Attachment 185980 Details for Bug 154205 – report from running under clang-asan

report from running under clang-asan

asan-report.txt (text/plain), 42.41 KB, created by Noel Grandin on 2023-03-15 12:59:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Noel Grandin

Created: 2023-03-15 12:59:25 UTC

Size: 42.41 KB

patch

obsolete

>noel@librebuild3:~/libo-asan$ ./instdir/program/soffice.bin ../Downloads/crash-after-reload.odt 
>warn:xmloff:396621:396621:xmloff/source/text/txtparai.cxx:356: unknown attribute http://www.w3.org/1999/xlink xlink:type value=simple
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/doc/doclay.cxx:1616: Found a FlySection but not a Format!
>warn:legacy.osl:396621:396621:sw/source/core/doc/doclay.cxx:1616: Found a FlySection but not a Format!
>warn:legacy.osl:396621:396621:sw/source/core/doc/doclay.cxx:1616: Found a FlySection but not a Format!
>warn:xmloff:396621:396621:xmloff/source/text/txtparai.cxx:356: unknown attribute http://www.w3.org/1999/xlink xlink:type value=simple
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/layout/tabfrm.cxx:116: SwTabFrame::SwTabFrame: No rows.
>warn:legacy.osl:396621:396621:sw/source/core/doc/doclay.cxx:1616: Found a FlySection but not a Format!
>warn:legacy.osl:396621:396621:sw/source/core/doc/doclay.cxx:1616: Found a FlySection but not a Format!
>warn:legacy.osl:396621:396621:sw/source/core/doc/doclay.cxx:1616: Found a FlySection but not a Format!
>sw/source/core/docnode/ndtbl.cxx:2447:70: runtime error: member call on address 0x616000566180 which does not point to an object of type 'SwRootFrame'
>0x616000566180: note: object has invalid vptr
> 00 00 00 00  c1 4d 05 00 00 00 00 00  1c 01 00 00 00 00 00 00  1c 01 00 00 00 00 00 00  82 2e 00 00
>              ^~~~~~~~~~~~~~~~~~~~~~~
>              invalid vptr
>    #0 0x7f81eb4a31ab in SwTableNode::DelFrames(SwRootFrame const*) sw/source/core/docnode/ndtbl.cxx:2447:70
>    #1 0x7f81eb4bfff8 in SwTableNode::~SwTableNode() sw/source/core/docnode/ndtbl.cxx:2325:5
>    #2 0x7f81eb4c03d8 in SwTableNode::~SwTableNode() sw/source/core/docnode/ndtbl.cxx:2322:1
>    #3 0x7f81eb6b4dec in SwNodes::RemoveNode(o3tl::strong_int<int, Tag_SwNodeOffset>, o3tl::strong_int<int, Tag_SwNodeOffset>, bool) sw/source/core/docnode/nodes.cxx:2484:13
>    #4 0x7f81eb6cefb3 in SwNodes::DelNodes(SwNodeIndex const&, o3tl::strong_int<int, Tag_SwNodeOffset>) sw/source/core/docnode/nodes.cxx:1393:17
>    #5 0x7f81ea691f34 in SwDoc::~SwDoc() sw/source/core/doc/docnew.cxx:504:15
>    #6 0x7f81ea078a85 in SwDoc::release() sw/source/core/doc/doc.cxx:121:9
>    #7 0x7f81eb5308c6 in rtl::Reference<SwDoc>::clear() include/rtl/ref.hxx:196:19
>    #8 0x7f81efde9cf5 in SwDocShell::RemoveLink() sw/source/uibase/app/docshini.cxx:444:16
>    #9 0x7f81efde8b47 in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:372:5
>    #10 0x7f81efde9f1f in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:362:1
>    #11 0x7f81efdea0a8 in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:362:1
>    #12 0x7f8221e11714 in SvRefBase::ReleaseRef() include/tools/ref.hxx:163:29
>    #13 0x7f8221e10510 in SotObject::OwnerLock(bool) sot/source/base/object.cxx:47:9
>    #14 0x7f8257f1dc67 in SfxObjectShellLock::~SfxObjectShellLock() include/sfx2/objsh.hxx:871:15
>    #15 0x7f825a25b1de in SfxViewFrame::ExecReload_Impl(SfxRequest&) sfx2/source/view/viewfrm.cxx:890:9
>    #16 0x7f825a242444 in SfxStubSfxViewFrameExecReload_Impl(SfxShell*, SfxRequest&) workdir/SdiTarget/sfx2/sdi/sfxslots.hxx:757:1
>    #17 0x7f825851e784 in SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) sfx2/source/control/dispatch.cxx:254:9
>    #18 0x7f82585216ca in SfxDispatcher::PostMsgHandler(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) sfx2/source/control/dispatch.cxx:992:13
>    #19 0x7f82585f80f4 in void std::__invoke_impl<void, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_memfun_deref, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:74:14
>    #20 0x7f82585f7c18 in std::__invoke_result<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>::type std::__invoke<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:96:14
