sd/source/ui/tools/SlideshowLayerRenderer.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 7f1840aef9dbe179b5e9be26cbce2e61ea12a3a5
Author:     Miklos Vajna <[email protected]>
AuthorDate: Mon Feb 9 09:05:55 2026 +0100
Commit:     Caolán McNamara <[email protected]>
CommitDate: Mon Feb 9 12:10:31 2026 +0100

    sd: fix crash in AnalyzeRenderingRedirector
    
    gdb on the crashreport core dump:
    
            #0  0x000071590be5da30 in o3tl::cow_wrapper<OutlinerParaObjData, 
o3tl::UnsafeRefCountingPolicy>::operator-> (this=<optimized out>)
                at include/o3tl/cow_wrapper.hxx:331
            #1  OutlinerParaObject::Count (this=0x0) at 
editeng/source/outliner/outlobj.cxx:168
            #2  0x00007158fd9ccb0a in sd::(anonymous 
namespace)::AnalyzeRenderingRedirector::createRedirectedPrimitive2DSequence 
(this=0x7ffc29a67820, rOriginal=..., rDisplayInfo=...)
                at sd/source/ui/tools/SlideshowLayerRenderer.cxx:550
            #3  0x000071590d4469ee in 
sdr::contact::ViewObjectContact::getPrimitive2DSequence 
(this=this@entry=0x560c9e40, rDisplayInfo=...)
                at svx/source/sdr/contact/viewobjectcontact.cxx:477
            #4  0x000071590d447109 in 
sdr::contact::ViewObjectContact::getPrimitive2DSequenceHierarchy 
(this=0x560c9e40, rDisplayInfo=..., rVisitor=...)
                at svx/source/sdr/contact/viewobjectcontact.cxx:551
    
    I.e. it's possible that in
    AnalyzeRenderingRedirector::createRedirectedPrimitive2DSequence(),
    pTextObject is non-nullptr but pTextObject->GetOutlinerParaObject() is
    nullptr, check for this.
    
    Change-Id: I1013809f134115fbeb56a9962d71380aaee17b22
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/198945
    Reviewed-by: Caolán McNamara <[email protected]>
    Tested-by: Jenkins CollaboraOffice <[email protected]>

diff --git a/sd/source/ui/tools/SlideshowLayerRenderer.cxx 
b/sd/source/ui/tools/SlideshowLayerRenderer.cxx
index b79c79c3e127..6dd7ec9eab02 100644
--- a/sd/source/ui/tools/SlideshowLayerRenderer.cxx
+++ b/sd/source/ui/tools/SlideshowLayerRenderer.cxx
@@ -545,7 +545,7 @@ public:
             if (!aInfo.maParagraphs.empty()) // we need to render paragraphs
             {
                 auto* pTextObject = dynamic_cast<SdrTextObj*>(pObject);
-                if (pTextObject)
+                if (pTextObject && pTextObject->GetOutlinerParaObject())
                 {
                     sal_Int32 nNumberOfParagraphs = 
pTextObject->GetOutlinerParaObject()->Count();
 

Reply via email to