https://bugs.documentfoundation.org/show_bug.cgi?id=97231

--- Comment #10 from Martin <[email protected]> ---
WinDBG already gets an exception on opening the macro editor

First Exception by clicking in the menu on "Run Macros"

0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
C:\Program Files\LibreOffice 5\program\soffice.bin - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
C:\Program Files\Java\jre1.8.0_92\bin\server\jvm.dll - 
returning none
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
C:\Program Files\Java\jre1.8.0_92\bin\java.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
C:\Program Files\Java\jre1.8.0_92\bin\zip.dll - 
GetUrlPageData2 (WinHttp) failed: 12029.

FAULTING_IP: 
+0
00000000`1e564a18 458b5808        mov     r11d,dword ptr [r8+8]

EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000000001e564a18
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000000008
Attempt to read from address 0000000000000008

FAULTING_THREAD:  0000000000000c94

DEFAULT_BUCKET_ID:  STACK_CORRUPTION
PROCESS_NAME:  soffice.bin
OVERLAPPED_MODULE: Address regions for 'localedata_euro' and 'faultrep.dll'
overlap
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced
memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced
memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1:  0000000000000000
EXCEPTION_PARAMETER2:  0000000000000008
READ_ADDRESS:  0000000000000008 
FOLLOWUP_IP: 
jvm+1d1d6
00000000`5befd1d6 84c0            test    al,al
NTGLOBALFLAG:  0
APPLICATION_VERIFIER_FLAGS:  0
APP:  soffice.bin
IP_ON_HEAP:  000000000920e800
The fault address in not in any loaded module, please check your build's rebase
log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
contain the address if it were loaded.

ADDITIONAL_DEBUG_TEXT:  Followup set based on attribute
[Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

