svx/source/svdraw/svdedtv1.cxx |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit bd84bd35e9a64638d7434ef00e4b75f71da7ebfd
Author:     Noel Grandin <[email protected]>
AuthorDate: Tue Dec 9 09:41:13 2025 +0200
Commit:     Noel Grandin <[email protected]>
CommitDate: Tue Dec 9 14:18:28 2025 +0100

    ubsan: fix downcast (2)
    
    svx/source/svdraw/svdedtv1.cxx:1011:56: runtime error: downcast of address 
0x7bd2deeea930 which does not point to an object of type 'const SfxUInt16Item'
    0x7bd2deeea930: note: object is of type 'XFillTransparenceItem'
    00 00 00 00 90 ee bd 84 a2 7b 00 00 00 00 00 00 fb 03 be be 17 02 00 00 89 
be 00 00 00 00 00 00
    ^~~~~~~~~~~~~~~~~~~~~~~
    vptr for 'XFillTransparenceItem'
    
    after
      commit 953219b81126f5c092bf5375c0abe2a7afce40d2
      Author: Noel Grandin <[email protected]>
      Date:   Wed Dec 3 21:34:19 2025 +0200
      make XFillTransparenceItem extend SfxPoolItem
    
    Change-Id: Id29305cf0a7b7431207aaa7f8ede639f035a630e
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/195276
    Tested-by: Jenkins
    Reviewed-by: Noel Grandin <[email protected]>

diff --git a/svx/source/svdraw/svdedtv1.cxx b/svx/source/svdraw/svdedtv1.cxx
index ef9c36668a72..94bfea69508a 100644
--- a/svx/source/svdraw/svdedtv1.cxx
+++ b/svx/source/svdraw/svdedtv1.cxx
@@ -1008,7 +1008,7 @@ void SdrEditView::MergeAttrFromMarked(SfxItemSet& rAttr, 
bool bOnlyHardAttr) con
                         const SfxPoolItem* pItem = 
rSet.GetItem(XATTR_FILLTRANSPARENCE);
                         if (pItem)
                         {
-                            sal_uInt16 nTransparency = static_cast<const 
SfxUInt16Item*>(pItem)->GetValue();
+                            sal_uInt16 nTransparency = static_cast<const 
XFillTransparenceItem*>(pItem)->GetValue();
                             sPayload = OUString::number(nTransparency);
 
                             sPayload = ".uno:FillTransparence=" + sPayload;

Reply via email to