Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-14633

Converity: use after free

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P3: Somewhat important
    • Resolution: Out of scope
    • Affects Version/s: 4.7.1
    • Fix Version/s: Some future release
    • Component/s: XML: DOM
    • Labels:
      None

      Description

      1226 QXmlItem &QXmlItem::operator=(const QXmlItem &other)
      1227 {
      1228 if(m_node != other.m_node)
      1229

      { 1230 if(internalIsAtomicValue() && !m_atomicValue->ref.deref()) Event freed_arg: Pointer "(*this).m_atomicValue" freed by function "operator delete (void *)" 1231 delete m_atomicValue; 1232 1233 m_node = other.m_node; 1234 At conditional (1): "this->internalIsAtomicValue()" taking true path 1235 if(internalIsAtomicValue()) Event use_after_free: Using freed pointer "(*this).m_atomicValue" 1236 m_atomicValue->ref.ref(); 1237 }

      1238
      1239 return *this;

        Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            guoqing guoqing zhang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Gerrit Reviews

                There are no open Gerrit changes