New Defects reported by Coverity Scan for LibreOffice
scan-admin at coverity.com
scan-admin at coverity.com
Wed Apr 19 08:13:04 UTC 2017
Hi,
Please find the latest report on new defect(s) introduced to LibreOffice found with Coverity Scan.
14 new defect(s) introduced to LibreOffice found with Coverity Scan.
20 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 14 of 14 defect(s)
** CID 1405233: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/doc/list.cxx: 99 in SwListImpl::~SwListImpl()()
________________________________________________________________________________________________________
*** CID 1405233: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/doc/list.cxx: 99 in SwListImpl::~SwListImpl()()
93 pNode = rNodes[nIndex];
94 }
95 }
96 while ( pNode != &rNodes.GetEndOfContent() );
97 }
98
>>> CID 1405233: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
99 SwListImpl::~SwListImpl()
100 {
101 tListTrees::iterator aNumberTreeIter;
102 for ( aNumberTreeIter = maListTrees.begin();
103 aNumberTreeIter != maListTrees.end();
104 ++aNumberTreeIter )
** CID 1405232: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/docnode/node.cxx: 1006 in SwContentNode::~SwContentNode()()
________________________________________________________________________________________________________
*** CID 1405232: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/docnode/node.cxx: 1006 in SwContentNode::~SwContentNode()()
1000 SwNode( rWhere, nNdType ),
1001 m_pCondColl( nullptr ),
1002 mbSetModifyAtAttr( false )
1003 {
1004 }
1005
>>> CID 1405232: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
1006 SwContentNode::~SwContentNode()
1007 {
1008 // The base class SwClient of SwFrame excludes itself from the dependency list!
1009 // Thus, we need to delete all Frames in the dependency list.
1010 DelFrames(false);
1011
** CID 1405231: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/layout/anchoreddrawobject.cxx: 62 in SwPosNotify::~SwPosNotify()()
________________________________________________________________________________________________________
*** CID 1405231: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/layout/anchoreddrawobject.cxx: 62 in SwPosNotify::~SwPosNotify()()
56 {
57 maOldObjRect = mpAnchoredDrawObj->GetObjRect();
58 // --> #i35640# - determine correct page frame
59 mpOldPageFrame = mpAnchoredDrawObj->GetPageFrame();
60 }
61
>>> CID 1405231: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
62 SwPosNotify::~SwPosNotify()
63 {
64 if ( maOldObjRect != mpAnchoredDrawObj->GetObjRect() )
65 {
66 if( maOldObjRect.HasArea() && mpOldPageFrame )
67 {
** CID 1405230: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/text/redlnitr.cxx: 185 in SwRedlineItr::~SwRedlineItr()()
________________________________________________________________________________________________________
*** CID 1405230: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/text/redlnitr.cxx: 185 in SwRedlineItr::~SwRedlineItr()()
179 pExt = new SwExtend( *pArr, nExtStart );
180 else
181 pExt = nullptr;
182 Seek (rFnt, 0, COMPLETE_STRING);
183 }
184
>>> CID 1405230: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
185 SwRedlineItr::~SwRedlineItr()
186 {
187 Clear( nullptr );
188 delete pSet;
189 delete pExt;
190 }
** CID 1405229: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/undel.cxx: 519 in SwUndoDelete::~SwUndoDelete()()
________________________________________________________________________________________________________
*** CID 1405229: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/undel.cxx: 519 in SwUndoDelete::~SwUndoDelete()()
513 pDelTextNd->EraseText( pStt->nContent, 1 );
514
515 m_bGroup = true;
516 return true;
517 }
518
>>> CID 1405229: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
519 SwUndoDelete::~SwUndoDelete()
520 {
521 delete m_pSttStr;
522 delete m_pEndStr;
523 if( m_pMvStt ) // Delete also the selection from UndoNodes array
524 {
