==29093== Invalid read of size 8 ==29093== at 0x2599EE14: SdrObject::GetPage() const (svdobj.hxx:563) ==29093== by 0x25D74C02: SdrObjList::InsertObject(SdrObject*, unsigned long, SdrInsertReason const*) (svdpage.cxx:403) ==29093== by 0x32DC8E7F: rptui::OReportSection::Paste(com::sun::star::uno::Sequence const&, bool) (ReportSection.cxx:283) ==29093== by 0x32DE1F82: rptui::OViewsWindow::EndDragObj(unsigned char, rptui::OSectionView const*, Point const&) (ViewsWindow.cxx:1351) ==29093== by 0x32D87866: rptui::DlgEdFunc::checkMovementAllowed(MouseEvent const&) (dlgedfunc.cxx:561) ==29093== by 0x32D88E6E: rptui::DlgEdFuncSelect::MouseButtonUp(MouseEvent const&) (dlgedfunc.cxx:890) ==29093== by 0x32DC9AEC: rptui::OReportSection::MouseButtonUp(MouseEvent const&) (ReportSection.cxx:408) ==29093== by 0x972F999: ImplHandleMouseEvent(Window*, unsigned short, unsigned char, long, long, unsigned long, unsigned short, unsigned short) (winproc.cxx:818) ==29093== by 0x9735184: ImplHandleSalMouseButtonUp(Window*, SalMouseEvent*) (winproc.cxx:2091) ==29093== by 0x97344C0: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:2420) ==29093== by 0x16EC8332: SalFrame::CallCallback(unsigned short, void const*) const (in /home/caolan/LibreOffice/core/solver/unxlngx6/lib/libvclplug_gtklo.so) ==29093== by 0x16EC46FD: GtkSalFrame::signalButton(_GtkWidget*, _GdkEventButton*, void*) (gtkframe.cxx:2880) ==29093== by 0x359CB4EC32: _gtk_marshal_BOOLEAN__BOXED (gtkmarshalers.c:86) ==29093== by 0x3A6A40E34D: g_closure_invoke (gclosure.c:767) ==29093== by 0x3A6A41F1FF: signal_emit_unlocked_R (gsignal.c:3252) ==29093== by 0x3A6A42878A: g_signal_emit_valist (gsignal.c:2993) ==29093== by 0x3A6A428B71: g_signal_emit (gsignal.c:3040) ==29093== by 0x359CC83EE0: gtk_widget_event_internal (gtkwidget.c:4999) ==29093== by 0x359CB4C752: gtk_propagate_event (gtkmain.c:2489) ==29093== by 0x359CB4CABA: gtk_main_do_event (gtkmain.c:1684) ==29093== by 0x16E9C649: _sal_gtk_event_handler_fn (gtkinst.cxx:294) ==29093== by 0x359D2620BB: gdk_event_dispatch (gdkevents-x11.c:2377) ==29093== by 0x3A694427EC: g_main_context_dispatch (gmain.c:2441) ==29093== by 0x3A69442FC7: g_main_context_iterate (gmain.c:3092) ==29093== by 0x3A6944325B: g_main_context_iteration (gmain.c:3155) ==29093== by 0x16E994BB: GtkData::Yield(bool, bool) (gtkdata.cxx:597) ==29093== by 0x16E9D173: GtkInstance::Yield(bool, bool) (gtkinst.cxx:578) ==29093== by 0x92A4B7C: ImplYield(bool, bool) (svapp.cxx:460) ==29093== by 0x92A10DE: Application::Yield(bool) (svapp.cxx:494) ==29093== by 0x92A107A: Application::Execute() (svapp.cxx:437) ==29093== by 0x4F115EA: desktop::Desktop::Main() (app.cxx:1882) ==29093== by 0x92AC5BD: ImplSVMain() (svmain.cxx:180) ==29093== by 0x92AC703: SVMain() (svmain.cxx:217) ==29093== by 0x4F45891: soffice_main (sofficemain.cxx:69) ==29093== by 0x400733: sal_main (main.c:34) ==29093== by 0x400718: main (main.c:33) ==29093== Address 0x1c731db0 is 160 bytes inside a block of size 568 free'd ==29093== at 0x4A0528C: operator delete(void*) (vg_replace_malloc.c:387) ==29093== by 0x31EB719D: rptui::OUnoObject::~OUnoObject() (RptObject.cxx:657) ==29093== by 0x25CEB85D: SdrObject::Free(SdrObject*&) (svdobj.cxx:457) ==29093== by 0x25E71209: SvxShape::~SvxShape() (unoshape.cxx:268) ==29093== by 0x25E7FFBF: SvxShapeText::~SvxShapeText() (unoshape.cxx:4037) ==29093== by 0x25E5A3A8: SvxShapeControl::~SvxShapeControl() (unoshap2.cxx:553) ==29093== by 0x25E5A417: SvxShapeControl::~SvxShapeControl() (unoshap2.cxx:556) ==29093== by 0x5E9285C: cppu::OWeakObject::release() (weak.cxx:215) ==29093== by 0x5E92C8B: cppu::OWeakAggObject::release() (weak.cxx:285) ==29093== by 