#0  OutputDevice::GetSysTextLayoutData (this=0xd334648, rStartPt=..., rStr=..., nIndex=0, nLen=3, pDXAry=0xd3aa340) at /build/buildd/libreoffice-3.5.0/vcl/source/gdi/outdev3.cxx:7434
        nStart = 0
        aSysLayoutData = {nSize = 20, rGlyphData = {<std::_Vector_base<SystemGlyphData, std::allocator<SystemGlyphData> >> = {_M_impl = {<std::allocator<SystemGlyphData>> = {<__gnu_cxx::new_allocator<SystemGlyphData>> = {<No data fields>}, <No data fields>}, _M_start = 0xd3ac948, _M_finish = 0xd3ac948, _M_end_of_storage = 0xd3ae148}}, <No data fields>}, orientation = 64}
        rLayout = 0x0
        aPos = {<Pair> = {nA = 0, nB = 0}, <No data fields>}
        aGlyphId = 9617396
#1  0x0443be29 in cairocanvas::TextLayout::draw (this=0xd3b1df8, pSurface=..., rOutDev=..., rOutpos=..., viewState=..., renderState=...) at /build/buildd/libreoffice-3.5.0/canvas/source/cairo/cairo_textlayout.cxx:405
        aGuard = {pT = 0xd3b1e28}
        aFontData = {<std::_Vector_base<std::pair<SystemFontData, int>, std::allocator<std::pair<SystemFontData, int> > >> = {_M_impl = {<std::allocator<std::pair<SystemFontData, int> >> = {<__gnu_cxx::new_allocator<std::pair<SystemFontData, int> >> = {<No data fields>}, <No data fields>}, _M_start = 0x3ff10b60, _M_finish = 0x77a4a6b0, _M_end_of_storage = 0xc2400689}}, <No data fields>}
#2  0x044233ec in cairocanvas::CanvasHelper::drawTextLayout (this=0xd4d0448, pOwner=0xd4d0430, xLayoutedText=..., viewState=..., renderState=...) at /build/buildd/libreoffice-3.5.0/canvas/source/cairo/cairo_canvashelper_text.cxx:385
        aOutpos = {<Pair> = {nA = -2147483648, nB = 99}, <No data fields>}
        __PRETTY_FUNCTION__ = "com::sun::star::uno::Reference<com::sun::star::rendering::XCachedPrimitive> cairocanvas::CanvasHelper::drawTextLayout(const com::sun::star::rendering::XCanvas*, const com::sun::star::uno::Reference<co"...
        pTextLayout = 0xd3b1df8
#3  0x0440f2a2 in canvas::CanvasBase<cairocanvas::CanvasBitmapSpriteSurface_Base, cairocanvas::CanvasHelper, osl::Guard<osl::Mutex>, cppu::OWeakObject>::drawTextLayout (this=0xd4d0448, layoutetText=..., viewState=..., renderState=...) at /build/buildd/libreoffice-3.5.0/solver/unxlngi6.pro/inc/canvas/base/canvasbase.hxx:423
        __PRETTY_FUNCTION__ = "com::sun::star::uno::Reference<com::sun::star::rendering::XCachedPrimitive> canvas::CanvasBase<Base, CanvasHelper, Mutex, UnambiguousBase>::drawTextLayout(const com::sun::star::uno::Reference<com::sun"...
        aGuard = {pT = 0xd4d0440}
#4  0x08bd6148 in cppcanvas::internal::(anonymous namespace)::TextArrayAction::render (this=0xd3b156c, rTransformation=...) at /build/buildd/libreoffice-3.5.0/cppcanvas/source/mtfrenderer/textaction.cxx:1121
        aLocalState = {AffineTransform = {m00 = 2147483648, m01 = 0, m02 = -3417908869899, m10 = 0, m11 = 26.458333645529336, m12 = 2458.048474387534}, Clip = {<com::sun::star::uno::BaseReference> = {_pInterface = 0x0}, <No data fields>}, DeviceColor = {_pSequence = 0xd3ab550, static s_pType = 0x0}, CompositeOperation = 3 '\003'}
#5  0x08bb9b96 in operator() (rAction=<optimized out>, this=0xbfbd937c) at /build/buildd/libreoffice-3.5.0/cppcanvas/source/mtfrenderer/implrenderer.cxx:2754
No locals.
#6  for_each<__gnu_cxx::__normal_iterator<const cppcanvas::internal::ImplRenderer::MtfAction*, std::vector<cppcanvas::internal::ImplRenderer::MtfAction> >, cppcanvas::internal::{anonymous}::ActionRenderer> (__f=access outside bounds of object referenced via synthetic pointer
) at /usr/include/c++/4.6/bits/stl_algo.h:4379
No locals.
#7  cppcanvas::internal::ImplRenderer::draw (this=0xb82ca60) at /build/buildd/libreoffice-3.5.0/cppcanvas/source/mtfrenderer/implrenderer.cxx:3226
        aMatrix = {mpImpl = {m_pimpl = 0xd3aa288}}
#8  0x052128de in ?? ()
No symbol table info available.
#9  0x0b82ca60 in ?? ()
No symbol table info available.
Backtrace stopped: previous frame inner to this frame (corrupt stack?)