ODFstudio/odfstudio
2
0
Fork 0
Code Issues Packages Activity

ofz#558289050 Null-dereference

Browse Source 
the cast of the text cursor isn't checked, unlike the paragraph
cursor a few lines later

Signed-off-by: Caolán McNamara <caolan.mcnamara@collabora.com>
Change-Id: I11bb7b9ea9f2b22978da57e37edab76d67c0f195
Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/12356
Reviewed-by: Noel Grandin <noel.grandin@collabora.com>
Tested-by: Jenkins CPCI <releng@collaboraoffice.com>
(cherry picked from commit d83c2c6937dcfccf3e59459b78610acdd9aad2d3)
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/211411
Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
Tested-by: Jenkins
This commit is contained in:
Caolán McNamara
2026-09-24 11:01:32 +02:00
committed by Xisco Fauli
parent 37fd5b78b0
commit d3fca73f81
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sw/source/writerfilter/dmapper/DomainMapper_Impl.cxx
+2
View File
@@ -3067,6 +3067,8 @@ void DomainMapper_Impl::finishParagraph( const ParagraphPropertyMapPtr& pParaCon
// table style has got bigger precedence than docDefault style
// collect these pending paragraph properties to process in endTable()
rtl::Reference<SwXTextCursor> xCur = dynamic_cast<SwXTextCursor*>(xTextRange->getText( )->createTextCursor().get());
if (!xCur)
throw uno::RuntimeException();
xCur->gotoEnd(false);
xCur->goLeft(1, false);
rtl::Reference<SwXTextCursor> xParaCursor = dynamic_cast<SwXTextCursor*>