LAST_CONTROL_TRANSFER:  from 000000000920e800 to 000000001e564a18

PRIMARY_PROBLEM_CLASS:  STACK_CORRUPTION

BUGCHECK_STR:  APPLICATION_FAULT_STACK_CORRUPTION_NULL_CLASS_PTR_READ

FRAME_ONE_INVALID: 1

STACK_TEXT:  
00000000`00a5ac28 00000000`775cdbd8 ntdll!RtlpEnvironLookupTable+0x398
00000000`00a5bde8 00000000`775cdba0 ntdll!RtlpEnvironLookupTable+0x360
00000000`00a5c038 00000000`775cdc30 ntdll!RtlpEnvironLookupTable+0x3f0
00000000`00a5c308 00000000`775cdb18 ntdll!RtlpEnvironLookupTable+0x2d8
00000000`00a5c608 00000000`731c8c65
zip!Java_java_util_zip_ZipFile_getZipMessage+0x67d9
00000000`00a5c688 00000000`5befd1d6 jvm+0x1d1d6
00000000`00a5c8d8 00000000`5bf9ceb7 jvm!JVM_GetManagementExt+0x98f17
00000000`00a5cad8 00000000`5bfa25c7 jvm!JVM_GetManagementExt+0x9e627
00000000`00a5cb68 00000000`5bfa2f42 jvm!JVM_GetManagementExt+0x9efa2
00000000`00a5cc28 00000000`5bfa361d jvm!JVM_GetManagementExt+0x9f67d
00000000`00a5d2b8 00000000`5bf7993f jvm!JVM_GetManagementExt+0x7599f
00000000`00a5d358 00000000`5bf70351 jvm!JVM_GetManagementExt+0x6c3b1
00000000`00a5d388 00000000`5bf70aaa jvm!JVM_GetManagementExt+0x6cb0a
00000000`00a5d3c8 00000000`5bf77a71 jvm!JVM_GetManagementExt+0x73ad1
00000000`00a5d538 00000000`775cdb40 ntdll!RtlpEnvironLookupTable+0x300
00000000`00a5d620 00000000`5c4bc228 jvm!Relocation::`vftable'+0x0
00000000`00a5d888 00000000`774c4370 ntdll!RtlQueryEnvironmentVariable+0x205
00000000`00a5d8e8 00000000`774ef4e3 ntdll!RtlNtStatusToDosError+0x27
00000000`00a5d8f8 00000000`775cdaa8 ntdll!RtlpEnvironLookupTable+0x268
00000000`00a5d918 000007fe`fd4413d6 kernelbase!BaseSetLastNTError+0x16
00000000`00a5d948 000007fe`fd442e3f kernelbase!GetEnvironmentVariableW+0x6f
00000000`00a5d980 000007fe`eda9e188 sal3!g_Mutex+0x0
00000000`00a5d988 000007fe`eda63bf3 sal3!osl_getEnvironment+0x63
00000000`00a5db18 00000000`5bf45d8d jvm!JVM_GetManagementExt+0x41ded
00000000`00a5e598 00000000`5c10a828 jvm!JVM_ResolveClass+0x45a08
00000000`00a5e5e8 00000000`774f0d8a ntdll!RtlGetFullPathName_UEx+0x7a
00000000`00a5e7c8 00000000`5c0e0c56 jvm!JVM_ResolveClass+0x1be36
00000000`00a5f648 00000000`5bfda296 jvm!JVM_GetManagementExt+0xd62f6
00000000`00a5f678 00000000`5bfda304 jvm!JVM_GetManagementExt+0xd6364
00000000`00a5f6a8 00000000`5c00c9f3 jvm!JVM_GetManagementExt+0x108a53
00000000`00a5f848 00000000`5c01a016 jvm!JVM_GetManagementExt+0x116076
00000000`00a5f9e8 000007fe`fd441a7a kernelbase!ReadFile+0x76
00000000`00a5fa08 00000000`772909f9 kernel32!ReadFileImplementation+0x55
00000000`00a5faa8 00000000`732dcb24 java!handleRead+0x24
00000000`00a5fb18 00000000`5c03b253 jvm!JNI_GetCreatedJavaVMs+0x1f783
00000000`00a5fb78 00000000`731c2340 zip!Java_java_util_zip_ZipFile_read+0x100
00000000`00a61318 00000000`5c11c129 jvm!JVM_ResolveClass+0x57309
00000000`00a61348 00000000`5c019c5b jvm!JVM_GetManagementExt+0x115cbb
00000000`00a61358 00000000`5c11bfe6 jvm!JVM_ResolveClass+0x571c6
00000000`00a61478 00000000`5c0fb7f1 jvm!JVM_ResolveClass+0x369d1
00000000`00a61558 00000000`5c11bd58 jvm!JVM_ResolveClass+0x56f38
00000000`00a61588 00000000`5bf5bcfa jvm!JVM_GetManagementExt+0x57d5a
00000000`00a61758 00000000`5c124568 jvm!JVM_ResolveClass+0x5f748
00000000`00a617b8 00000000`5c0718ad jvm!JVM_FindClassFromCaller+0x71d
00000000`00a61848 00000000`5c02514f jvm!JNI_GetCreatedJavaVMs+0x967f
00000000`00a61878 00000000`5c0241ee jvm!JNI_GetCreatedJavaVMs+0x871e
00000000`00a61918 00000000`732d1eaa
java!Java_java_lang_ClassLoader_defineClass1+0x1a2
00000000`00a61988 00000000`5c0d0122 jvm!JVM_ResolveClass+0xb302
00000000`00a619c8 00000000`5c0d61fd jvm!JVM_ResolveClass+0x113dd
00000000`00a61ab0 00000000`5bee0000 jvm+0x0
00000000`00a61ae8 00000000`5c00be29 jvm!JVM_GetManagementExt+0x107e89
00000000`00a61b08 00000000`5c0d561d jvm!JVM_ResolveClass+0x107fd
00000000`00a61b28 00000000`5bf6ebb2 jvm!JVM_GetManagementExt+0x6ac12
00000000`00a61b38 00000000`5c0d60a3 jvm!JVM_ResolveClass+0x11283
00000000`00a623b8 00000000`5c06c219 jvm!JVM_Clone+0x9d9
00000000`00a62588 00000000`5bf50153 jvm!JVM_GetManagementExt+0x4c1b3
00000000`00a626f8 00000000`5c326fe2 jvm!JVM_FindSignal+0x1b24f2
00000000`00a62868 00000000`5bf503b0 jvm!JVM_GetManagementExt+0x4c410
