summaryrefslogtreecommitdiff
path: root/unoxml/source/events
diff options
context:
space:
mode:
authorMichael Stahl <mstahl@redhat.com>2016-06-07 14:57:43 +0200
committerMichael Stahl <mstahl@redhat.com>2016-06-07 15:14:17 +0200
commit93f3bd545b65a4df1ed04118f696a85a0e50c423 (patch)
tree2a69fa7fd7972cdfe167a9754b7623e9338d1d97 /unoxml/source/events
parent45a6fdad8101e4ba552ca4d4532d0b03b79dd15a (diff)
unoxml: fix data race in CEventDispatcher::callListeners()
JunitTest_unoxml_complex crashed with an assertion: error: attempt to increment a singular iterator. This is because the CEventDispatcher::dispatchEvent() attempts to copy the m_TargetListeners onto the stack, before dropping the mutex to call the, listeners, but the copy is unintentionally shallow and the ListenerMap that is the value of the outer type is not copied, so this member is accessed in callListeners() without MutexGuard. Fix this by replacing ListenerMap* with ListenerMap as the value, which also allows getting rid of explicit delete calls. 15 0x00002b7793e5ace8 in abort () at /lib64/libc.so.6 16 0x00002b77948c1565 in __gnu_debug::_Error_formatter::_M_error() const () at /lib64/libstdc++.so.6 17 0x00002b77b802a7d8 in __gnu_debug::_Safe_iterator<std::_Rb_tree_const_iterator<std::pair<_xmlNode* const, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener> > >, std::__debug::multimap<_xmlNode*, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener>, std::less<_xmlNode*>, std::allocator<std::pair<_xmlNode* const, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener> > > > >::operator++() (this=0x2b77b7d99c90) at /usr/include/c++/4.8.2/debug/safe_iterator.h:291 18 0x00002b77b80275ae in DOM::events::CEventDispatcher::callListeners(std::__debug::map<rtl::OUString, std::__debug::multimap<_xmlNode*, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener>, std::less<_xmlNode*>, std::allocator<std::pair<_xmlNode* const, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener> > > >*, std::less<rtl::OUString>, std::allocator<std::pair<rtl::OUString const, std::__debug::multimap<_xmlNode*, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener>, std::less<_xmlNode*>, std::allocator<std::pair<_xmlNode* const, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEventListener> > > >*> > > const&, _xmlNode*, rtl::OUString const&, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEvent> const&) (rTMap=std::__debug::map with 1 elements, pNode=0x21a9c10, aType=..., xEvent=...) at /unoxml/source/events/eventdispatcher.cxx:103 pMap = 0x2203b10 iter = {first = , second = {<com::sun::star::uno::BaseReference> = {_pInterface = }, <No data fields>}} ibound = {first = , second = {<com::sun::star::uno::BaseReference> = {_pInterface = }, <No data fields>}} tIter = {first = {pData = }, second = } 19 0x00002b77b80284e4 in DOM::events::CEventDispatcher::dispatchEvent(DOM::CDocument&, osl::Mutex&, _xmlNode*, com::sun::star::uno::Reference<com::sun::star::xml::dom::XNode> const&, com::sun::star::uno::Reference<com::sun::star::xml::dom::events::XEvent> const&) const (this=0x21fbee0, rDocument=..., rMutex=..., pNode=0x2200890, xNode=..., i_xEvent=...) at /unoxml/source/events/eventdispatcher.cxx:242 captureListeners = std::__debug::map with 0 elements targetListeners = std::__debug::map with 1 elements = {[{pData = 0x2202a30}] = 0x2203b10} Change-Id: I66fb7a461df0f8066383365850536f7b0394306d
Diffstat (limited to 'unoxml/source/events')
-rw-r--r--unoxml/source/events/eventdispatcher.cxx34