** CID 1405228: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/crsr/crsrsh.cxx: 1426 in SwNotifyAccAboutInvalidTextSelections::~SwNotifyAccAboutInvalidTextSelections()()
________________________________________________________________________________________________________
*** CID 1405228: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/crsr/crsrsh.cxx: 1426 in SwNotifyAccAboutInvalidTextSelections::~SwNotifyAccAboutInvalidTextSelections()()
1420
1421 public:
1422 explicit SwNotifyAccAboutInvalidTextSelections( SwCursorShell& _rCursorSh )
1423 : mrCursorSh( _rCursorSh )
1424 {}
1425
>>> CID 1405228: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
1426 ~SwNotifyAccAboutInvalidTextSelections()
1427 {
1428 mrCursorSh.InvalidateAccessibleParaTextSelection();
1429 }
1430 };
1431
** CID 1405227: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/docnode/ndtbl.cxx: 2362 in SwTableNode::~SwTableNode()()
________________________________________________________________________________________________________
*** CID 1405227: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/docnode/ndtbl.cxx: 2362 in SwTableNode::~SwTableNode()()
2356 SwTableNode::SwTableNode( const SwNodeIndex& rIdx )
2357 : SwStartNode( rIdx, SwNodeType::Table )
2358 {
2359 m_pTable = new SwTable;
2360 }
2361
>>> CID 1405227: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
2362 SwTableNode::~SwTableNode()
2363 {
2364 // Notify UNO wrappers
2365 SwFrameFormat* pTableFormat = GetTable().GetFrameFormat();
2366 SwPtrMsgPoolItem aMsgHint( RES_REMOVE_UNO_OBJECT,
2367 pTableFormat );
** CID 1405226: (UNCAUGHT_EXCEPT)
/sw/source/core/layout/frmtool.cxx: 443 in SwLayNotify::~SwLayNotify()()
/sw/source/core/layout/frmtool.cxx: 443 in SwLayNotify::~SwLayNotify()()
________________________________________________________________________________________________________
*** CID 1405226: (UNCAUGHT_EXCEPT)
/sw/source/core/layout/frmtool.cxx: 443 in SwLayNotify::~SwLayNotify()()
437 pLowerFrame->InvalidateObjs( false );
438
439 pLowerFrame = pLowerFrame->GetNext();
440 }
441 }
442
>>> CID 1405226: (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
443 SwLayNotify::~SwLayNotify()
444 {
445 SwLayoutFrame *pLay = static_cast<SwLayoutFrame*>(mpFrame);
446 SwRectFnSet aRectFnSet(pLay);
447 bool bNotify = false;
448 if ( pLay->Prt().SSize() != maPrt.SSize() )
/sw/source/core/layout/frmtool.cxx: 443 in SwLayNotify::~SwLayNotify()()
437 pLowerFrame->InvalidateObjs( false );
438
439 pLowerFrame = pLowerFrame->GetNext();
440 }
441 }
442
>>> CID 1405226: (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
443 SwLayNotify::~SwLayNotify()
444 {
445 SwLayoutFrame *pLay = static_cast<SwLayoutFrame*>(mpFrame);
446 SwRectFnSet aRectFnSet(pLay);
447 bool bNotify = false;
448 if ( pLay->Prt().SSize() != maPrt.SSize() )
** CID 1405225: (UNCAUGHT_EXCEPT)
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
________________________________________________________________________________________________________
*** CID 1405225: (UNCAUGHT_EXCEPT)
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
96 mnFlyAnchorOfstNoWrap = 0;
97 }
98
99 mbHadFollow = pF->IsContentFrame() && static_cast<SwContentFrame*>(pF)->GetFollow();
100 }
101
>>> CID 1405225: (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
102 SwFrameNotify::~SwFrameNotify()
103 {
104 SwRectFnSet aRectFnSet(mpFrame);
105 const bool bAbsP = aRectFnSet.PosDiff(maFrame, mpFrame->Frame());
106 const bool bChgWidth =
107 aRectFnSet.GetWidth(maFrame) != aRectFnSet.GetWidth(mpFrame->Frame());
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
96 mnFlyAnchorOfstNoWrap = 0;
97 }
98
99 mbHadFollow = pF->IsContentFrame() && static_cast<SwContentFrame*>(pF)->GetFollow();
100 }
101
>>> CID 1405225: (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
102 SwFrameNotify::~SwFrameNotify()
103 {
104 SwRectFnSet aRectFnSet(mpFrame);
105 const bool bAbsP = aRectFnSet.PosDiff(maFrame, mpFrame->Frame());
106 const bool bChgWidth =
107 aRectFnSet.GetWidth(maFrame) != aRectFnSet.GetWidth(mpFrame->Frame());
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
96 mnFlyAnchorOfstNoWrap = 0;
97 }
98