00000000`00a628c8 00000000`5c065bdc jvm!JVM_FillInStackTrace+0x13c
00000000`00a62908 00000000`732d8396
java!Java_java_lang_Throwable_fillInStackTrace+0xe
00000000`00a62b58 00000000`5c11ba9c jvm!JVM_ResolveClass+0x56c7c
00000000`00a62b88 00000000`5c3265ac jvm!JVM_FindSignal+0x1b1abc
00000000`00a62c98 00000000`732d1052
java!Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2Ljava_security_AccessControlContext_2+0xe
00000000`00a64e20 00000000`1e34a318 python33!_Py_NotImplementedStruct+0x0
00000000`00a67138 00000000`5bf9c850 jvm!JVM_GetManagementExt+0x988b0
00000000`00a67548 00000000`5c0ed412 jvm!JVM_ResolveClass+0x285f2
00000000`00a675a8 00000000`5c10d2ff jvm!JVM_ResolveClass+0x484df
00000000`00a67a28 00000000`731ca312
zip!Java_java_util_zip_ZipFile_getZipMessage+0x7e86
00000000`00a68198 00000000`5c11532b jvm!JVM_ResolveClass+0x5050b
00000000`00a68528 00000000`5bfaeeb2 jvm!JVM_GetManagementExt+0xaaf12
00000000`00a68548 00000000`5c14996f jvm!JVM_ResolveClass+0x84b4f
00000000`00a68558 00000000`5bfb0a5e jvm!JVM_GetManagementExt+0xacabe
00000000`00a68578 00000000`5c1496f4 jvm!JVM_ResolveClass+0x848d4
00000000`00a688a8 00000000`731c001b zip+0x1b
00000000`00a68aa8 00000000`5c154d3f jvm!JVM_ResolveClass+0x8ff1f
00000000`00a68ca8 00000000`5bf59351 jvm!JVM_GetManagementExt+0x553b1
00000000`00a68cf8 00000000`5bf5ac3c jvm!JVM_GetManagementExt+0x56c9c
00000000`00a68f08 00000000`731c0100 zip+0x100
00000000`00a68f48 00000000`5bf52426 jvm!JVM_GetManagementExt+0x4e486
00000000`00a68f88 00000000`5bf5297a jvm!JVM_GetManagementExt+0x4e9da
00000000`00a69318 00000000`5c0f3400 jvm!JVM_ResolveClass+0x2e5e0
00000000`00a69458 00000000`774c4d05 ntdll!RtlpAllocateUserBlock+0x45
00000000`00a694a8 00000000`774a0000 ntdll!RtlDeactivateActivationContext <PERF>
+0x0
00000000`00a694d8 00000000`774c4912 ntdll!RtlpLowFragHeapAllocFromContext+0x571
00000000`00a69678 00000000`774c4b6f ntdll!RtlpFreeUserBlock+0x16f
00000000`00a69688 00000000`5bf740b5 jvm!JVM_GetManagementExt+0x70115
00000000`00a696b8 00000000`5bfd2221 jvm!JVM_GetManagementExt+0xce281
00000000`00a69708 00000000`774c4c9e ntdll!RtlFreeHeap+0x5ae
00000000`00a69828 00000000`5bf52948 jvm!JVM_GetManagementExt+0x4e9a8
00000000`00a69878 00000000`5bf5af79 jvm!JVM_GetManagementExt+0x56fd9
00000000`00a69948 00000000`5fb68d94 msvcr100!free+0x1c
00000000`00a69988 00000000`5bf52761 jvm!JVM_GetManagementExt+0x4e7c1
00000000`00a699a8 00000000`5bf5b5b0 jvm!JVM_GetManagementExt+0x57610
00000000`00a699f8 00000000`5bf300a3 jvm!JVM_GetManagementExt+0x2c103
00000000`00a69a08 00000000`5bf5c96a jvm!JVM_GetManagementExt+0x589ca
00000000`00a69e58 00000000`5fb33a35 msvcr100!_vsnprintf+0x11
00000000`00a69e98 000007fe`fd44133c kernelbase!SetEvent+0xc
00000000`00a69ec8 00000000`5bfaceca jvm!JVM_GetManagementExt+0xa8f2a
00000000`00a69f08 00000000`5bfacf01 jvm!JVM_GetManagementExt+0xa8f61
00000000`00a69f28 00000000`5fb00000 msvcr100!__ImageBase+0x0
00000000`00a69f38 00000000`5bf3fcda jvm!JVM_GetManagementExt+0x3bd3a
00000000`00a6a078 00000000`5bf515bb jvm!JVM_GetManagementExt+0x4d61b
00000000`00a6a088 00000000`5bf6f5ba jvm!JVM_GetManagementExt+0x6b61a
00000000`00a6a0a8 00000000`5c115236 jvm!JVM_ResolveClass+0x50416
00000000`00a6a108 00000000`5c1152b6 jvm!JVM_ResolveClass+0x50496
00000000`00a6a7b8 00000000`731c0004 zip+0x4
00000000`00a6a8a8 00000000`5fb339e1 msvcr100!_vsnprintf_l+0x91
00000000`00a6a948 00000000`5bf77d17 jvm!JVM_GetManagementExt+0x73d77
00000000`00a6a988 00000000`5bf77d73 jvm!JVM_GetManagementExt+0x73dd3
00000000`00a6a9c8 00000000`5c4b9fb0 jvm!JfrStreamWriter::`vftable'+0x8
00000000`00a6ac58 00000000`5bfda562 jvm!JVM_GetManagementExt+0xd65c2
00000000`00a6ac88 00000000`5bfda63f jvm!JVM_GetManagementExt+0xd669f
00000000`00a6ae58 00000000`77520000 ntdll! ?? ::FNODOBFM::`string'+0x1ecd
00000000`00a6aec8 00000000`5c0f0200 jvm!JVM_ResolveClass+0x2b3e0
00000000`00a6af78 00000000`5bf1232a jvm!JVM_GetManagementExt+0xe38a
00000000`00a6b018 00000000`5fb25695 msvcr100!_errno+0x9
00000000`00a6b028 00000000`5bf7d667 jvm!JVM_GetManagementExt+0x796c7
00000000`00a6b058 00000000`5bf06ea9 jvm!JVM_GetManagementExt+0x2f09
00000000`00a6b0b8 00000000`5c010000 jvm!JVM_GetManagementExt+0x10c060
