https://bugs.documentfoundation.org/show_bug.cgi?id=99272
--- Comment #6 from Lionel Elie Mamane <lio...@mamane.lu> --- I get the impression that somehow pOldValues[0].pData and the actual storage of the property point towards the same storage, but don't correctly update reference counts, so that the first one destroyed frees the storage, and when the other one is destroyed it is a double free() -- You are receiving this mail because: You are the assignee for the bug.
_______________________________________________ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