>    #21 0x7f82585f7a35 in void std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::__call<void, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&, 0ul, 1ul>(std::tuple<std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&>&&, std::_Index_tuple<0ul, 1ul>) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/functional:484:11
>    #22 0x7f82585f76a1 in void std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::operator()<std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>, void>(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/functional:567:17
>    #23 0x7f82585f753c in void std::__invoke_impl<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_other, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:61:14
>    #24 0x7f82585f73ec in std::enable_if<is_invocable_r_v<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>, void>::type std::__invoke_r<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:111:2
>    #25 0x7f82585f6b38 in std::_Function_handler<void (std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>>::_M_invoke(std::_Any_data const&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/std_function.h:290:9
>    #26 0x7f8259bd3f1e in std::function<void (std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::operator()(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) const /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/std_function.h:591:9
>    #27 0x7f8259bd33d0 in SfxHintPoster::DoEvent_Impl(void*) sfx2/source/notify/hintpost.cxx:43:9
>    #28 0x7f8259bd30e8 in SfxHintPoster::LinkStubDoEvent_Impl(void*, void*) sfx2/source/notify/hintpost.cxx:39:1
>    #29 0x7f82342305d2 in Link<void*, void>::Call(void*) const include/tools/link.hxx:111:45
>    #30 0x7f8234217020 in ImplHandleUserEvent(ImplSVEvent*) vcl/source/window/winproc.cxx:2287:30
>    #31 0x7f8234201e9a in ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) vcl/source/window/winproc.cxx:2857:13
>    #32 0x7f8237cbd387 in SalFrame::CallCallback(SalEvent, void const*) const vcl/inc/salframe.hxx:308:29
>    #33 0x7f8237d8893b in SalGenericDisplay::ProcessEvent(SalUserEventList::SalUserEvent) vcl/unx/generic/app/gendisp.cxx:66:22
>    #34 0x7f82366d97be in SalUserEventList::DispatchUserEvents(bool)::$_0::operator()() const vcl/source/app/salusereventlist.cxx:119:58
>    #35 0x7f82366d8f41 in SalUserEventList::DispatchUserEvents(bool) vcl/source/app/salusereventlist.cxx:120:13
>    #36 0x7f8237d883d7 in SalGenericDisplay::DispatchInternalEvent(bool) vcl/unx/generic/app/gendisp.cxx:51:12
>    #37 0x7f820d9f6927 in call_userEventFn(void*) vcl/unx/gtk3/gtkdata.cxx:824:27
>    #38 0x7f826751c43e in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5643e) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #39 0x7f82675713c7  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xab3c7) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #40 0x7f8267519d1f in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x53d1f) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #41 0x7f820d9f1157 in GtkSalData::Yield(bool, bool) vcl/unx/gtk3/gtkdata.cxx:405:31
>    #42 0x7f820da0a0fd in GtkInstance::DoYield(bool, bool) vcl/unx/gtk3/gtkinst.cxx:432:29
>    #43 0x7f8236b38738 in ImplYield(bool, bool) vcl/source/app/svapp.cxx:481:48
>    #44 0x7f8236b36cf8 in Application::Yield() vcl/source/app/svapp.cxx:565:5
>    #45 0x7f8236b3644b in Application::Execute() vcl/source/app/svapp.cxx:459:13
>    #46 0x7f826e8665b7 in desktop::Desktop::Main() desktop/source/app/app.cxx:1607:13
>    #47 0x7f8236bdae7a in ImplSVMain() vcl/source/app/svmain.cxx:203:35
>    #48 0x7f8236be37a0 in SVMain() vcl/source/app/svmain.cxx:235:12
>    #49 0x7f826ea5a394 in soffice_main desktop/source/app/sofficemain.cxx:94:12
>    #50 0x55f4c28b6b7c in sal_main desktop/source/app/main.c:51:15
>    #51 0x55f4c28b6b56 in main desktop/source/app/main.c:49:1
>    #52 0x7f826dc2350f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
>    #53 0x7f826dc235c8 in __libc_start_main csu/../csu/libc-start.c:381:3
>    #54 0x55f4c27672b4 in _start (instdir/program/soffice.bin+0x1e2b4)
>
>SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior sw/source/core/docnode/ndtbl.cxx:2447:70 in 
>sw/source/core/inc/rootfrm.hxx:210:48: runtime error: member access within address 0x616000566180 which does not point to an object of type 'const SwRootFrame'
>0x616000566180: note: object has invalid vptr