99 mbHadFollow = pF->IsContentFrame() && static_cast<SwContentFrame*>(pF)->GetFollow();
100 }
101
>>> CID 1405225: (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
102 SwFrameNotify::~SwFrameNotify()
103 {
104 SwRectFnSet aRectFnSet(mpFrame);
105 const bool bAbsP = aRectFnSet.PosDiff(maFrame, mpFrame->Frame());
106 const bool bChgWidth =
107 aRectFnSet.GetWidth(maFrame) != aRectFnSet.GetWidth(mpFrame->Frame());
/sw/source/core/layout/frmtool.cxx: 102 in SwFrameNotify::~SwFrameNotify()()
96 mnFlyAnchorOfstNoWrap = 0;
97 }
98
99 mbHadFollow = pF->IsContentFrame() && static_cast<SwContentFrame*>(pF)->GetFollow();
100 }
101
>>> CID 1405225: (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
102 SwFrameNotify::~SwFrameNotify()
103 {
104 SwRectFnSet aRectFnSet(mpFrame);
105 const bool bAbsP = aRectFnSet.PosDiff(maFrame, mpFrame->Frame());
106 const bool bChgWidth =
107 aRectFnSet.GetWidth(maFrame) != aRectFnSet.GetWidth(mpFrame->Frame());
** CID 1405224: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/undobj.cxx: 804 in SwUndoSaveSection::~SwUndoSaveSection()()
________________________________________________________________________________________________________
*** CID 1405224: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/undobj.cxx: 804 in SwUndoSaveSection::~SwUndoSaveSection()()
798 // save a complete section into UndoNodes array
799 SwUndoSaveSection::SwUndoSaveSection()
800 : pMvStt( nullptr ), pRedlSaveData( nullptr ), nMvLen( 0 ), nStartPos( ULONG_MAX )
801 {
802 }
803
>>> CID 1405224: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
804 SwUndoSaveSection::~SwUndoSaveSection()
805 {
806 if( pMvStt ) // delete also the section from UndoNodes array
807 {
808 // SaveSection saves the content in the PostIt section.
809 SwNodes& rUNds = pMvStt->GetNode().GetNodes();
** CID 1405223: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/unins.cxx: 193 in SwUndoInsert::~SwUndoInsert()()
________________________________________________________________________________________________________
*** CID 1405223: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/unins.cxx: 193 in SwUndoInsert::~SwUndoInsert()()
187 }
188 }
189 }
190 return bRet;
191 }
192
>>> CID 1405223: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
193 SwUndoInsert::~SwUndoInsert()
194 {
195 if (m_pUndoNodeIndex) // delete the section from UndoNodes array
196 {
197 // Insert saves the content in IconSection
198 SwNodes& rUNds = m_pUndoNodeIndex->GetNodes();
** CID 1405222: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/untblk.cxx: 134 in SwUndoInserts::~SwUndoInserts()()
________________________________________________________________________________________________________
*** CID 1405222: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/undo/untblk.cxx: 134 in SwUndoInserts::~SwUndoInserts()()
128 }
129 delete pFrameFormats;
130 pFrameFormats = nullptr;
131 }
132 }
133
>>> CID 1405222: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "std::length_error" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
134 SwUndoInserts::~SwUndoInserts()
135 {
136 if (m_pUndoNodeIndex) // delete also the section from UndoNodes array
137 {
138 // Insert saves content in IconSection
139 SwNodes& rUNds = m_pUndoNodeIndex->GetNodes();
** CID 1405221: Memory - illegal accesses (OVERRUN)
/svl/source/numbers/zforscan.cxx: 1737 in ImpSvNumberformatScan::FinalScan(rtl::OUString &)()
________________________________________________________________________________________________________
*** CID 1405221: Memory - illegal accesses (OVERRUN)
/svl/source/numbers/zforscan.cxx: 1737 in ImpSvNumberformatScan::FinalScan(rtl::OUString &)()
1731 else
1732 {
1733 if ( bFrac && ( nCounter > 0 ) )
1734 bDenomin = true; // next content should be treated as outside denominator
1735 nTypeArray[i] = NF_SYMBOLTYPE_STRING;
1736 }
>>> CID 1405221: Memory - illegal accesses (OVERRUN)
>>> Overrunning array "this->sStrArray" of 100 8-byte elements at element index 65535 (byte offset 524280) using index "i" (which evaluates to 65535).
