LibreOffice writer crashes with invalid pointer passed to memcpy

kd> k

ChildEBP RetAddr  

00e3f11c 11d66d9a MSVCR120!memcpy+0x2a [f:\dd\vctools\crt\crtw32\string\i386\memcpy.asm @ 188]

00e3f158 11d66983 mergedlo!WinSalBitmap::ImplCopyDIBOrDDB+0x4a [c:\cygwin64\home\buildslave\source\libo-core\vcl\win\gdi\salbmp.cxx @ 799]

00e3f174 11b7c881 mergedlo!WinSalBitmap::Create+0x33 [c:\cygwin64\home\buildslave\source\libo-core\vcl\win\gdi\salbmp.cxx @ 572]

00e3f180 11b3f3a9 mergedlo!ImpBitmap::ImplCreate+0x11 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\impbmp.cxx @ 57]

00e3f1b0 11b478af mergedlo!Bitmap::ImplMakeUnique+0x99 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap.cxx @ 291]

00e3f1e4 11b469ab mergedlo!BitmapInfoAccess::ImplCreate+0x6f [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bmpacc.cxx @ 60]

00e3f238 11b46be3 mergedlo!BitmapInfoAccess::BitmapInfoAccess+0xbb [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bmpacc.cxx @ 35]

00e3f260 11b3b706 mergedlo!BitmapWriteAccess::BitmapWriteAccess+0x33 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bmpacc.cxx @ 397]

00e3f284 11b3402e mergedlo!Bitmap::AcquireWriteAccess+0x46 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap.cxx @ 349]

00e3f2ec 11b313f5 mergedlo!Bitmap::ImplMakeGreyscales+0xfe [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap3.cxx @ 513]

00e3f320 11b2b4cf mergedlo!Bitmap::Convert+0x205 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\bitmap3.cxx @ 345]

00e3f348 17e62b4a mergedlo!AlphaMask::AlphaMask+0x4f [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\gdi\alpha.cxx @ 34]

00e3f47c 17e60aa4 swlo!SwPageFrame::PaintBorderAndShadow+0xb6a [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\paintfrm.cxx @ 6160]

00e3f67c 1813b538 swlo!SwRootFrame::Paint+0x964 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\layout\paintfrm.cxx @ 3389]

00e3f700 17bd5c14 swlo!SwViewShell::Paint+0x1f8 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\view\viewsh.cxx @ 1803]

00e3f764 182aa8be swlo!SwCursorShell::Paint+0xb4 [c:\cygwin64\home\buildslave\source\libo-core\sw\source\core\crsr\crsrsh.cxx @ 1275]

00e3f794 119981de swlo!SwEditWin::Paint+0xce [c:\cygwin64\home\buildslave\source\libo-core\sw\source\uibase\docvw\edtwin2.cxx @ 476]

00e3f7fc 11998dbb mergedlo!PaintHelper::DoPaint+0x1de [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 315]

00e3f864 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x14b [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 612]

00e3f8a8 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]

00e3f90c 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]

00e3f950 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]

00e3f9b4 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]

00e3f9f8 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]

00e3fa5c 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]

00e3faa0 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]

00e3fb04 11997d3e mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]

00e3fb48 11998dd5 mergedlo!PaintHelper::~PaintHelper+0x8e [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 550]

00e3fbac 11998c50 mergedlo!vcl::Window::ImplCallPaint+0x165 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 614]

00e3fbd8 11998e99 mergedlo!vcl::Window::ImplCallOverlapPaint+0xa0 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 636]

00e3fbf8 1199a76e mergedlo!vcl::Window::ImplHandlePaintHdl+0x99 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 668]

00e3fc04 11c869ed mergedlo!vcl::Window::LinkStubImplHandlePaintHdl+0xe [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\window\paint.cxx @ 645]

00e3fc10 11c898f2 mergedlo!Idle::Invoke+0xd [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\idle.cxx @ 25]

00e3fc24 11c9ee7d mergedlo!Scheduler::ProcessTaskScheduling+0x62 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\scheduler.cxx @ 177]

00e3fc40 11c9c165 mergedlo!Application::Yield+0x6d [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 556]

00e3fc70 10dd6ab6 mergedlo!Application::Execute+0x145 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svapp.cxx @ 473]

00e3fde4 11ca3813 mergedlo!desktop::Desktop::Main+0xd76 [c:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\app.cxx @ 1652]

00e3fe0c 11ca3bd9 mergedlo!ImplSVMain+0x63 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 185]

00e3fe18 10df2826 mergedlo!SVMain+0x29 [c:\cygwin64\home\buildslave\source\libo-core\vcl\source\app\svmain.cxx @ 224]

00e3ff6c 0040101e mergedlo!soffice_main+0x116 [c:\cygwin64\home\buildslave\source\libo-core\desktop\source\app\sofficemain.cxx @ 166]

WARNING: Stack unwind information not available. Following frames may be wrong.

00e3ffc0 7c773584 soffice+0x101e

00e3fff0 00000000 KERNEL32!BaseProcessStartup+0x54 [c:\ros\reactos\reactos\dll\win32\kernel32\client\proc.c @ 478]