> 00 00 00 00  c1 4d 05 00 00 00 00 00  1c 01 00 00 00 00 00 00  1c 01 00 00 00 00 00 00  82 2e 00 00
>              ^~~~~~~~~~~~~~~~~~~~~~~
>              invalid vptr
>    #0 0x7f81e9dd09f7 in SwRootFrame::GetCurrShell() const sw/source/core/inc/rootfrm.hxx:210:48
>    #1 0x7f81eb4a31bc in SwTableNode::DelFrames(SwRootFrame const*) sw/source/core/docnode/ndtbl.cxx:2447:70
>    #2 0x7f81eb4bfff8 in SwTableNode::~SwTableNode() sw/source/core/docnode/ndtbl.cxx:2325:5
>    #3 0x7f81eb4c03d8 in SwTableNode::~SwTableNode() sw/source/core/docnode/ndtbl.cxx:2322:1
>    #4 0x7f81eb6b4dec in SwNodes::RemoveNode(o3tl::strong_int<int, Tag_SwNodeOffset>, o3tl::strong_int<int, Tag_SwNodeOffset>, bool) sw/source/core/docnode/nodes.cxx:2484:13
>    #5 0x7f81eb6cefb3 in SwNodes::DelNodes(SwNodeIndex const&, o3tl::strong_int<int, Tag_SwNodeOffset>) sw/source/core/docnode/nodes.cxx:1393:17
>    #6 0x7f81ea691f34 in SwDoc::~SwDoc() sw/source/core/doc/docnew.cxx:504:15
>    #7 0x7f81ea078a85 in SwDoc::release() sw/source/core/doc/doc.cxx:121:9
>    #8 0x7f81eb5308c6 in rtl::Reference<SwDoc>::clear() include/rtl/ref.hxx:196:19
>    #9 0x7f81efde9cf5 in SwDocShell::RemoveLink() sw/source/uibase/app/docshini.cxx:444:16
>    #10 0x7f81efde8b47 in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:372:5
>    #11 0x7f81efde9f1f in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:362:1
>    #12 0x7f81efdea0a8 in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:362:1
>    #13 0x7f8221e11714 in SvRefBase::ReleaseRef() include/tools/ref.hxx:163:29
>    #14 0x7f8221e10510 in SotObject::OwnerLock(bool) sot/source/base/object.cxx:47:9
>    #15 0x7f8257f1dc67 in SfxObjectShellLock::~SfxObjectShellLock() include/sfx2/objsh.hxx:871:15
>    #16 0x7f825a25b1de in SfxViewFrame::ExecReload_Impl(SfxRequest&) sfx2/source/view/viewfrm.cxx:890:9
>    #17 0x7f825a242444 in SfxStubSfxViewFrameExecReload_Impl(SfxShell*, SfxRequest&) workdir/SdiTarget/sfx2/sdi/sfxslots.hxx:757:1
>    #18 0x7f825851e784 in SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) sfx2/source/control/dispatch.cxx:254:9
>    #19 0x7f82585216ca in SfxDispatcher::PostMsgHandler(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) sfx2/source/control/dispatch.cxx:992:13
>    #20 0x7f82585f80f4 in void std::__invoke_impl<void, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_memfun_deref, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:74:14
>    #21 0x7f82585f7c18 in std::__invoke_result<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>::type std::__invoke<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:96:14
>    #22 0x7f82585f7a35 in void std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::__call<void, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&, 0ul, 1ul>(std::tuple<std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&>&&, std::_Index_tuple<0ul, 1ul>) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/functional:484:11
>    #23 0x7f82585f76a1 in void std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::operator()<std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>, void>(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/functional:567:17
>    #24 0x7f82585f753c in void std::__invoke_impl<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_other, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:61:14
>    #25 0x7f82585f73ec in std::enable_if<is_invocable_r_v<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>, void>::type std::__invoke_r<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:111:2
>    #26 0x7f82585f6b38 in std::_Function_handler<void (std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>>::_M_invoke(std::_Any_data const&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/std_function.h:290:9
>    #27 0x7f8259bd3f1e in std::function<void (std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::operator()(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) const /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/std_function.h:591:9
>    #28 0x7f8259bd33d0 in SfxHintPoster::DoEvent_Impl(void*) sfx2/source/notify/hintpost.cxx:43:9
>    #29 0x7f8259bd30e8 in SfxHintPoster::LinkStubDoEvent_Impl(void*, void*) sfx2/source/notify/hintpost.cxx:39:1
>    #30 0x7f82342305d2 in Link<void*, void>::Call(void*) const include/tools/link.hxx:111:45
