https://issues.apache.org/ooo/show_bug.cgi?id=123672

--- Comment #11 from Armin Le Grand <[email protected]> ---
Looks as if mem in ScPrintFunc gets corrupted; the ~ScPrintFunc() crashes when
trying to free members pPageEndX, pPageEndY and pPageRows, so these seem to be
used wrong. They are allocated as simple arrays in ScPrintFunc::CalcPages() and
the size of the array of SCROW for pPageEndY and of ScPageRowEntry for
pPageRows is calculated first. When debugging I see that
ScPrintFunc::CalcPages() gets called a 2nd time for the same instance leading
to a bigger result for Y-Size, but no reallocation is done. Thus, mem behind
the alloced stuff may be written/changed...

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
You are watching all bug changes.

Reply via email to