The following stack is from a crashreport (internal bug ID 133501):

===================================

00e1f61c 62517f73 spell680mi!HashMgr::add_word(char* word = 00e1f640
"Abfrageeinrichtung", int wl = 0x12, char* aff = 00e1f653 "P", int al = 1)+0x96
[o:\src680\src.m3\lingucomponent\source\spellcheck\myspell\hashmgr.cxx @ 102]
00e1f740 62517fc2 spell680mi!HashMgr::load_tables(char* tpath = 7c38b548
"")+0x115 [o:\src680\src.m3\lingucomponent\source\spellcheck\myspell\hashmgr.cxx
@ 183]
00e1f750 6251498b spell680mi!HashMgr::HashMgr(char* tpath = 05281a28 "")+0x15
[o:\src680\src.m3\lingucomponent\source\spellcheck\myspell\hashmgr.cxx @ 22]
00e1f764 62511b76 spell680mi!MySpell::MySpell(char* affpath = 05281948 "", char*
dpath = 05281a28 "")+0x25
[o:\src680\src.m3\lingucomponent\source\spellcheck\myspell\myspell.cxx @ 17]
00e1f7d4 6251361c spell680mi!SpellChecker::GetSpellFailure(rtl::OUString* rWord
= 05281990 , com::sun::star::lang::Locale* rLocale = 00e1f840 )+0x1ef
[o:\src680\src.m3\lingucomponent\source\spellcheck\spell\sspellimp.cxx @ 337]

===================================

There are 8 reports for this one.


The code looks like

int HashMgr::add_word(const char * word, int wl, const char * aff, int al)
{
    int i = hash(word);
    struct hentry * dp = &tableptr[i];
    struct hentry* hp;
    if (dp->word == NULL) {
       dp->wlen = wl;
       dp->alen = al;
       dp->word = mystrdup(word);
       dp->astr = mystrdup(aff);
       dp->next = NULL;
       if ((wl) && (dp->word == NULL)) return 1;
       if ((al) && (dp->astr == NULL)) return 1;
    } else {
       hp = (struct hentry *) malloc (sizeof(struct hentry));
       if (hp == NULL) return 1;
       hp->wlen = wl;
       hp->alen = al;
       hp->word = mystrdup(word);
       hp->astr = mystrdup(aff);
       hp->next = NULL;      
       while (dp->next != NULL) dp=dp->next; 
       dp->next = hp;
       if ((wl) && (hp->word == NULL)) return 1;
       if ((al) && (hp->astr == NULL)) return 1;
    }
    return 0;
}     

According to the report the crash takes place in the line
       while (dp->next != NULL) dp=dp->next;