>    #31 0x7f8234217020 in ImplHandleUserEvent(ImplSVEvent*) vcl/source/window/winproc.cxx:2287:30
>    #32 0x7f8234201e9a in ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) vcl/source/window/winproc.cxx:2857:13
>    #33 0x7f8237cbd387 in SalFrame::CallCallback(SalEvent, void const*) const vcl/inc/salframe.hxx:308:29
>    #34 0x7f8237d8893b in SalGenericDisplay::ProcessEvent(SalUserEventList::SalUserEvent) vcl/unx/generic/app/gendisp.cxx:66:22
>    #35 0x7f82366d97be in SalUserEventList::DispatchUserEvents(bool)::$_0::operator()() const vcl/source/app/salusereventlist.cxx:119:58
>    #36 0x7f82366d8f41 in SalUserEventList::DispatchUserEvents(bool) vcl/source/app/salusereventlist.cxx:120:13
>    #37 0x7f8237d883d7 in SalGenericDisplay::DispatchInternalEvent(bool) vcl/unx/generic/app/gendisp.cxx:51:12
>    #38 0x7f820d9f6927 in call_userEventFn(void*) vcl/unx/gtk3/gtkdata.cxx:824:27
>    #39 0x7f826751c43e in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5643e) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #40 0x7f82675713c7  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xab3c7) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #41 0x7f8267519d1f in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x53d1f) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #42 0x7f820d9f1157 in GtkSalData::Yield(bool, bool) vcl/unx/gtk3/gtkdata.cxx:405:31
>    #43 0x7f820da0a0fd in GtkInstance::DoYield(bool, bool) vcl/unx/gtk3/gtkinst.cxx:432:29
>    #44 0x7f8236b38738 in ImplYield(bool, bool) vcl/source/app/svapp.cxx:481:48
>    #45 0x7f8236b36cf8 in Application::Yield() vcl/source/app/svapp.cxx:565:5
>    #46 0x7f8236b3644b in Application::Execute() vcl/source/app/svapp.cxx:459:13
>    #47 0x7f826e8665b7 in desktop::Desktop::Main() desktop/source/app/app.cxx:1607:13
>    #48 0x7f8236bdae7a in ImplSVMain() vcl/source/app/svmain.cxx:203:35
>    #49 0x7f8236be37a0 in SVMain() vcl/source/app/svmain.cxx:235:12
>    #50 0x7f826ea5a394 in soffice_main desktop/source/app/sofficemain.cxx:94:12
>    #51 0x55f4c28b6b7c in sal_main desktop/source/app/main.c:51:15
>    #52 0x55f4c28b6b56 in main desktop/source/app/main.c:49:1
>    #53 0x7f826dc2350f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
>    #54 0x7f826dc235c8 in __libc_start_main csu/../csu/libc-start.c:381:3
>    #55 0x55f4c27672b4 in _start (instdir/program/soffice.bin+0x1e2b4)
>
>SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior sw/source/core/inc/rootfrm.hxx:210:48 in 
>=================================================================
>==396621==ERROR: AddressSanitizer: heap-use-after-free on address 0x616000566370 at pc 0x7f81e9dd0a20 bp 0x7ffefcf71780 sp 0x7ffefcf71778
>READ of size 8 at 0x616000566370 thread T0
>    #0 0x7f81e9dd0a1f in SwRootFrame::GetCurrShell() const sw/source/core/inc/rootfrm.hxx:210:48
>    #1 0x7f81eb4a31bc in SwTableNode::DelFrames(SwRootFrame const*) sw/source/core/docnode/ndtbl.cxx:2447:70
>    #2 0x7f81eb4bfff8 in SwTableNode::~SwTableNode() sw/source/core/docnode/ndtbl.cxx:2325:5
>    #3 0x7f81eb4c03d8 in SwTableNode::~SwTableNode() sw/source/core/docnode/ndtbl.cxx:2322:1
>    #4 0x7f81eb6b4dec in SwNodes::RemoveNode(o3tl::strong_int<int, Tag_SwNodeOffset>, o3tl::strong_int<int, Tag_SwNodeOffset>, bool) sw/source/core/docnode/nodes.cxx:2484:13
>    #5 0x7f81eb6cefb3 in SwNodes::DelNodes(SwNodeIndex const&, o3tl::strong_int<int, Tag_SwNodeOffset>) sw/source/core/docnode/nodes.cxx:1393:17
>    #6 0x7f81ea691f34 in SwDoc::~SwDoc() sw/source/core/doc/docnew.cxx:504:15
>    #7 0x7f81ea078a85 in SwDoc::release() sw/source/core/doc/doc.cxx:121:9
>    #8 0x7f81eb5308c6 in rtl::Reference<SwDoc>::clear() include/rtl/ref.hxx:196:19
>    #9 0x7f81efde9cf5 in SwDocShell::RemoveLink() sw/source/uibase/app/docshini.cxx:444:16
>    #10 0x7f81efde8b47 in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:372:5
>    #11 0x7f81efde9f1f in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:362:1
>    #12 0x7f81efdea0a8 in SwDocShell::~SwDocShell() sw/source/uibase/app/docshini.cxx:362:1
>    #13 0x7f8221e11714 in SvRefBase::ReleaseRef() include/tools/ref.hxx:163:29
>    #14 0x7f8221e10510 in SotObject::OwnerLock(bool) sot/source/base/object.cxx:47:9
>    #15 0x7f8257f1dc67 in SfxObjectShellLock::~SfxObjectShellLock() include/sfx2/objsh.hxx:871:15
