[Libreoffice-bugs] [Bug 112947] Possible write to free'd memory in OResultSet.cxx

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=112947

--- Comment #6 from Nick Gorham <nick at lurcher.org> ---

> m_pSkipDeletedSet is a unique_ptr so it'll be automatically destroyed in the
> destructor of OResultSet 
> see
> https://opengrok.libreoffice.org/xref/core/connectivity/source/inc/odbc/
> OResultSet.hxx#138
> 

Yep, thats all understood, but the ODBC driver has no way of knowing that that
memory is now free, so will continue to write into it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20171007/c809540c/attachment.html>