You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by ms...@apache.org on 2023/03/12 21:19:10 UTC

[openoffice] branch AOO41X updated: Use after Free

This is an automated email from the ASF dual-hosted git repository.

mseidel pushed a commit to branch AOO41X
in repository https://gitbox.apache.org/repos/asf/openoffice.git


The following commit(s) were added to refs/heads/AOO41X by this push:
     new e467b8b3c9 Use after Free
e467b8b3c9 is described below

commit e467b8b3c91f261373da5f181866ead4a014a21c
Author: Pedro Giffuni <pf...@apache.org>
AuthorDate: Tue Nov 24 15:31:03 2015 +0000

    Use after Free
    
    CID:    1158520
    
    git-svn-id: https://svn.apache.org/repos/asf/openoffice/trunk@1716173 13f79535-47bb-0310-9956-ffa450edef68
    (cherry picked from commit 47edcb93f4af8a248c85b99626a69d12acc672b7)
---
 main/sw/source/core/access/accpara.cxx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/main/sw/source/core/access/accpara.cxx b/main/sw/source/core/access/accpara.cxx
index 4f71290511..d2bb52a5f3 100644
--- a/main/sw/source/core/access/accpara.cxx
+++ b/main/sw/source/core/access/accpara.cxx
@@ -3811,7 +3811,8 @@ sal_Bool SAL_CALL SwAccessibleParagraph::removeSelection( sal_Int32 selectionInd
 			}
             // else: this PaM is collapsed and doesn't select anything
 		   pPrev = pCrsr;
-           pCrsr = static_cast<SwPaM*>( pCrsr->GetNext() );
+           if(!bRet)
+               pCrsr = static_cast<SwPaM*>( pCrsr->GetNext() );
         }
         while( !bRet && (pCrsr != pRingStart) );
 	}