https://bugs.documentfoundation.org/show_bug.cgi?id=115420

--- Comment #26 from Aron Budea <ba...@caesar.elte.hu> ---
(In reply to Julien Nabet from comment #24)
> (In reply to Aron Budea from comment #23)
> >...
> > bool IsOffscreen() const { return mpProvider == nullptr ||
> > mpProvider->IsOffScreen(); }
> > 
> > mpProvider is an invalid pointer, so this seems to be a use-after-free 
> > issue.
> >...
> Either mpProvider is equal to nullptr and it returns true without testing
> second condition (and so without trying dereferencing nullptr)
> or mpProvider != null and we enter the second condition without pb of
> nullptr dereferencing.
Deleting an object doesn't set its pointers scattered in the code to nullptr.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to