-rw-r--r--unoxml/source/events/eventdispatcher.hxx2
2 files changed, 15 insertions, 21 deletions
diff --git a/unoxml/source/events/eventdispatcher.cxx b/unoxml/source/events/eventdispatcher.cxx
index 7fd7a48685c9..0dab5b9d0624 100644
--- a/unoxml/source/events/eventdispatcher.cxx
+++ b/unoxml/source/events/eventdispatcher.cxx
@@ -41,16 +41,16 @@ namespace DOM { namespace events {
// get the multimap for the specified type
ListenerMap *pMap = nullptr;
- TypeListenerMap::const_iterator tIter = pTMap->find(aType);
+ auto tIter = pTMap->find(aType);
if (tIter == pTMap->end()) {
// the map has to be created
- pMap = new ListenerMap();
- pTMap->insert(TypeListenerMap::value_type(aType, pMap));
+ auto const pair = pTMap->insert(TypeListenerMap::value_type(aType, ListenerMap()));
+ pMap = & pair.first->second;
} else {
- pMap = tIter->second;
+ pMap = & tIter->second;
}
- if (pMap !=nullptr)
- pMap->insert(ListenerMap::value_type(pNode, aListener));
+ assert(pMap != nullptr);
+ pMap->insert(ListenerMap::value_type(pNode, aListener));
}
void CEventDispatcher::removeListener(xmlNodePtr pNode, const OUString& aType, const Reference<XEventListener>& aListener, bool bCapture)
@@ -59,19 +59,19 @@ namespace DOM { namespace events {
? (& m_CaptureListeners) : (& m_TargetListeners);
// get the multimap for the specified type
- TypeListenerMap::const_iterator tIter = pTMap->find(aType);
+ auto tIter = pTMap->find(aType);
if (tIter != pTMap->end()) {
- ListenerMap *pMap = tIter->second;
+ ListenerMap & rMap = tIter->second;
// find listeners of specified type for specified node
- ListenerMap::iterator iter = pMap->find(pNode);
- while (iter != pMap->end() && iter->first == pNode)
+ ListenerMap::iterator iter = rMap.find(pNode);
+ while (iter != rMap.end() && iter->first == pNode)
{
// erase all references to specified listener
if ((iter->second).is() && iter->second == aListener)
{
ListenerMap::iterator tmp_iter = iter;
++iter;
- pMap->erase(tmp_iter);
+ rMap.erase(tmp_iter);
}
else
++iter;
@@ -81,12 +81,6 @@ namespace DOM { namespace events {
CEventDispatcher::~CEventDispatcher()
{
- // delete the multimaps for the various types
- for (TypeListenerMap::iterator aI = m_CaptureListeners.begin(); aI != m_CaptureListeners.end(); ++aI)
- delete aI->second;
-
- for (TypeListenerMap::iterator aI = m_TargetListeners.begin(); aI != m_TargetListeners.end(); ++aI)
- delete aI->second;
}
void CEventDispatcher::callListeners(
@@ -97,9 +91,9 @@ namespace DOM { namespace events {
// get the multimap for the specified type
TypeListenerMap::const_iterator tIter = rTMap.find(aType);
if (tIter != rTMap.end()) {
- ListenerMap *pMap = tIter->second;
- ListenerMap::const_iterator iter = pMap->lower_bound(pNode);
- ListenerMap::const_iterator ibound = pMap->upper_bound(pNode);
+ ListenerMap const& rMap = tIter->second;
+ auto iter = rMap.lower_bound(pNode);
+ auto const ibound = rMap.upper_bound(pNode);
for( ; iter != ibound; ++iter )
{
if((iter->second).is())
diff --git a/unoxml/source/events/eventdispatcher.hxx b/unoxml/source/events/eventdispatcher.hxx
index d8703ac1bba6..d992ff30d8d3 100644
--- a/unoxml/source/events/eventdispatcher.hxx
+++ b/unoxml/source/events/eventdispatcher.hxx
@@ -42,7 +42,7 @@ class CDocument;
namespace events {
typedef std::multimap< xmlNodePtr, css::uno::Reference< css::xml::dom::events::XEventListener> > ListenerMap;
-typedef std::map< OUString, ListenerMap*> TypeListenerMap;
+typedef std::map<OUString, ListenerMap> TypeListenerMap;
class CEventDispatcher
{