sd/source/ui/tools/SlideshowLayerRenderer.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 741278ca493729bb8156951271dc68182b3c0c45
Author:     Miklos Vajna <[email protected]>
AuthorDate: Mon Feb 9 09:05:55 2026 +0100
Commit:     Xisco Fauli <[email protected]>
CommitDate: Tue Feb 10 17:10:30 2026 +0100

    sd: fix crash in AnalyzeRenderingRedirector
    
    gdb on the crashreport core dump:
    
            #0  0x000071590be5da30 in o3tl::cow_wrapper<OutlinerParaObjData, 
o3tl::UnsafeRefCountingPolicy>::operator-> (this=<optimized out>)
                at include/o3tl/cow_wrapper.hxx:331
            #1  OutlinerParaObject::Count (this=0x0) at 
editeng/source/outliner/outlobj.cxx:168
            #2  0x00007158fd9ccb0a in sd::(anonymous 
namespace)::AnalyzeRenderingRedirector::createRedirectedPrimitive2DSequence 
(this=0x7ffc29a67820, rOriginal=..., rDisplayInfo=...)
                at sd/source/ui/tools/SlideshowLayerRenderer.cxx:550
            #3  0x000071590d4469ee in 
sdr::contact::ViewObjectContact::getPrimitive2DSequence 
(this=this@entry=0x560c9e40, rDisplayInfo=...)
                at svx/source/sdr/contact/viewobjectcontact.cxx:477
            #4  0x000071590d447109 in 
sdr::contact::ViewObjectContact::getPrimitive2DSequenceHierarchy 
(this=0x560c9e40, rDisplayInfo=..., rVisitor=...)
                at svx/source/sdr/contact/viewobjectcontact.cxx:551
    
    I.e. it's possible that in
    AnalyzeRenderingRedirector::createRedirectedPrimitive2DSequence(),
    pTextObject is non-nullptr but pTextObject->GetOutlinerParaObject() is
    nullptr, check for this.
    
    Change-Id: I1013809f134115fbeb56a9962d71380aaee17b22
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/199059
    Reviewed-by: Miklos Vajna <[email protected]>
    Tested-by: Jenkins
    (cherry picked from commit 7096036e38958a493fef7708677721cb3243bca6)
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/199074
    Reviewed-by: Xisco Fauli <[email protected]>

diff --git a/sd/source/ui/tools/SlideshowLayerRenderer.cxx 
b/sd/source/ui/tools/SlideshowLayerRenderer.cxx
index 7f025300dde0..8675630ced5f 100644
--- a/sd/source/ui/tools/SlideshowLayerRenderer.cxx
+++ b/sd/source/ui/tools/SlideshowLayerRenderer.cxx
@@ -543,7 +543,7 @@ public:
             if (!aInfo.maParagraphs.empty()) // we need to render paragraphs
             {
                 auto* pTextObject = dynamic_cast<SdrTextObj*>(pObject);
-                if (pTextObject)
+                if (pTextObject && pTextObject->GetOutlinerParaObject())
                 {
                     sal_Int32 nNumberOfParagraphs = 
pTextObject->GetOutlinerParaObject()->Count();
 

Reply via email to