 C++
sfxlo.dll!SfxBaseModel::close(unsigned char bDeliverOwnership) Line 1451
C++
swlo.dll!SwXTextDocument::close(unsigned char bDeliverOwnership) Line 581
C++
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
