New Defects reported by Coverity Scan for LibreOffice
scan-admin at coverity.com
scan-admin at coverity.com
Fri Jan 20 15:11:30 UTC 2023
Hi,
Please find the latest report on new defect(s) introduced to LibreOffice found with Coverity Scan.
4 new defect(s) introduced to LibreOffice found with Coverity Scan.
3 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 4 of 4 defect(s)
** CID 1520429: Null pointer dereferences (FORWARD_NULL)
/sw/source/filter/xml/xmltbli.cxx: 2679 in SwXMLTableContext::InsertTableSection(const SwStartNode *, const rtl::OUString *)()
________________________________________________________________________________________________________
*** CID 1520429: Null pointer dereferences (FORWARD_NULL)
/sw/source/filter/xml/xmltbli.cxx: 2679 in SwXMLTableContext::InsertTableSection(const SwStartNode *, const rtl::OUString *)()
2673 OTextCursorHelper *pTextCursor = dynamic_cast<OTextCursorHelper*>(xCursorTunnel.get());
2674 OSL_ENSURE( pTextCursor, "SwXTextCursor missing" );
2675
2676 if( m_bFirstSection )
2677 {
2678 // The Cursor already is in the first section
>>> CID 1520429: Null pointer dereferences (FORWARD_NULL)
>>> Passing null pointer "pTextCursor" to "GetPaM", which dereferences it. (The dereference happens because this is a virtual function call.)
2679 pStNd = pTextCursor->GetPaM()->GetPointNode().FindTableBoxStartNode();
2680 m_bFirstSection = false;
2681 GetImport().GetTextImport()->SetStyleAndAttrs( GetImport(),
2682 GetImport().GetTextImport()->GetCursor(), "Standard", true );
2683 }
2684 else
** CID 1520428: Null pointer dereferences (FORWARD_NULL)
/sw/source/core/unocore/unoobj2.cxx: 1130 in sw::XTextRangeToSwPaM(SwUnoInternalPaM &, const com::sun::star::uno::Reference<com::sun::star::text::XTextRange> &, sw::TextRangeMode)()
________________________________________________________________________________________________________
*** CID 1520428: Null pointer dereferences (FORWARD_NULL)
/sw/source/core/unocore/unoobj2.cxx: 1130 in sw::XTextRangeToSwPaM(SwUnoInternalPaM &, const com::sun::star::uno::Reference<com::sun::star::text::XTextRange> &, sw::TextRangeMode)()
1124 // if it is a header / footer text, and eMode == TextRangeMode::AllowTableNode
1125 // then set the cursor to the beginning of the text
1126 // if it is started with a table then set into the table
1127 xTextCursor.set(pHeadText->CreateTextCursor(true));
1128 xTextCursor->gotoEnd(true);
1129 pCursor = dynamic_cast<OTextCursorHelper*>(xTextCursor.get());
>>> CID 1520428: Null pointer dereferences (FORWARD_NULL)
>>> Passing null pointer "pCursor" to "GetPaM", which dereferences it. (The dereference happens because this is a virtual function call.)
1130 pCursor->GetPaM()->Normalize();
1131 }
1132 else
1133 if (pText)
1134 {
1135 xTextCursor.set( pText->CreateCursor() );
** CID 1520427: Null pointer dereferences (FORWARD_NULL)
/sw/source/core/unocore/unotext.cxx: 983 in SwXText::Impl::CheckForOwnMember(const SwPaM &)()
________________________________________________________________________________________________________
*** CID 1520427: Null pointer dereferences (FORWARD_NULL)
/sw/source/core/unocore/unotext.cxx: 983 in SwXText::Impl::CheckForOwnMember(const SwPaM &)()
977 {
978 const uno::Reference<text::XTextCursor> xOwnCursor(m_rThis.CreateCursor());
979
980 OTextCursorHelper *const pOwnCursor =
981 dynamic_cast<OTextCursorHelper*>(xOwnCursor.get());
982 OSL_ENSURE(pOwnCursor, "OTextCursorHelper::getUnoTunnelId() ??? ");
>>> CID 1520427: Null pointer dereferences (FORWARD_NULL)
>>> Passing null pointer "pOwnCursor" to "GetPaM", which dereferences it. (The dereference happens because this is a virtual function call.)
983 const SwStartNode* pOwnStartNode =
984 pOwnCursor->GetPaM()->GetPointNode().StartOfSectionNode();
985 SwStartNodeType eSearchNodeType = SwNormalStartNode;
986 switch (m_eType)
987 {
988 case CursorType::Frame: eSearchNodeType = SwFlyStartNode; break;
** CID 1520426: Null pointer dereferences (FORWARD_NULL)
________________________________________________________________________________________________________
*** CID 1520426: Null pointer dereferences (FORWARD_NULL)
/sw/source/filter/xml/xmltexti.cxx: 877 in SwXMLTextImportHelper::endAppletOrPlugin(const com::sun::star::uno::Reference<com::sun::star::beans::XPropertySet> &, std::map<const rtl::OUString, rtl::OUString, std::less<const rtl::OUString>, std::allocator<std::pair<const rtl::OUString, rtl::OUString>>> &)()
871 {
872 // this method will modify the document directly -> lock SolarMutex
873 SolarMutexGuard aGuard;
874
875 SwXFrame* pFrame = dynamic_cast<SwXFrame*>(rPropSet.get());
876 OSL_ENSURE( pFrame, "SwXFrame missing" );
>>> CID 1520426: Null pointer dereferences (FORWARD_NULL)
>>> Passing null pointer "pFrame" to "GetFrameFormat", which dereferences it.
877 SwFrameFormat *pFrameFormat = pFrame->GetFrameFormat();
878 const SwFormatContent& rContent = pFrameFormat->GetContent();
879 const SwNodeIndex *pNdIdx = rContent.GetContentIdx();
880 SwOLENode *pOLENd = pNdIdx->GetNodes()[pNdIdx->GetIndex() + 1]->GetNoTextNode()->GetOLENode();
881 SwOLEObj& rOLEObj = pOLENd->GetOLEObj();
882
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50ypSs1kiFPuCn2xFdlMIFBirii0zZ9j2-2F9F2XPBcBm2BNgi9duPy3v-2FzgFDd2LJ-2BDKI-3DdPT-_OTq2XUZbbipYjyLSo6GRo-2FpVxQ9OzkDINu9UTS-2FQhSdO0F0jQniitrGlNxDIzPJi8D1J8EBZ3Srhq6ykKAD8XXF27Ihn9fMSywlAZVwWXXqu6LbkhonQNK6WCXFYFnZrk8WiLCxOKXVlvT6I4wlmaSn-2FMQEDN9tV9q7hpRaVXmtlWzQYfZobZo8fV2Sr7xJ7BSEhBqxWOtNQrvqjUhxm0-2FoE7iEJ6O49NUMTten9oz4-3D
More information about the LibreOffice
mailing list