00000000`00a6b158 00000000`5bf07fd4 jvm!JVM_GetManagementExt+0x4034
00000000`00a6b180 00000000`5c4bc5f0 jvm!metadata_Relocation::`vftable'+0x318
00000000`00a6b1c8 00000000`5c000000 jvm!JVM_GetManagementExt+0xfc060
00000000`00a6b228 00000000`5fb68d17 msvcr100!malloc+0x5b
00000000`00a6b258 00000000`5bf79201 jvm!JVM_GetManagementExt+0x75261
00000000`00a6b2a8 00000000`5bee15d6 jvm+0x15d6
00000000`00a6b2f8 00000000`5c11556f jvm!JVM_ResolveClass+0x5074f
00000000`00a6b328 00000000`5c1152e1 jvm!JVM_ResolveClass+0x504c1
00000000`00a6b358 00000000`5c11582a jvm!JVM_ResolveClass+0x50a0a
00000000`00a6b388 00000000`5bf328f9 jvm!JVM_GetManagementExt+0x2e959
00000000`00a6b3a8 00000000`5bfc5946 jvm!JVM_GetManagementExt+0xc19a6
00000000`00a6b3d8 00000000`5bfc5c3f jvm!JVM_GetManagementExt+0xc1c9f
00000000`00a6b428 00000000`5bfac8bb jvm!JVM_GetManagementExt+0xa891b
00000000`00a6b448 00000000`5c009c11 jvm!JVM_GetManagementExt+0x105c71
00000000`00a6b468 00000000`5c00c91b jvm!JVM_GetManagementExt+0x10897b
00000000`00a6b470 00000000`5c4c48e8 jvm!ArgumentSizeComputer::`vftable'+0x0
00000000`00a6b478 00000000`5bf11581 jvm!JVM_GetManagementExt+0xd5e1
00000000`00a6b4a8 00000000`5bf3b837 jvm!JVM_GetManagementExt+0x37897
00000000`00a6b530 00000000`775b03c8 ntdll!RtlpInterceptorRoutines+0x0
00000000`00a6b5e8 00000000`5c0f5a6d jvm!JVM_ResolveClass+0x30c4d
00000000`00a6b608 00000000`731c0000 zip+0x0
00000000`00a6b628 00000000`5bf3271d jvm!JVM_GetManagementExt+0x2e77d
00000000`00a6b638 00000000`5c0f0100 jvm!JVM_ResolveClass+0x2b2e0
00000000`00a6b658 00000000`5c6eaca8
jvm!gHotSpotVMLongConstantEntryNameOffset+0x1b00
00000000`00a6b778 00000000`5fb54e7e msvcr100!write_string+0x56
00000000`00a6b798 00000000`5fb220da msvcr100!_getptd_noexit+0x76
00000000`00a6b7b8 00000000`5fb538a8 msvcr100!_output_l+0x858
00000000`00a6b828 00000000`5c4b9fb2 jvm!JfrStreamWriter::`vftable'+0xa
00000000`00a6b868 00000000`5c50c1bd jvm!EventLog::`vftable'+0xd
00000000`00a6b878 00000000`5bf4fae4 jvm!JVM_GetManagementExt+0x4bb44
00000000`00a6b880 00000000`5fbb37e0 msvcr100!__initiallocinfo+0x0
00000000`00a6b8b8 00000000`5bf3e540 jvm!JVM_GetManagementExt+0x3a5a0
00000000`00a6b9a8 00000000`5fb60000 msvcr100!__CxxDetectRethrow+0x4c
00000000`00a6ba88 00000000`5c121a59 jvm!JVM_ResolveClass+0x5cc39
00000000`00a6bd28 00000000`5c0f3bc1 jvm!JVM_ResolveClass+0x2eda1
00000000`00a6bd98 000007fe`f384f81a cppu3!cppu::_copyConstructData+0x1a
00000000`00a6bda8 000007fe`f3851bb7 cppu3!uno_copyAndConvertData+0x27
00000000`00a6bde8 000007fe`ecaa6747 mscx_uno!`anonymous
namespace'::cpp_call+0x897
00000000`00a6bf08 00000000`5c023565 jvm!JNI_GetCreatedJavaVMs+0x7a95
00000000`00a6bf38 00000000`5c0284b1 jvm!JNI_GetCreatedJavaVMs+0xc9e1
00000000`00a6bfa8 00000000`7752df6a ntdll! ?? ::FNODOBFM::`string'+0x149ca
00000000`00a6bfd8 00000000`5c174ee8 jvm!JVM_FindSignal+0x3f8
00000000`00a6c008 00000000`5bf058ce jvm!JVM_GetManagementExt+0x192e
00000000`00a6c028 000007fe`e9733b9c
java_uno!jni_uno::JNI_context::ensure_no_exception+0xc
00000000`00a6c038 00000000`5bf5c30a jvm!JVM_GetManagementExt+0x5836a
00000000`00a6c0b8 00000000`5c028928 jvm!JNI_GetCreatedJavaVMs+0xce58
00000000`00a6c118 00000000`5bf9c42b jvm!JVM_GetManagementExt+0x9848b
00000000`00a6c148 000007fe`e9733baf
java_uno!jni_uno::JNI_context::ensure_no_exception+0x1f
00000000`00a6c188 00000000`5bf5de4d jvm!JVM_GetManagementExt+0x59ead
00000000`00a6c1b8 000007fe`ecab4784 mscx_uno!`anonymous
namespace'::doGetVtableSlot<_typelib_InterfaceMethodTypeDescription>+0x1d4
00000000`00a6c228 00000000`5bfd7101 jvm!JVM_GetManagementExt+0xd3161
00000000`00a6c248 000007fe`f38478d0 cppu3!`anonymous namespace'::complete+0x10
00000000`00a6c2a8 000007fe`ecaa5ec6 mscx_uno!`anonymous
namespace'::cpp_call+0x16
00000000`00a6c2e8 000007fe`ecaa6b48
mscx_uno!bridges::cpp_uno::shared::unoInterfaceProxyDispatch+0x2d8
00000000`00a6c328 000007fe`eda3c0f9 sal3!rtl_cache_free+0x19
00000000`00a6c338 000007fe`f38515f9 cppu3!cppu::idestroySequence+0xd9
00000000`00a6c368 000007fe`f3851535 cppu3!cppu::idestroySequence+0x15
00000000`00a6c378 000007fe`f3851669 cppu3!cppu::idestructElements+0x59
00000000`00a6c3a8 000007fe`e9747c68 java_uno!jni

