==16299== Use of uninitialised value of size 8 ==16299== at 0xA73935D: MetaAction::ReadMetaAction(SvStream&, ImplMetaReadData*) (metaact.cxx:161) ==16299== by 0xA6F85C2: operator>>(SvStream&, GDIMetaFile&) (gdimtf.cxx:2770) ==16299== by 0xA7215E3: operator>>(SvStream&, ImpGraphic&) (impgraph.cxx:1687) ==16299== by 0xA70D0B1: operator>>(SvStream&, Graphic&) (graph.cxx:577) ==16299== by 0xA5ECD4D: GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned int, com::sun::star::uno::Sequence*, WMF_EXTERNALHEADER*) (graphicfilter.cxx:1561) ==16299== by 0xA5EC15F: GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned int, WMF_EXTERNALHEADER*) (graphicfilter.cxx:1327) ==16299== by 0x27AAE387: SwGrfNode::ImportGraphic(SvStream&) (ndgrf.cxx:452) ==16299== by 0x27AB0F32: SwGrfNode::SwapGraphic(GraphicObject*) (ndgrf.cxx:1014) ==16299== by 0x27AB0D6C: SwGrfNode::LinkStubSwapGraphic(void*, void*) (ndgrf.cxx:967) ==16299== by 0x8927F73: Link::Call(void*) const (link.hxx:123) ==16299== by 0x8B13DAB: GraphicObject::GetSwapStream() const (grfmgr.cxx:382) ==16299== by 0x8B12D6F: GraphicObject::ImplAutoSwapIn() (grfmgr.cxx:203) ==16299== ==16299== (action on error) vgdb me ... ==16299== Continuing ... ==16299== Invalid read of size 8 ==16299== at 0x9898EAB: PolyPolygon::Count() const (poly2.cxx:382) ==16299== by 0xA6F836B: GDIMetaFile::GetSizeBytes() const (gdimtf.cxx:2710) ==16299== by 0xA71E31C: ImpGraphic::ImplGetSizeBytes() const (impgraph.cxx:837) ==16299== by 0xA70CBF7: Graphic::GetSizeBytes() const (graph.cxx:441) ==16299== by 0x8B128A8: GraphicObject::ImplAssignGraphicData() (grfmgr.cxx:140) ==16299== by 0x8B121AB: GraphicObject::GraphicObject(Graphic const&, GraphicManager const*) (grfmgr.cxx:76) ==16299== by 0x27AEE39D: SwFlyFrm::GetContour(PolyPolygon&, unsigned char) const (fly.cxx:2626) ==16299== by 0x27CB837E: SwContourCache::ContourRect(SwFmt const*, SdrObject const*, SwTxtFrm const*, SwRect const&, long, unsigned char) (txtfly.cxx:231) ==16299== by 0x27CB8124: SwContourCache::CalcBoundRect(SwAnchoredObject const*, SwRect const&, SwTxtFrm const*, long, unsigned char) (txtfly.cxx:195) ==16299== by 0x27CBD91E: SwTxtFly::AnchoredObjToRect(SwAnchoredObject const*, SwRect const&) const (txtfly.cxx:1298) ==16299== by 0x27CBC680: SwTxtFly::ForEach(SwRect const&, SwRect*, unsigned char) const (txtfly.cxx:1093) ==16299== by 0x27CB9422: SwTxtFly::_GetFrm(SwRect const&, unsigned char) const (txtfly.cxx:409) ==16299== Address 0x1ea29868 is 0 bytes after a block of size 24 alloc'd ==16299== at 0x4C2B857: operator new(unsigned long) (vg_replace_malloc.c:298) ==16299== by 0xA739378: MetaAction::ReadMetaAction(SvStream&, ImplMetaReadData*) (metaact.cxx:163) ==16299== by 0xA6F85C2: operator>>(SvStream&, GDIMetaFile&) (gdimtf.cxx:2770) ==16299== by 0xA7215E3: operator>>(SvStream&, ImpGraphic&) (impgraph.cxx:1687) ==16299== by 0xA70D0B1: operator>>(SvStream&, Graphic&) (graph.cxx:577) ==16299== by 0xA5ECD4D: GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned int, com::sun::star::uno::Sequence*, WMF_EXTERNALHEADER*) (graphicfilter.cxx:1561) ==16299== by 0xA5EC15F: GraphicFilter::ImportGraphic(Graphic&, String const&, SvStream&, unsigned short, unsigned short*, unsigned int, WMF_EXTERNALHEADER*) (graphicfilter.cxx:1327) ==16299== by 0x8B3FA53: svt::EmbeddedObjectRef::GetReplacement(bool) (embedhlp.cxx:436) ==16299== by 0x8B3FB6B: svt::EmbeddedObjectRef::GetGraphic(rtl::OUString*) const (embedhlp.cxx:450) ==16299== by 0x27BCE4EE: SwOLENode::GetGraphic() (ndole.cxx:268) ==16299== by 0x2795BE28: SwNoTxtNode::GetGraphic() const (ndnotxt.cxx:260) ==16299== by 0x2795B06C: SwNoTxtNode::HasContour() const (ndnotxt.cxx:113) ==16299== ==16299== (action on error) vgdb me ... Program received signal SIGTRAP, Trace/breakpoint trap. 0x000000000a739346 in MetaAction::ReadMetaAction (rIStm=..., pData=0x7feff4090) at /home/julien/compile-libreoffice/libreoffice/vcl/source/gdi/metaact.cxx:161 161 switch( nType ) (gdb) c Continuing. Program received signal SIGTRAP, Trace/breakpoint trap. 0x000000000a73935d in MetaAction::ReadMetaAction (rIStm=..., pData=0x7feff4570) at /home/julien/compile-libreoffice/libreoffice/vcl/source/gdi/metaact.cxx:161 161 switch( nType ) (gdb) Continuing. Program received signal SIGTRAP, Trace/breakpoint trap. 0x0000000009898eab in PolyPolygon::Count (this=0x1ea29868) at /home/julien/compile-libreoffice/libreoffice/tools/source/generic/poly2.cxx:382 382 return mpImplPolyPolygon->mnCount; (gdb)