>    #16 0x7f825a25b1de in SfxViewFrame::ExecReload_Impl(SfxRequest&) sfx2/source/view/viewfrm.cxx:890:9
>    #17 0x7f825a242444 in SfxStubSfxViewFrameExecReload_Impl(SfxShell*, SfxRequest&) workdir/SdiTarget/sfx2/sdi/sfxslots.hxx:757:1
>    #18 0x7f825851e784 in SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) sfx2/source/control/dispatch.cxx:254:9
>    #19 0x7f82585216ca in SfxDispatcher::PostMsgHandler(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) sfx2/source/control/dispatch.cxx:992:13
>    #20 0x7f82585f80f4 in void std::__invoke_impl<void, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_memfun_deref, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:74:14
>    #21 0x7f82585f7c18 in std::__invoke_result<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>::type std::__invoke<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:96:14
>    #22 0x7f82585f7a35 in void std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::__call<void, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&, 0ul, 1ul>(std::tuple<std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&>&&, std::_Index_tuple<0ul, 1ul>) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/functional:484:11
>    #23 0x7f82585f76a1 in void std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::operator()<std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>, void>(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/functional:567:17
>    #24 0x7f82585f753c in void std::__invoke_impl<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_other, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:61:14
>    #25 0x7f82585f73ec in std::enable_if<is_invocable_r_v<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>, void>::type std::__invoke_r<void, std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:111:2
>    #26 0x7f82585f6b38 in std::_Function_handler<void (std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), std::_Bind<void (SfxDispatcher::* (SfxDispatcher*, std::_Placeholder<1>))(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>>::_M_invoke(std::_Any_data const&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/std_function.h:290:9
>    #27 0x7f8259bd3f1e in std::function<void (std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>)>::operator()(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) const /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/std_function.h:591:9
>    #28 0x7f8259bd33d0 in SfxHintPoster::DoEvent_Impl(void*) sfx2/source/notify/hintpost.cxx:43:9
>    #29 0x7f8259bd30e8 in SfxHintPoster::LinkStubDoEvent_Impl(void*, void*) sfx2/source/notify/hintpost.cxx:39:1
>    #30 0x7f82342305d2 in Link<void*, void>::Call(void*) const include/tools/link.hxx:111:45
>    #31 0x7f8234217020 in ImplHandleUserEvent(ImplSVEvent*) vcl/source/window/winproc.cxx:2287:30
>    #32 0x7f8234201e9a in ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) vcl/source/window/winproc.cxx:2857:13
>    #33 0x7f8237cbd387 in SalFrame::CallCallback(SalEvent, void const*) const vcl/inc/salframe.hxx:308:29
>    #34 0x7f8237d8893b in SalGenericDisplay::ProcessEvent(SalUserEventList::SalUserEvent) vcl/unx/generic/app/gendisp.cxx:66:22
>    #35 0x7f82366d97be in SalUserEventList::DispatchUserEvents(bool)::$_0::operator()() const vcl/source/app/salusereventlist.cxx:119:58
>    #36 0x7f82366d8f41 in SalUserEventList::DispatchUserEvents(bool) vcl/source/app/salusereventlist.cxx:120:13
>    #37 0x7f8237d883d7 in SalGenericDisplay::DispatchInternalEvent(bool) vcl/unx/generic/app/gendisp.cxx:51:12
>    #38 0x7f820d9f6927 in call_userEventFn(void*) vcl/unx/gtk3/gtkdata.cxx:824:27
>    #39 0x7f826751c43e in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5643e) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #40 0x7f82675713c7  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xab3c7) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #41 0x7f8267519d1f in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x53d1f) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>    #42 0x7f820d9f1157 in GtkSalData::Yield(bool, bool) vcl/unx/gtk3/gtkdata.cxx:405:31
>    #43 0x7f820da0a0fd in GtkInstance::DoYield(bool, bool) vcl/unx/gtk3/gtkinst.cxx:432:29
>    #44 0x7f8236b38738 in ImplYield(bool, bool) vcl/source/app/svapp.cxx:481:48
