To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=114718
------- Additional comments from s...@openoffice.org Thu Feb 3 15:39:21 +0000 2011 ------- Executing forms/qa/unoapi on DEV300_m98 based CWS sb138, unxlngx6 non-pro, revealed that frm::OFormattedFieldWrapper is the problematic object that is released one time too often (see below). And indeed, OFormattedFieldWrapper::read can hold on to pBasicReader via xHoldBasicReaderAlive while setting itself as delegator at pBasicReader, so that xHoldBasicReaderAlive's acquire goes to pBasicReader while its release goes to this OFormattedFieldWrapper. The attached formattedfieldwrapper.patch fixes this. ==1659== Invalid read of size 8 ==1659== at 0x15E09C9B: bridges::cpp_uno::shared::freeUnoInterfaceProxy(_uno_ExtEnvironment*, void*) (unointerfaceproxy.cxx:54) ==1659== by 0x72B424A: s_stub_defenv_revokeInterface (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x72BB275: s_environment_invoke_v(_uno_Environment*, _uno_Environment*, void (*)(__va_list_tag (*) [1]), __va_list_tag (*) [1]) (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x72BB311: uno_Environment_invoke_v (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x72BB3AD: uno_Environment_invoke (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x72B35E8: defenv_revokeInterface (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x15E09B3F: bridges::cpp_uno::shared::releaseProxy(_uno_Interface*) (unointerfaceproxy.cxx:96) ==1659== by 0x1B4967F9: com::sun::star::uno::UnoInterfaceReference::~UnoInterfaceReference() (dispatcher.hxx:95) ==1659== by 0x1B496B9A: binaryurp::Bridge::SubStub::~SubStub() (bridge.cxx:172) ==1659== by 0x1B49939D: std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub>::~pair() (stl_pair.h:69) ==1659== by 0x1B4993F6: __gnu_cxx::new_allocator<std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub> >::destroy(std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub>*) (new_allocator.h:110) ==1659== by 0x1B4999EF: std::_Rb_tree<com::sun::star::uno::TypeDescription, std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub>, std::_Select1st<std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub> >, std::less<com::sun::star::uno::TypeDescription>, std::allocator<std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub> > >::_M_destroy_node(std::_Rb_tree_node<std::pair<com::sun::star::uno::TypeDescription const, binaryurp::Bridge::SubStub> >*) (stl_tree.h:400) ==1659== Address 0x18d5ca20 is 0 bytes inside a block of size 112 free'd ==1659== at 0x4C270BD: free (vg_replace_malloc.c:366) ==1659== by 0x4E2D817: rtl_freeMemory (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/lib/libsalalloc_malloc.so.3) ==1659== by 0x2AC18D72: cppu::OWeakObject::operator delete(void*) (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/basis3.4/program/libfrmlx.so) ==1659== by 0x2ACA49B0: frm::OFormattedFieldWrapper::~OFormattedFieldWrapper() (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/basis3.4/program/libfrmlx.so) ==1659== by 0x7009C1F: cppu::OWeakObject::release() (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppuhelpergcc3.so.3) ==1659== by 0x7009C79: cppu::OWeakAggObject::release() (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppuhelpergcc3.so.3) ==1659== by 0x2ACA6267: frm::OFormattedFieldWrapper::release() (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/basis3.4/program/libfrmlx.so) ==1659== by 0x15E07D49: s_stub_releaseInterface (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libgcc3_uno.so) ==1659== by 0x72BB275: s_environment_invoke_v(_uno_Environment*, _uno_Environment*, void (*)(__va_list_tag (*) [1]), __va_list_tag (*) [1]) (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x72BB311: uno_Environment_invoke_v (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x72BB3AD: uno_Environment_invoke (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libuno_cppu.so.3) ==1659== by 0x15E081AE: releaseInterface (in /net/so-cwsserv03/export/cws/sb138/DEV300/unxlngx6/installation/opt/openoffice.org/ure/lib/libgcc3_uno.so) --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@gsl.openoffice.org For additional commands, e-mail: issues-h...@gsl.openoffice.org --------------------------------------------------------------------- To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
