[Libreoffice-bugs] [Bug 119224] Crash scrolling formatted 2007 DOCX with revision, comments and images (SfxListener::~SfxListener() EXCEPTION_ACCESS_VIOLATION_WRITE) ( steps in comment 8 )

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119224

--- Comment #11 from Caolán McNamara <caolanm at redhat.com> ---
I get the same bt as Julien and looks to me that pEndFrame is assigned at the
top and the GetFormatted causes it to get deleted so using it later on crashes.
Seems that pStartFrame and pEndFrame are expected to exist for the duration of
the whole function. Sticking the SwFrameDeleteGuard hammer in there for
pStartFrame and pEndFrame makes it not crash for me, and nothing output under
valgrind https://gerrit.libreoffice.org/#/c/59176/

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180816/a776c25a/attachment.html>