[Libreoffice-bugs] [Bug 117444] Crash in: BigPtrArray::Index2Block(unsigned __int64)

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=117444

--- Comment #12 from Xisco Faulí <xiscofauli at libreoffice.org> ---
(In reply to Noel Grandin from comment #8)
> Good spotting!
> 
> If m_nBlock is 1, then m_nCur must be 0, and we should use the very first
> block of logic in that function, and exit early.
> 
> Unless some higher level code is asking for a position that does not exist,
> in which case we would fall through to the binary search, and trigger an
> access violation by dereferencing a null pointer.
> 
> So the real bug is somewhere higher up the call stack.

Hi Noel,
This crash is among the top 10 in 6.1.0.3.
Do you think you could take a look at the problem described in your comment
above at some point ?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180906/2f4804d5/attachment.html>