1737 nPos = nPos + sStrArray[i].getLength();
1738 i++;
1739 }
1740 else if (nTypeArray[i] == NF_SYMBOLTYPE_DEL)
1741 {
1742 sal_Unicode cHere = sStrArray[i][0];
** CID 1404792: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/ole/ndole.cxx: 764 in SwOLEObj::~SwOLEObj()()
________________________________________________________________________________________________________
*** CID 1404792: Error handling issues (UNCAUGHT_EXCEPT)
/sw/source/core/ole/ndole.cxx: 764 in SwOLEObj::~SwOLEObj()()
758 m_pDeflateData(nullptr)
759 {
760 xOLERef.Lock();
761 xOLERef.SetViewAspect( nAspect );
762 }
763
>>> CID 1404792: Error handling issues (UNCAUGHT_EXCEPT)
>>> An exception of type "o3tl::divide_by_zero" is thrown but the throw list "throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually calls terminate().
764 SwOLEObj::~SwOLEObj()
765 {
766 if(m_pDeflateData)
767 {
768 // set flag so that the worker thread will delete m_pDeflateData
769 // when finished and forget about it
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRZBnDJeNb0HijxaS4JNJPxk3kpyAm2AYqo71yXmnOxB72ibeUH-2F-2F1Lhi9AZq3dRu-2F4-3D_g-2BrHdvqzaBa155F-2F8AmPhpJzY63UzWDisJV95WUBpGhqFw1ICExHG8aMaV2EoFpy5Yi0iv5HUgVayWx4JphMlkuYpGDBtS9sRNLtLItlQhb0uEvbdExC8CjE-2BLT-2FmCwyoyXHrGFNj3YeXUyKdenGjPHVtJFRIMdzMAGDe6fCfXHUahuqWBpy3ILUyn7KW7lJ8z-2BvR8kAcGUPC8Z2441OXAs6WtiF1Uxx0WpNlgZ-2F-2B3A-3D
To manage Coverity Scan email notifications for "libreoffice at lists.freedesktop.org", click https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRbVDbis712qZDP-2FA8y06Nq4k1FZJSDV-2FTHi5VQof9xGafB4oBwGYxuHHknceo2QLpCrZ44Ciy7AqBR2QyX6OCB5N5X-2B1MAElavPQhH6nLwozJzqOkt2k8uOkYf2ZoppNa9QVe0T3fEZVQ7Kky1tOkLz_g-2BrHdvqzaBa155F-2F8AmPhpJzY63UzWDisJV95WUBpGhqFw1ICExHG8aMaV2EoFpy5Yi0iv5HUgVayWx4JphMloxBSmG2DyLkZ2LIFeoxyZOyB1B0a7c3LJeLDmbLqUGIvOPgyoproP9vrhHxbJC9sliutu7yNsjBbUgXhU4XBaPsXHT3uD1sZoD6PGByKFgCY070ZUP2Zgr0nYLkpYrZeQ6VNtvrBDn-2F2zVmZknOFIk-3D
More information about the LibreOffice
mailing list