New Defects reported by Coverity Scan for LibreOffice

[scan-admin@xxxxxxxxxxxx]

Hi,

Please find the latest report on new defect(s) introduced to LibreOffice found with Coverity Scan.

4 new defect(s) introduced to LibreOffice found with Coverity Scan.
3 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 4 of 4 defect(s)


** CID 1520429:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/filter/xml/xmltbli.cxx: 2679 in SwXMLTableContext::InsertTableSection(const SwStartNode *, const rtl::OUString *)()


________________________________________________________________________________________________________
*** CID 1520429:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/filter/xml/xmltbli.cxx: 2679 in SwXMLTableContext::InsertTableSection(const SwStartNode *, const rtl::OUString *)()
2673         OTextCursorHelper *pTextCursor = dynamic_cast<OTextCursorHelper*>(xCursorTunnel.get());
2674         OSL_ENSURE( pTextCursor, "SwXTextCursor missing" );
2675     
2676         if( m_bFirstSection )
2677         {
2678             // The Cursor already is in the first section
>>>     CID 1520429:  Null pointer dereferences  (FORWARD_NULL)
>>>     Passing null pointer "pTextCursor" to "GetPaM", which dereferences it. (The dereference happens because this is a virtual function call.)
2679             pStNd = pTextCursor->GetPaM()->GetPointNode().FindTableBoxStartNode();
2680             m_bFirstSection = false;
2681             GetImport().GetTextImport()->SetStyleAndAttrs( GetImport(),
2682                 GetImport().GetTextImport()->GetCursor(), "Standard", true );
2683         }
2684         else

** CID 1520428:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/core/unocore/unoobj2.cxx: 1130 in sw::XTextRangeToSwPaM(SwUnoInternalPaM &, const com::sun::star::uno::Reference<com::sun::star::text::XTextRange> &, sw::TextRangeMode)()


________________________________________________________________________________________________________
*** CID 1520428:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/core/unocore/unoobj2.cxx: 1130 in sw::XTextRangeToSwPaM(SwUnoInternalPaM &, const com::sun::star::uno::Reference<com::sun::star::text::XTextRange> &, sw::TextRangeMode)()
1124             // if it is a header / footer text, and eMode == TextRangeMode::AllowTableNode
1125             // then set the cursor to the beginning of the text
1126             // if it is started with a table then set into the table
1127             xTextCursor.set(pHeadText->CreateTextCursor(true));
1128             xTextCursor->gotoEnd(true);
1129             pCursor = dynamic_cast<OTextCursorHelper*>(xTextCursor.get());
>>>     CID 1520428:  Null pointer dereferences  (FORWARD_NULL)
>>>     Passing null pointer "pCursor" to "GetPaM", which dereferences it. (The dereference happens because this is a virtual function call.)
1130             pCursor->GetPaM()->Normalize();
1131         }
1132         else
1133         if (pText)
1134         {
1135             xTextCursor.set( pText->CreateCursor() );

** CID 1520427:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/core/unocore/unotext.cxx: 983 in SwXText::Impl::CheckForOwnMember(const SwPaM &)()


________________________________________________________________________________________________________
*** CID 1520427:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/core/unocore/unotext.cxx: 983 in SwXText::Impl::CheckForOwnMember(const SwPaM &)()
977     {
978         const uno::Reference<text::XTextCursor> xOwnCursor(m_rThis.CreateCursor());
979     
980         OTextCursorHelper *const pOwnCursor =
981                 dynamic_cast<OTextCursorHelper*>(xOwnCursor.get());
982         OSL_ENSURE(pOwnCursor, "OTextCursorHelper::getUnoTunnelId() ??? ");
>>>     CID 1520427:  Null pointer dereferences  (FORWARD_NULL)
>>>     Passing null pointer "pOwnCursor" to "GetPaM", which dereferences it. (The dereference happens because this is a virtual function call.)
983         const SwStartNode* pOwnStartNode =
984             pOwnCursor->GetPaM()->GetPointNode().StartOfSectionNode();
985         SwStartNodeType eSearchNodeType = SwNormalStartNode;
986         switch (m_eType)
987         {
988             case CursorType::Frame:      eSearchNodeType = SwFlyStartNode;       break;

** CID 1520426:  Null pointer dereferences  (FORWARD_NULL)


________________________________________________________________________________________________________
*** CID 1520426:  Null pointer dereferences  (FORWARD_NULL)
/sw/source/filter/xml/xmltexti.cxx: 877 in SwXMLTextImportHelper::endAppletOrPlugin(const com::sun::star::uno::Reference<com::sun::star::beans::XPropertySet> &, std::map<const rtl::OUString, rtl::OUString, std::less<const rtl::OUString>, std::allocator<std::pair<const rtl::OUString, rtl::OUString>>> &)()
871     {
872         // this method will modify the document directly -> lock SolarMutex
873         SolarMutexGuard aGuard;
874     
875         SwXFrame* pFrame = dynamic_cast<SwXFrame*>(rPropSet.get());
876         OSL_ENSURE( pFrame, "SwXFrame missing" );
>>>     CID 1520426:  Null pointer dereferences  (FORWARD_NULL)
>>>     Passing null pointer "pFrame" to "GetFrameFormat", which dereferences it.
877         SwFrameFormat *pFrameFormat = pFrame->GetFrameFormat();
878         const SwFormatContent& rContent = pFrameFormat->GetContent();
879         const SwNodeIndex *pNdIdx = rContent.GetContentIdx();
880         SwOLENode *pOLENd = pNdIdx->GetNodes()[pNdIdx->GetIndex() + 1]->GetNoTextNode()->GetOLENode();
881         SwOLEObj& rOLEObj = pOLENd->GetOLEObj();
882     


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50ypSs1kiFPuCn2xFdlMIFBirii0zZ9j2-2F9F2XPBcBm2BNgi9duPy3v-2FzgFDd2LJ-2BDKI-3DdPT-_OTq2XUZbbipYjyLSo6GRo-2FpVxQ9OzkDINu9UTS-2FQhSdO0F0jQniitrGlNxDIzPJi8D1J8EBZ3Srhq6ykKAD8XXF27Ihn9fMSywlAZVwWXXqu6LbkhonQNK6WCXFYFnZrk8WiLCxOKXVlvT6I4wlmaSn-2FMQEDN9tV9q7hpRaVXmtlWzQYfZobZo8fV2Sr7xJ7BSEhBqxWOtNQrvqjUhxm0-2FoE7iEJ6O49NUMTten9oz4-3D