To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=63803 Issue #:|63803 Summary:|SvHeaderTabListBox::CreateAccessibleCell accesses |invalid array members Component:|ui Version:|680m160 Platform:|All URL:| OS/Version:|All Status:|NEW Status whiteboard:| Keywords:| Resolution:| Issue type:|DEFECT Priority:|P3 Subcomponent:|code Assigned to:|pb Reported by:|fs
------- Additional comments from [EMAIL PROTECTED] Thu Mar 30 02:13:09 -0800 2006 ------- - Tools|Options - switch on Accessibility support, confirm with OK - Tools|Options -> OpenOffice.org / General / Java (I suppose it requires that there is more than one line) - click onto the radio button of an arbitrary cell => STL assertion, then abort FS->PB:SvHeaderTabListBox::CreateAccessibleCell accesses an invalid index in m_aAccessibleChildren, which leads to the STL assertion. In a product version, this can lead to a crash. cvs annotate says this is a regression of your fix for issue 48648. Note: the handling of m_aAccessibleChildren looks flawed to me. It is not adjusted when rows are inserted or removed, and this is what happens here: 1. SvHeaderTabListBox::CreateAccessibleColumnHeader resizes the m_aAccessibleChildren vector to contain 5 elements (since there are 5 columns, but no rows, yet) 2. SvHeaderTabListBox::CreateAccessibleCell finds that m_aAccessibleChildren is not empty, and simply accesses an too-large index. I suggest that m_aAccessibleChildren is adjusted every time a row is inserted or removed. Speaking strictly, this has also to be done if columns are inserted or removed, though this is less likely to happen. --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