0x25E2FF07: cppu::WeakAggImplHelper12::release() (implbase12.hxx:156) ==29093== by 0x25E80567: SvxShapeText::release() (unoshape.cxx:4082) ==29093== by 0x25E5A909: SvxShapeControl::release() (unoshap2.cxx:583) ==29093== by 0x31E26DD8: com::sun::star::uno::Reference::~Reference() (Reference.hxx:117) ==29093== by 0x31E51DE6: reportdesign::OReportComponentProperties::~OReportComponentProperties() (ReportComponent.cxx:140) ==29093== by 0x31E26A5A: reportdesign::OReportControlModel::~OReportControlModel() (in /home/caolan/LibreOffice/core/solver/unxlngx6/lib/librptlo.so) ==29093== by 0x31E97468: reportdesign::OShape::~OShape() (Shape.cxx:105) ==29093== by 0x31E975AD: reportdesign::OShape::~OShape() (Shape.cxx:108) ==29093== by 0x5E9285C: cppu::OWeakObject::release() (weak.cxx:215) ==29093== by 0x5E7DCAA: cppu::WeakComponentImplHelperBase::release() (implbase.cxx:260) ==29093== by 0x31E9D3A1: cppu::WeakComponentImplHelper2::release() (compbase2.hxx:77) ==29093== by 0x31E976B5: reportdesign::OShape::release() (Shape.cxx:111) ==29093== by 0x31E26DD8: com::sun::star::uno::Reference::~Reference() (Reference.hxx:117) ==29093== by 0x31EBF188: rptui::OReportPage::NbcInsertObject(SdrObject*, unsigned long, SdrInsertReason const*) (RptPage.cxx:217) ==29093== by 0x25D74BBC: SdrObjList::InsertObject(SdrObject*, unsigned long, SdrInsertReason const*) (svdpage.cxx:388) ==29093== by 0x32DC8E7F: rptui::OReportSection::Paste(com::sun::star::uno::Sequence const&, bool) (ReportSection.cxx:283) ==29093== by 0x32DE1F82: rptui::OViewsWindow::EndDragObj(unsigned char, rptui::OSectionView const*, Point const&) (ViewsWindow.cxx:1351) ==29093== by 0x32D87866: rptui::DlgEdFunc::checkMovementAllowed(MouseEvent const&) (dlgedfunc.cxx:561) ==29093== by 0x32D88E6E: rptui::DlgEdFuncSelect::MouseButtonUp(MouseEvent const&) (dlgedfunc.cxx:890) ==29093== by 0x32DC9AEC: rptui::OReportSection::MouseButtonUp(MouseEvent const&) (ReportSection.cxx:408) ==29093== by 0x972F999: ImplHandleMouseEvent(Window*, unsigned short, unsigned char, long, long, unsigned long, unsigned short, unsigned short) (winproc.cxx:818) ==29093== by 0x9735184: ImplHandleSalMouseButtonUp(Window*, SalMouseEvent*) (winproc.cxx:2091) ==29093== by 0x97344C0: ImplWindowFrameProc(Window*, SalFrame*, unsigned short, void const*) (winproc.cxx:2420) ==29093== by 0x16EC8332: SalFrame::CallCallback(unsigned short, void const*) const (in /home/caolan/LibreOffice/core/solver/unxlngx6/lib/libvclplug_gtklo.so) ==29093== by 0x16EC46FD: GtkSalFrame::signalButton(_GtkWidget*, _GdkEventButton*, void*) (gtkframe.cxx:2880) ==29093== by 0x359CB4EC32: _gtk_marshal_BOOLEAN__BOXED (gtkmarshalers.c:86) ==29093== by 0x3A6A40E34D: g_closure_invoke (gclosure.c:767) ==29093== by 0x3A6A41F1FF: signal_emit_unlocked_R (gsignal.c:3252) ==29093== by 0x3A6A42878A: g_signal_emit_valist (gsignal.c:2993) ==29093== by 0x3A6A428B71: g_signal_emit (gsignal.c:3040) ==29093== by 0x359CC83EE0: gtk_widget_event_internal (gtkwidget.c:4999) ==29093== by 0x359CB4C752: gtk_propagate_event (gtkmain.c:2489) ==29093== by 0x359CB4CABA: gtk_main_do_event (gtkmain.c:1684) ==29093== by 0x16E9C649: _sal_gtk_event_handler_fn (gtkinst.cxx:294) ==29093== by 0x359D2620BB: gdk_event_dispatch (gdkevents-x11.c:2377) ==29093== by 0x3A694427EC: g_main_context_dispatch (gmain.c:2441) ==29093== by 0x3A69442FC7: g_main_context_iterate (gmain.c:3092) ==29093== by 0x3A6944325B: g_main_context_iteration (gmain.c:3155) ==29093== by 0x16E994BB: GtkData::Yield(bool, bool) (gtkdata.cxx:597) ==29093== by 0x16E9D173: GtkInstance::Yield(bool, bool) (gtkinst.cxx:578) ==29093== by 0x92A4B7C: ImplYield(bool, bool) (svapp.cxx:460)