SYMBOL_STACK_INDEX:  5

SYMBOL_NAME:  jvm+1d1d6

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: jvm

IMAGE_NAME:  jvm.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  56fdff45

STACK_COMMAND:  dpS a57000 a70000 ; dps a5ac28 ; kb

FAILURE_BUCKET_ID:  STACK_CORRUPTION_c0000005_jvm.dll!Unknown

BUCKET_ID: 
X64_APPLICATION_FAULT_STACK_CORRUPTION_NULL_CLASS_PTR_READ_jvm+1d1d6

WATSON_STAGEONE_URL: 
http://watson.microsoft.com/StageOne/soffice_bin/5_3_0_3/588aff5d/unknown/0_0_0_0/bbbbbbb4/c0000005/1e564a18.htm?Retriage=1

Followup: MachineOwner
---------





Second Exception during Execution of the QueryValue Statement:



0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

GetUrlPageData2 (WinHttp) failed: 12029.

FAULTING_IP: 
ntdll!RtlpLowFragHeapAllocFromContext+115
00000000`774ef401 410fb711        movzx   edx,word ptr [r9]

EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000774ef401
(ntdll!RtlpLowFragHeapAllocFromContext+0x0000000000000115)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000000001d0a5b10
Attempt to read from address 000000001d0a5b10

FAULTING_THREAD:  0000000000000c94

PROCESS_NAME:  soffice.bin

OVERLAPPED_MODULE: Address regions for 'localedata_euro' and 'faultrep.dll'
overlap

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced
memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced
memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000000001d0a5b10

READ_ADDRESS:  000000001d0a5b10 

FOLLOWUP_IP: 
ntdll!RtlpLowFragHeapAllocFromContext+115
00000000`774ef401 410fb711        movzx   edx,word ptr [r9]

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

APP:  soffice.bin

ADDITIONAL_DEBUG_TEXT:  Enable Pageheap/AutoVerifer ; Followup set based on
attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on
thread:[PSEUDO_THREAD]

LAST_CONTROL_TRANSFER:  from 00000000774edd48 to 00000000774ef401

DEFAULT_BUCKET_ID:  HEAP_CORRUPTION

PRIMARY_PROBLEM_CLASS:  HEAP_CORRUPTION

BUGCHECK_STR: 
APPLICATION_FAULT_HEAP_CORRUPTION_HEAP_CORRUPTION_INVALID_POINTER_READ

STACK_TEXT:  
00000000`00000000 00000000`00000000 heap_corruption!heap_corruption+0x0


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  heap_corruption!heap_corruption

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: heap_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0d

STACK_COMMAND:  ** Pseudo Context ** ; kb

FAILURE_BUCKET_ID:  HEAP_CORRUPTION_c0000005_heap_corruption!heap_corruption

BUCKET_ID: 
X64_APPLICATION_FAULT_HEAP_CORRUPTION_HEAP_CORRUPTION_INVALID_POINTER_READ_heap_corruption!heap_corruption

IMAGE_NAME:  heap_corruption

WATSON_STAGEONE_URL: 
http://watson.microsoft.com/StageOne/soffice_bin/5_3_0_3/588aff5d/ntdll_dll/6_1_7601_23572/57fd0651/c0000005/0004f401.htm?Retriage=1

Followup: MachineOwner
---------



Creating a Dump via Task Manager of Windows during the crash dialog:

0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
icuuc58.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
soffice.bin - 
GetUrlPageData2 (WinHttp) failed: 12029.