>    #45 0x7f8236b36cf8 in Application::Yield() vcl/source/app/svapp.cxx:565:5
>    #46 0x7f8236b3644b in Application::Execute() vcl/source/app/svapp.cxx:459:13
>    #47 0x7f826e8665b7 in desktop::Desktop::Main() desktop/source/app/app.cxx:1607:13
>    #48 0x7f8236bdae7a in ImplSVMain() vcl/source/app/svmain.cxx:203:35
>    #49 0x7f8236be37a0 in SVMain() vcl/source/app/svmain.cxx:235:12
>    #50 0x7f826ea5a394 in soffice_main desktop/source/app/sofficemain.cxx:94:12
>    #51 0x55f4c28b6b7c in sal_main desktop/source/app/main.c:51:15
>    #52 0x55f4c28b6b56 in main desktop/source/app/main.c:49:1
>    #53 0x7f826dc2350f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
>    #54 0x7f826dc235c8 in __libc_start_main csu/../csu/libc-start.c:381:3
>    #55 0x55f4c27672b4 in _start (instdir/program/soffice.bin+0x1e2b4)
>
>0x616000566370 is located 496 bytes inside of 544-byte region [0x616000566180,0x6160005663a0)
>freed by thread T0 here:
>    #0 0x55f4c28b4bc8 in operator delete(void*, unsigned long) /home/noel/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:164:3
>    #1 0x7f81ec7423a6 in SwRootFrame::~SwRootFrame() sw/source/core/layout/newfrm.cxx:570:1
>    #2 0x7f81eca4d9c3 in SwFrame::DestroyFrame(SwFrame*) sw/source/core/layout/ssfrm.cxx:395:9
>    #3 0x7f81ef016e9a in std::_Sp_counted_deleter<SwRootFrame*, void (*)(SwFrame*), std::allocator<void>, (__gnu_cxx::_Lock_policy)2>::_M_dispose() /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/shared_ptr_base.h:527:9
>    #4 0x7f81e925a8cc in std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release() /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/shared_ptr_base.h:346:8
>    #5 0x7f81e925a4b9 in std::__shared_count<(__gnu_cxx::_Lock_policy)2>::~__shared_count() /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/shared_ptr_base.h:1071:11
>    #6 0x7f81ef017d8c in std::__shared_ptr<SwRootFrame, (__gnu_cxx::_Lock_policy)2>::~__shared_ptr() /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/shared_ptr_base.h:1524:31
>    #7 0x7f81ef011398 in std::shared_ptr<SwRootFrame>::~shared_ptr() /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/shared_ptr.h:175:11
>    #8 0x7f81ef010849 in SwViewShell::~SwViewShell() sw/source/core/view/vnew.cxx:356:1
>    #9 0x7f81e9b459e6 in SwCursorShell::~SwCursorShell() sw/source/core/crsr/crsrsh.cxx:3066:1
>    #10 0x7f81ebc351a8 in SwEditShell::~SwEditShell() sw/source/core/edit/edws.cxx:63:1
>    #11 0x7f81ec09b2ae in SwFEShell::~SwFEShell() sw/source/core/frmedt/fews.cxx:682:1
>    #12 0x7f81f1c86a19 in SwWrtShell::~SwWrtShell() sw/source/uibase/wrtsh/wrtsh1.cxx:2033:1
>    #13 0x7f81f129426c in std::default_delete<SwWrtShell>::operator()(SwWrtShell*) const /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/unique_ptr.h:95:2
>    #14 0x7f81f1296a74 in std::__uniq_ptr_impl<SwWrtShell, std::default_delete<SwWrtShell>>::reset(SwWrtShell*) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/unique_ptr.h:203:4
>    #15 0x7f81f128b992 in std::unique_ptr<SwWrtShell, std::default_delete<SwWrtShell>>::reset(SwWrtShell*) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/unique_ptr.h:501:7
>    #16 0x7f81f1264e75 in SwView::~SwView() sw/source/uibase/uiview/view.cxx:1146:17
>    #17 0x7f81f1265af8 in SwView::~SwView() sw/source/uibase/uiview/view.cxx:1111:1
>    #18 0x7f825a27e822 in SfxViewFrame::ReleaseObjectShell_Impl() sfx2/source/view/viewfrm.cxx:1117:9
>    #19 0x7f825a2a2ab2 in SfxViewFrame::~SfxViewFrame() sfx2/source/view/viewfrm.cxx:1908:5
>    #20 0x7f825a28b615 in SfxViewFrame::Close() sfx2/source/view/viewfrm.cxx:1169:5
>    #21 0x7f825a086683 in SfxFrame::DoClose_Impl() sfx2/source/view/frame.cxx:138:37
>    #22 0x7f825a1a4bce in SfxBaseController::dispose() sfx2/source/view/sfxbasecontroller.cxx:928:27
>    #23 0x7f8260f552e8 in (anonymous namespace)::XFrameImpl::setComponent(com::sun::star::uno::Reference<com::sun::star::awt::XWindow> const&, com::sun::star::uno::Reference<com::sun::star::frame::XController> const&) framework/source/services/frame.cxx:1493:33
>    #24 0x7f825a0ec8c8 in utl::ConnectFrameControllerModel(com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&, com::sun::star::uno::Reference<com::sun::star::frame::XController2> const&, com::sun::star::uno::Reference<com::sun::star::frame::XModel> const&) include/unotools/fcm.hxx:45:17
