Hi,
Please find the latest report on new defect(s) introduced to LibreOffice found with Coverity Scan.
7 new defect(s) introduced to LibreOffice found with Coverity Scan.
5 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by
Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 7 of 7 defect(s)
** CID 1433648: Error handling issues (CHECKED_RETURN)
/sc/source/filter/xml/xmldrani.cxx: 447 in ScXMLDatabaseRangeContext::endFastElement(int)()
________________________________________________________________________________________________________
*** CID 1433648: Error handling issues (CHECKED_RETURN)
/sc/source/filter/xml/xmldrani.cxx: 447 in ScXMLDatabaseRangeContext::endFastElement(int)()
441 {
442 ::std::unique_ptr<ScDBData> pData(ConvertToDBData(sDatabaseRangeName));
443
444 if (pData.get())
445 {
446 setAutoFilterFlags(*pDoc, *pData);
CID 1433648: Error handling issues (CHECKED_RETURN)
Calling "insert" without checking return value (as is done elsewhere 13 out of 15 times).
447 pDoc->GetDBCollection()->getNamedDBs().insert(pData.release());
448 }
449 }
450 }
451
452 ScXMLSourceSQLContext::ScXMLSourceSQLContext( ScXMLImport& rImport,
** CID 1433647: Error handling issues (CHECKED_RETURN)
/sfx2/qa/cppunit/test_misc.cxx: 174 in <unnamed>::MiscTest::testHardLinks()()
________________________________________________________________________________________________________
*** CID 1433647: Error handling issues (CHECKED_RETURN)
/sfx2/qa/cppunit/test_misc.cxx: 174 in <unnamed>::MiscTest::testHardLinks()()
168 CPPUNIT_ASSERT(xComponent.is());
169
170 uno::Reference<frame::XStorable> xStorable(xComponent, uno::UNO_QUERY);
171 xStorable->store();
172
173 struct stat buf;
CID 1433647: Error handling issues (CHECKED_RETURN)
Calling "stat(aOld.getStr(), &buf)" without checking return value. This library function
may fail and return an error code. [Note: The source code implementation of the function has
been overridden by a builtin model.]
174 stat(aOld.getStr(), &buf);
175 // This failed: hard link count was 1, the hard link broke on store.
176 CPPUNIT_ASSERT(buf.st_nlink > 1);
177
178 xComponent->dispose();
179 #endif
** CID 1433646: Null pointer dereferences (FORWARD_NULL)
________________________________________________________________________________________________________
*** CID 1433646: Null pointer dereferences (FORWARD_NULL)
/sd/source/ui/slidesorter/controller/SlsClipboard.cxx: 446 in
sd::slidesorter::controller::Clipboard::CreateSlideTransferable(vcl::Window *, bool)()
440
441 if (bDrag)
442 SD_MOD()->pTransferDrag = pTransferable;
443 else
444 SD_MOD()->pTransferClip = pTransferable;
445
CID 1433646: Null pointer dereferences (FORWARD_NULL)
Passing null pointer "pDocument" to "CreatingDataObj", which dereferences it.
446 pDocument->CreatingDataObj (pTransferable);
447 pTransferable->SetWorkDocument(pDocument->AllocSdDrawDocument());
448 std::unique_ptr<TransferableObjectDescriptor> pObjDesc(new
TransferableObjectDescriptor);
449 pTransferable->GetWorkDocument()->GetDocSh()
450 ->FillTransferableObjectDescriptor (*pObjDesc);
451
** CID 1433645: Memory - illegal accesses (OVERRUN)
/sw/source/core/access/accpara.cxx: 2855 in SwAccessibleParagraph::setAttributes(int, int, const
com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> &)()
________________________________________________________________________________________________________
*** CID 1433645: Memory - illegal accesses (OVERRUN)
/sw/source/core/access/accpara.cxx: 2855 in SwAccessibleParagraph::setAttributes(int, int, const
com::sun::star::uno::Sequence<com::sun::star::beans::PropertyValue> &)()
2849 sal_Int32 nLength = rAttributeSet.getLength();
2850 const PropertyValue* pPairs = rAttributeSet.getConstArray();
2851 sal_Int32* pIndices = new sal_Int32[nLength];
2852 sal_Int32 i;
2853 for( i = 0; i < nLength; i++ )
2854 pIndices[i] = i;
CID 1433645: Memory - illegal accesses (OVERRUN)
Overrunning dynamic array "pIndices" at offset corresponding to index variable "nLength".