FAULTING_IP: 
ntdll!RtlFreeHeap+1a5
00000000`774ef23c 488b7b08        mov     rdi,qword ptr [rbx+8]

EXCEPTION_RECORD:  0000000000a1e280 -- (.exr 0xa1e280)
ExceptionAddress: 00000000774ef23c (ntdll!RtlFreeHeap+0x00000000000001a5)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000009d14995b088
Attempt to read from address 000009d14995b088

FAULTING_THREAD:  0000000000000c94

DEFAULT_BUCKET_ID:  STATUS_BREAKPOINT

PROCESS_NAME:  _socket.pyd

ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION}  Breakpoint  A breakpoint has
been reached.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are
invalid

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

APP:  _socket.pyd

CONTEXT:  0000000000a1dd90 -- (.cxr 0xa1dd90)
rax=00000000063db750 rbx=000009d14995b080 rcx=000000ffffffffff
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=00000000774ef23c rsp=0000000000a1e350 rbp=0000000009de35b0
 r8=0000000009de35a0  r9=0000000000a1e468 r10=2aaaaaaaaaaaaaab
r11=00411addc01000c8 r12=0000000000b20000 r13=0000000000000000
r14=000000000a77d270 r15=000000000a80f600
iopl=0         nv up ei pl nz na pe nc
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
ntdll!RtlFreeHeap+0x1a5:
00000000`774ef23c 488b7b08        mov     rdi,qword ptr [rbx+8]
ds:000009d1`4995b088=????????????????
Resetting default scope

READ_ADDRESS:  000009d14995b088 

FOLLOWUP_IP: 
msvcr120!free+1c [f:\dd\vctools\crt\crtw32\heap\free.c @ 51]
000007fe`f11c69d8 85c0            test    eax,eax

PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT

BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT

LAST_CONTROL_TRANSFER:  from 00000000772a1a0a to 00000000774ef23c

STACK_TEXT:  
00000000`00a1e350 00000000`772a1a0a : 00000000`0a77d270 00000000`00000000
ffffffff`fffffffe 00000000`0a77d270 : ntdll!RtlFreeHeap+0x1a5
00000000`00a1e3d0 000007fe`f11c69d8 : 00000000`00000000 00000000`5fd6a99b
00000000`0a77d270 00000000`00a1e438 : kernel32!HeapFree+0xa
00000000`00a1e400 00000000`5fcaa230 : ffffffff`fffffffe 000007fe`dd3addbf
00000000`0a77d270 00000000`00a1e4c8 : msvcr120!free+0x1c
00000000`00a1e430 00000000`5fd65cb5 : 00000000`09de35b0 0fffffff`ffffffff
00000000`0a851860 000007fe`dd3aecb0 : icuuc58!uprv_free_58+0x40
00000000`00a1e460 000007fe`dd3a9f47 : 00000000`0a77d270 00000000`00000000
00000000`00a1e530 00000000`00a1e528 : icuuc58!ubidi_close_58+0x55
00000000`00a1e490 000007fe`dd3a66cf : 00000000`00000000 000007fe`dfe00e00
00000000`00000005 00000000`062d0858 :
mergedlo!TextEngine::ImpInitWritingDirections+0x147
00000000`00a1e520 000007fe`dd3a772d : 00000000`0a6efd40 00000000`00000000
00000000`0a6efd40 00000000`00a1e570 : mergedlo!TextEngine::CreateLines+0x1af
00000000`00a1e640 000007fe`dd3acc30 : 00000000`09d418e0 00000000`09d418e8
00000000`0a8518a0 00000000`00000001 : mergedlo!TextEngine::FormatDoc+0x11d
00000000`00a1e6f0 000007fe`dd39d650 : 00000000`0a7d16f0 00000000`00a1e818
00000000`00000002 00000000`09d41870 : mergedlo!TextEngine::SetText+0x130
00000000`00a1e770 000007fe`dd2c9d2d : 00000000`0000012c 00000000`0000012c
00000000`0000001b 00000000`0a50ab90 : mergedlo!ImpVclMEdit::SetText+0x30
00000000`00a1e7b0 000007fe`dd2c9f04 : ffffffff`fffffffe 00000000`0a50ab90
00000000`00000000 00000000`00000001 : mergedlo!MessBox::ImplPosControls+0x74d
00000000`00a1e950 000007fe`dd29207c : 00000000`0a50ab90 00000000`0a50ab90
00005a67`085803c0 000007fe`dd292050 : mergedlo!MessBox::StateChanged+0x24
00000000`00a1e980 000007fe`dd32081a : 00000000`0a50ab90 00000000`0a50ab90
00000000`00a1eb00 00000000`0a50ab90 :
mergedlo!vcl::Window::ImplCallInitShow+0x3c
00000000`00a1e9b0 000007fe`dd27d0e7 : 00000000`0a50ab90 00000000`0a50ab90
000007fe`dfe9f720 00000000`00000000 : mergedlo!vcl::Window::Show+0x3fa
00000000`00a1ea50 000007fe`dd27bc77 : ffffffff`fffffffe 00000000`0a50ab90
00000000`0a50ab90 00000000`00a1eba0 :
mergedlo!Dialog::ImplStartExecuteModal+0x137
00000000`00a1eab0 000007fe`dc2ba4b8 : 00000000`0a50ab90 00000000`0a50ab90
00000000`00000002 000007fe`dfe00e30 : mergedlo!Dialog::Execute+0x37
00000000`00a1eb40 000007fe`dc2b1614 : 00000000`12206870 00000000`0a847940
00000000`00a1ecd8 00000000`0a50ab90 : mergedlo!SbRtl_MsgBox+0x2e8
00000000`00a1ec00 000007fe`dc6e83a8 : 00000000`00000000 00000000`00000001
00000000`00a1ecd8 00000000`12206870 : mergedlo!SbiStdObject::Notify+0x174
00000000`00a1ec80 000007fe`dc2e78ce : 00000000`0a847940 00000000`0a84d800
00000000`0a84d898 00000000`00000005 : mergedlo!SfxBroadcaster::Broadcast+0x58
00000000`00a1ecb0 000007fe`dc2e316a : 00000000`0a847940 00000000`0a848200
00000000`0a847940 00000000`00000000 : mergedlo!SbxVariable::Broadcast+0x10e
00000000`00a1ed10 000007fe`dc2e6b86 : 00000000`0a848200 00000000`0a847940
00000000`00000000 00000000`06b19c24 : mergedlo!SbxValue::SbxValue+0xfa
00000000`00a1ed60 000007fe`dc2dbf35 : 00000000`0a848200 00000000`09f61eb0
00000000`00000000 00000000`06b19c24 : mergedlo!SbxVariable::SbxVariable+0x76
00000000`00a1edc0 000007fe`dc2a9448 : 00000000`0a848200 00000000`0a847940
00000000`00000001 000007fe`edbec010 : mergedlo!SbxMethod::SbxMethod+0x75
00000000`00a1ee00 000007fe`dc2a28da : 00000000`09f61eb0 00000000`09dff500
00000000`0000800c 000007fe`00000002 : mergedlo!SbiRuntime::FindElement+0x5e8
00000000`00a1eeb0 000007fe`dc2ab4fd : 00000000`0a800f30 00000000`00000002
00000000`00a1ee80 000007fe`dc2ab360 : mergedlo!SbiRuntime::StepRTL+0x3a
00000000`00a1ef00 000007fe`dc25b208 : 00000000`09f61eb0 00000000`09c1a640
00000000`09c1a640 00000000`0a6d8100 : mergedlo!SbiRuntime::Step+0x1ad
00000000`00a1ef30 000007fe`dc25aba1 : 00000000`09f7c9d0 00000000`0a70e6e0
00000000`098dabe0 00000000`0a70e6e0 : mergedlo!SbModule::Run+0x3e8
00000000`00a1eff0 000007fe`dc6e83a8 : 00000000`00000000 00000000`09f45e20
00000000`00a1f108 00000000`0a70e6e0 : mergedlo!SbModule::Notify+0x531
00000000`00a1f0b0 000007fe`dc257b07 : 00000000`00010000 00000000`0a70e6e0
00000000`00000001 000007fe`dc2d2ff2 : mergedlo!SfxBroadcaster::Broadcast+0x58