>    #25 0x7f825a0e006e in (anonymous namespace)::SfxFrameLoader_Impl::impl_createDocumentView(com::sun::star::uno::Reference<com::sun::star::frame::XModel2> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&, comphelper::NamedValueCollection const&, rtl::OUString const&) sfx2/source/view/frmload.cxx:584:5
>    #26 0x7f825a0d78e2 in (anonymous namespace)::SfxFrameLoader_Impl::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&) sfx2/source/view/frmload.cxx:759:13
>    #27 0x7f8260e37682 in framework::LoadEnv::impl_loadContent() framework/source/loadenv/loadenv.cxx:1167:37
>    #28 0x7f8260e2dc76 in framework::LoadEnv::start() framework/source/loadenv/loadenv.cxx:403:20
>    #29 0x7f8260e26290 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&, rtl::OUString const&, int, LoadEnvFeatures) framework/source/loadenv/loadenv.cxx:308:5
>    #30 0x7f8260e216d2 in framework::LoadEnv::loadComponentFromURL(com::sun::star::uno::Reference<com::sun::star::frame::XComponentLoader> const&, com::sun::star::uno::Reference<com::sun::star::uno::XComponentContext> const&, rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) framework/source/loadenv/loadenv.cxx:168:14
>    #31 0x7f8260f48a72 in (anonymous namespace)::XFrameImpl::loadComponentFromURL(rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) framework/source/services/frame.cxx:595:16
>    #32 0x7f8260f6afd6 in non-virtual thunk to (anonymous namespace)::XFrameImpl::loadComponentFromURL(rtl::OUString const&, rtl::OUString const&, int, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) framework/source/services/frame.cxx
>    #33 0x7f825a27c93f in SfxViewFrame::LoadViewIntoFrame_Impl(SfxObjectShell const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, o3tl::strong_int<unsigned short, SfxInterfaceIdTag>, bool) sfx2/source/view/viewfrm.cxx:2294:14
>    #34 0x7f825a2591d4 in SfxViewFrame::ExecReload_Impl(SfxRequest&) sfx2/source/view/viewfrm.cxx:842:29
>    #35 0x7f825a242444 in SfxStubSfxViewFrameExecReload_Impl(SfxShell*, SfxRequest&) workdir/SdiTarget/sfx2/sdi/sfxslots.hxx:757:1
>    #36 0x7f825851e784 in SfxDispatcher::Call_Impl(SfxShell&, SfxSlot const&, SfxRequest&, bool) sfx2/source/control/dispatch.cxx:254:9
>    #37 0x7f82585216ca in SfxDispatcher::PostMsgHandler(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>) sfx2/source/control/dispatch.cxx:992:13
>    #38 0x7f82585f80f4 in void std::__invoke_impl<void, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(std::__invoke_memfun_deref, void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:74:14
>    #39 0x7f82585f7c18 in std::__invoke_result<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>::type std::__invoke<void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>>(void (SfxDispatcher::*&)(std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>), SfxDispatcher*&, std::unique_ptr<SfxRequest, std::default_delete<SfxRequest>>&&) /usr/lib/gcc/x86_64-linux-gnu/12/../../../../include/c++/12/bits/invoke.h:96:14
>
>previously allocated by thread T0 here:
>    #0 0x55f4c28b3c08 in operator new(unsigned long) /home/noel/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:95:3
>    #1 0x7f81ef006532 in SwViewShell::Init(SwViewOption const*) sw/source/core/view/vnew.cxx:126:39
>    #2 0x7f81ef008e9a in SwViewShell::SwViewShell(SwDoc&, vcl::Window*, SwViewOption const*, OutputDevice*, long) sw/source/core/view/vnew.cxx:180:5
>    #3 0x7f81e9b41d8b in SwCursorShell::SwCursorShell(SwDoc&, vcl::Window*, SwViewOption const*) sw/source/core/crsr/crsrsh.cxx:2995:7
>    #4 0x7f81ebc34ca7 in SwEditShell::SwEditShell(SwDoc&, vcl::Window*, SwViewOption const*) sw/source/core/edit/edws.cxx:48:7
>    #5 0x7f81ec09aa87 in SwFEShell::SwFEShell(SwDoc&, vcl::Window*, SwViewOption const*) sw/source/core/frmedt/fews.cxx:663:7
>    #6 0x7f81f1c84c41 in SwWrtShell::SwWrtShell(SwDoc&, vcl::Window*, SwView&, SwViewOption const*) sw/source/uibase/wrtsh/wrtsh1.cxx:2009:7
>    #7 0x7f81f1255cc1 in SwView::SwView(SfxViewFrame&, SfxViewShell*) sw/source/uibase/uiview/view.cxx:892:31
>    #8 0x7f81f12a5aa9 in SwView::CreateInstance(SfxViewFrame&, SfxViewShell*) sw/source/uibase/uiview/view0.cxx:73:1
