From c1fc84ac140d519e0bfa7a607e36771682b08eed Mon Sep 17 00:00:00 2001
From: Eike Rathke <erack@redhat.com>
Date: Sat, 13 Jun 2015 15:12:32 +0200
Subject: do not access token data after token has been destroyed

Change-Id: I624e64745fd3874be3e1bd3df6bac18dfb17aebb
---
 sc/source/core/tool/token.cxx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'sc')

diff --git a/sc/source/core/tool/token.cxx b/sc/source/core/tool/token.cxx
index 727a3d6d1a4a..bcb7a7b802d9 100644
--- a/sc/source/core/tool/token.cxx
+++ b/sc/source/core/tool/token.cxx
@@ -2345,9 +2345,9 @@ void ScTokenArray::ReadjustAbsolute3DReferences( const ScDocument* pOldDoc, cons
                     OUString aTabName;
                     sal_uInt16 nFileId;
                     GetExternalTableData(pOldDoc, pNewDoc, rRef1.Tab(), aTabName, nFileId);
-                    pCode[j]->DecRef();
                     ScExternalDoubleRefToken* pToken = new ScExternalDoubleRefToken(nFileId, aTabName, rRef);
                     pToken->IncRef();
+                    pCode[j]->DecRef(); // ATTENTION: rRef can't be used after this point
                     pCode[j] = pToken;
                 }
             }
-- 
cgit