00000000`00a1f0e0 000007fe`dc2e4b8d : 00000000`0a70e6e0 00000000`09f7c9d0
00000000`00a1f208 00000000`00000000 : mergedlo!SbMethod::Broadcast+0x137
00000000`00a1f130 000007fe`ec644609 : 00000000`09b40b10 00000000`0a329b90
00000000`0771f320 00000000`00000001 : mergedlo!SbxValue::Get+0x7d
00000000`00a1f160 000007fe`ec61570e : 00000000`0a329b90 00000000`0a329b90
00000000`00000000 00000000`06994a88 : basctllo!basctl::RunMethod+0x29
00000000`00a1f1a0 000007fe`ec616943 : 000007fe`ec780011 00000000`0000001e
000007fe`ec784ce8 000007fe`00000000 :
basctllo!basctl::ModulWindow::BasicExecute+0x26e
00000000`00a1f240 000007fe`ec6343f5 : 00000000`09b9a740 00000000`09c84bf0
00000000`00000000 00000000`09b9a740 :
basctllo!basctl::ModulWindow::ExecuteCommand+0x243
00000000`00a1f2c0 000007fe`dc38992e : 00000000`00000000 00000000`06511b28
00000000`00000000 00000000`09d18ff0 : basctllo!basctl::Shell::ExecuteBasic+0x55
00000000`00a1f300 000007fe`dc38d81a : 00000000`09c84bf0 00000000`09c84bf0
00000000`00a1f401 00000000`0a600ff0 : mergedlo!SfxDispatcher::Call_Impl+0x25e
00000000`00a1f3d0 000007fe`dc5371f1 : 00000000`0a600ff0 00000000`00000000
00000000`00b553e0 00000000`00000000 :
mergedlo!SfxDispatcher::PostMsgHandler+0xba
00000000`00a1f430 000007fe`dd32a6dd : 00000000`004f0248 00000000`004f0248
00000000`00000471 00000000`00000000 :
mergedlo!SfxHintPoster::LinkStubDoEvent_Impl+0x21
00000000`00a1f460 000007fe`dd68c5d8 : 00000000`00000000 00000000`00a1f630
00000000`00000125 00000000`00a1f630 : mergedlo!ImplWindowFrameProc+0x4bd
00000000`00a1f540 000007fe`dd68cb80 : 00000000`00000471 ffff8001`ffff8001
00000000`00a1f624 ffff8001`ffff8001 : mergedlo!SalFrameWndProc+0x7b8
00000000`00a1f600 00000000`773b9bbd : 00000000`010c0c54 00000000`00000482
00000000`00000000 00000000`09d3b810 : mergedlo!SalFrameWndProcW+0x50
00000000`00a1f670 00000000`773b98c2 : 00000000`00a1f7e0 000007fe`dd68cb30
00000000`00000001 00000000`01311e00 : user32!UserCallWinProcCheckWow+0x1ad
00000000`00a1f730 000007fe`dd64df45 : 00000000`00000000 00000000`00b222c0
000007fe`dd68cb30 00000000`00000001 : user32!DispatchMessageWorker+0x3b5
00000000`00a1f7b0 000007fe`dd64dcf1 : 00000000`00000001 00000000`00000001
00000000`00a1f720 000007fe`dd64dc1f : mergedlo!ImplSalYield+0x85
00000000`00a1f820 000007fe`dd57a126 : 00000000`00c050c0 000007fe`dfe9f720
00000000`00000000 00000000`00b222c0 : mergedlo!WinSalInstance::DoYield+0xf1
00000000`00a1f880 000007fe`dd57871d : 00000000`098fd7a0 00000000`052b84d8
000007fe`f3893750 00000000`00c05420 : mergedlo!ImplYield+0x86
00000000`00a1f8e0 000007fe`dc5e4c99 : 00000000`00000000 00000000`0273d718
00000000`00000000 00000000`00000000 : mergedlo!Application::Execute+0x13d
00000000`00a1f940 000007fe`dd58062e : 00000000`03757c40 00000000`00000000
00000000`00000001 000007fe`dfe9f720 : mergedlo!desktop::Desktop::Main+0x10f9
00000000`00a1fbc0 000007fe`dd5809d2 : 00000000`00000000 00000000`00000000
00000000`00000001 00000000`00000001 : mergedlo!ImplSVMain+0x6e
00000000`00a1fc00 000007fe`dc602cfd : 00000000`00000000 00000000`00000001
00000000`00e05328 00000000`00000000 : mergedlo!SVMain+0x32
00000000`00a1fc30 00000001`3f4d102e : 00000000`00b64fd0 00000000`00800000
00000000`00b240f5 00000000`00000001 : mergedlo!soffice_main+0x11d
00000000`00a1fe80 00000001`3f4d139d : 00000000`00b240f3 00000000`00000001
00000000`00000001 01d29717`14df4913 : soffice+0x102e
00000000`00a1feb0 00000000`772959cd : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : soffice!main+0x35d
00000000`00a1fef0 00000000`774ca561 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`00a1ff20 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d


FAULTING_SOURCE_LINE:  f:\dd\vctools\crt\crtw32\heap\free.c

FAULTING_SOURCE_FILE:  f:\dd\vctools\crt\crtw32\heap\free.c

FAULTING_SOURCE_LINE_NUMBER:  51

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  msvcr120!free+1c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: msvcr120

IMAGE_NAME:  msvcr120.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  524f83ff

STACK_COMMAND:  .cxr 0xa1dd90 ; kb

FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_msvcr120.dll!free

BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_BREAKPOINT_msvcr120!free+1c

WATSON_STAGEONE_URL: 
http://watson.microsoft.com/StageOne/_socket_pyd/0_0_0_0/588af606/unknown/0_0_0_0/bbbbbbb4/80000003/00000000.htm?Retriage=1

Followup: MachineOwner
---------

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to