2855 sort( &pIndices[0], &pIndices[nLength], IndexCompare(pPairs) );
2856
2857 // create sorted sequences according to index array
2858 uno::Sequence< OUString > aNames( nLength );
2859 OUString* pNames = aNames.getArray();
2860 uno::Sequence< uno::Any > aValues( nLength );
** CID 1433644: Null pointer dereferences (FORWARD_NULL)
________________________________________________________________________________________________________
*** CID 1433644: Null pointer dereferences (FORWARD_NULL)
/sd/source/ui/slidesorter/controller/SlsClipboard.cxx: 463 in
sd::slidesorter::controller::Clipboard::CreateSlideTransferable(vcl::Window *, bool)()
457 {
458 ViewShell* pViewShell = mrSlideSorter.GetViewShell();
459 if (pViewShell != nullptr)
460 pActionWindow = pViewShell->GetActiveWindow();
461 }
462
CID 1433644: Null pointer dereferences (FORWARD_NULL)
Passing null pointer "pActionWindow" to "GetPointerPosPixel", which dereferences it.
463 pTransferable->SetStartPos (pActionWindow->PixelToLogic(
464 pActionWindow->GetPointerPosPixel()));
465 pTransferable->SetObjectDescriptor (std::move(pObjDesc));
466
467 {
468 TemporarySlideTrackingDeactivator aDeactivator (mrController);
** CID 1401334: Error handling issues (UNCAUGHT_EXCEPT)
/usr/include/c++/7/bits/unique_ptr.h: 371 in std::unique_ptr<SwChartLockController_Helper,
std::default_delete<SwChartLockController_Helper>>::reset(SwChartLockController_Helper *)()
________________________________________________________________________________________________________
*** CID 1401334: Error handling issues (UNCAUGHT_EXCEPT)
/usr/include/c++/7/bits/unique_ptr.h: 371 in std::unique_ptr<SwChartLockController_Helper,
std::default_delete<SwChartLockController_Helper>>::reset(SwChartLockController_Helper *)()
365 *
366 * @param __p The new pointer to store.
367 *
368 * The deleter will be invoked if a pointer is already owned.
369 */
370 void
CID 1401334: Error handling issues (UNCAUGHT_EXCEPT)
An exception of type "com::sun::star::uno::RuntimeException" is thrown but the throw list
"throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually
calls terminate().
371 reset(pointer __p = pointer()) noexcept
372 {
373 using std::swap;
374 swap(_M_t._M_ptr(), __p);
375 if (__p != pointer())
376 get_deleter()(__p);
** CID 1401328: Error handling issues (UNCAUGHT_EXCEPT)
/usr/include/c++/7/bits/unique_ptr.h: 264 in std::unique_ptr<SwChartLockController_Helper,
std::default_delete<SwChartLockController_Helper>>::~unique_ptr()()
________________________________________________________________________________________________________
*** CID 1401328: Error handling issues (UNCAUGHT_EXCEPT)
/usr/include/c++/7/bits/unique_ptr.h: 264 in std::unique_ptr<SwChartLockController_Helper,
std::default_delete<SwChartLockController_Helper>>::~unique_ptr()()
258 template<typename _Up, typename = _Require<
259 is_convertible<_Up*, _Tp*>, is_same<_Dp, default_delete<_Tp>>>>
260 unique_ptr(auto_ptr<_Up>&& __u) noexcept;
261 #endif
262
263 /// Destructor, invokes the deleter if the stored pointer is not null.
CID 1401328: Error handling issues (UNCAUGHT_EXCEPT)
An exception of type "com::sun::star::uno::RuntimeException" is thrown but the throw list
"throw()" doesn't allow it to be thrown. This will cause a call to unexpected() which usually
calls terminate().
264 ~unique_ptr() noexcept
265 {
266 auto& __ptr = _M_t._M_ptr();
267 if (__ptr != nullptr)
268 get_deleter()(__ptr);
269 __ptr = pointer();
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit,
https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRZBnDJeNb0HijxaS4JNJPxk3kpyAm2AYqo71yXmnOxB72ibeUH-2F-2F1Lhi9AZq3dRu-2F4-3D_g-2BrHdvqzaBa155F-2F8AmPhpJzY63UzWDisJV95WUBpGhqFw1ICExHG8aMaV2EoFpybxs0vF-2FzJaUsdJNf-2FeeRCITg1nDf-2FJOef-2F-2FTa6Xz7xlHvZD-2Baijcc9e-2F8O94bxBKOcOP-2BBD5ATT8u6EDVt-2BwOLht9pR67Q3Oh8wDVTR0-2FFybLibSkKkd8wltkTcKHwInqujZfuqPVQVvIbEJnSjUuIHOwbOttp-2FwuaG0dc-2F7QkU-3D
Context
- New Defects reported by Coverity Scan for LibreOffice · scan-admin
Privacy Policy |
Impressum (Legal Info) |
Copyright information: Unless otherwise specified, all text and images
on this website are licensed under the
Creative Commons Attribution-Share Alike 3.0 License.
This does not include the source code of LibreOffice, which is
licensed under the Mozilla Public License (
MPLv2).
"LibreOffice" and "The Document Foundation" are
registered trademarks of their corresponding registered owners or are
in actual use as trademarks in one or more countries. Their respective
logos and icons are also subject to international copyright laws. Use
thereof is explained in our
trademark policy.