[Libreoffice-bugs] [Bug 121030] FreetypeFontInstance use-after-free during CppunitTest_sw_dialogs_test

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=121030

--- Comment #3 from Jan-Marek Glogowski <glogow at fbihome.de> ---
Nice backtraces. With this additional info it is clear what is happening here.

The Freetype font cache is separate layer, below LO's general font cache, but
it is not refcount handled, so this clear renders all cached font instances in
the SalLayoutGlyphs invalid on UNIX.

What is missing now is the invalidation of the FreetypeFont pointer when
cleaning that font cache, as it has a map of all logical font instances. This
can be detected by the cached SalLayoutGlyphsInpl, so it can invalidate itself,
by returning empty(), which will result in a new valid cache.

I'll do a fix tomorrow, unless you or someone else beats me to it.

And probably getting rid of the GlyphCache and FreetypeFont, merging the
functionality into the general FontCache.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20181030/737ce8ee/attachment.html>