>    #9 0x7f825a241070 in SfxViewFactory::CreateInstance(SfxViewFrame&, SfxViewShell*) sfx2/source/view/viewfac.cxx:26:12
>    #10 0x7f8259967a3d in SfxBaseModel::createViewController(rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&) sfx2/source/doc/sfxbasemodel.cxx:4269:46
>    #11 0x7f825996a54e in non-virtual thunk to SfxBaseModel::createViewController(rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&) sfx2/source/doc/sfxbasemodel.cxx
>    #12 0x7f825a0dff22 in (anonymous namespace)::SfxFrameLoader_Impl::impl_createDocumentView(com::sun::star::uno::Reference<com::sun::star::frame::XModel2> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&, comphelper::NamedValueCollection const&, rtl::OUString const&) sfx2/source/view/frmload.cxx:577:60
>    #13 0x7f825a0d78e2 in (anonymous namespace)::SfxFrameLoader_Impl::load(com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&) sfx2/source/view/frmload.cxx:759:13
>    #14 0x7f8260e37682 in framework::LoadEnv::impl_loadContent() framework/source/loadenv/loadenv.cxx:1167:37
>    #15 0x7f8260e2dc76 in framework::LoadEnv::start() framework/source/loadenv/loadenv.cxx:403:20
>    #16 0x7f8260e26290 in framework::LoadEnv::startLoading(rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XFrame> const&, rtl::OUString const&, int, LoadEnvFeatures) framework/source/loadenv/loadenv.cxx:308:5
>    #17 0x7f82607da940 in framework::LoadDispatcher::impl_dispatch(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&, com::sun::star::uno::Reference<com::sun::star::frame::XDispatchResultListener> const&) framework/source/dispatch/loaddispatcher.cxx:107:19
>    #18 0x7f82607dd6a1 in framework::LoadDispatcher::dispatchWithReturnValue(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) framework/source/dispatch/loaddispatcher.cxx:60:12
>    #19 0x7f82607dd7e3 in non-virtual thunk to framework::LoadDispatcher::dispatchWithReturnValue(com::sun::star::util::URL const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) framework/source/dispatch/loaddispatcher.cxx
>    #20 0x7f8268ff2ccd in comphelper::SynchronousDispatch::dispatch(com::sun::star::uno::Reference<com::sun::star::uno::XInterface> const&, rtl::OUString const&, rtl::OUString const&, com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> const&) comphelper/source/misc/synchronousdispatch.cxx:62:31
>    #21 0x7f826e9a5277 in desktop::DispatchWatcher::executeDispatchRequests(std::__debug::vector<desktop::DispatchWatcher::DispatchRequest, std::allocator<desktop::DispatchWatcher::DispatchRequest>> const&, bool) desktop/source/app/dispatchwatcher.cxx:490:26
>    #22 0x7f826ea21e96 in desktop::RequestHandler::ExecuteCmdLineRequests(desktop::ProcessDocumentsRequest&, bool) desktop/source/app/officeipcthread.cxx:1347:38
>    #23 0x7f826e879478 in desktop::Desktop::OpenClients() desktop/source/app/app.cxx:2136:14
>    #24 0x7f826e872902 in desktop::Desktop::OpenClients_Impl(void*) desktop/source/app/app.cxx:1916:5
>    #25 0x7f826e86cc88 in desktop::Desktop::LinkStubOpenClients_Impl(void*, void*) desktop/source/app/app.cxx:1900:1
>    #26 0x7f82342305d2 in Link<void*, void>::Call(void*) const include/tools/link.hxx:111:45
>    #27 0x7f8234217020 in ImplHandleUserEvent(ImplSVEvent*) vcl/source/window/winproc.cxx:2287:30
>    #28 0x7f8234201e9a in ImplWindowFrameProc(vcl::Window*, SalEvent, void const*) vcl/source/window/winproc.cxx:2857:13
>    #29 0x7f8237cbd387 in SalFrame::CallCallback(SalEvent, void const*) const vcl/inc/salframe.hxx:308:29
>    #30 0x7f8237d8893b in SalGenericDisplay::ProcessEvent(SalUserEventList::SalUserEvent) vcl/unx/generic/app/gendisp.cxx:66:22
>    #31 0x7f82366d97be in SalUserEventList::DispatchUserEvents(bool)::$_0::operator()() const vcl/source/app/salusereventlist.cxx:119:58
>    #32 0x7f82366d8f41 in SalUserEventList::DispatchUserEvents(bool) vcl/source/app/salusereventlist.cxx:120:13
>    #33 0x7f8237d883d7 in SalGenericDisplay::DispatchInternalEvent(bool) vcl/unx/generic/app/gendisp.cxx:51:12
>    #34 0x7f820d9f6927 in call_userEventFn(void*) vcl/unx/gtk3/gtkdata.cxx:824:27
>    #35 0x7f826751c43e in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5643e) (BuildId: dfafc77e27d9c714bdafdd06bb61218c391a3193)
>
>SUMMARY: AddressSanitizer: heap-use-after-free sw/source/core/inc/rootfrm.hxx:210:48 in Sw

Actions: View

Attachments on bug 154205: 185977 | 185980