sw/source/filter/md/mdcallbcks.cxx |    3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

New commits:
commit e9c5969d4eb54fba77c6b7723905e7d5940c2004
Author:     Ujjawal Kumar <[email protected]>
AuthorDate: Mon Dec 8 22:05:25 2025 +0530
Commit:     Miklos Vajna <[email protected]>
CommitDate: Fri Dec 12 18:07:48 2025 +0100

    tdf#169884 fix crash due to missing empty check before removing element
    
    (cherry picked from commit d38e5bc4102a228d49fdfeddc1e510e9b5bdd7ed)
    
    Change-Id: If2f02b9f67513645ab3d5b9ace7e8776d1c06d88
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/195564
    Tested-by: Jenkins CollaboraOffice <[email protected]>
    Reviewed-by: Miklos Vajna <[email protected]>

diff --git a/sw/source/filter/md/mdcallbcks.cxx 
b/sw/source/filter/md/mdcallbcks.cxx
index 937d88a14571..298322a6264c 100644
--- a/sw/source/filter/md/mdcallbcks.cxx
+++ b/sw/source/filter/md/mdcallbcks.cxx
@@ -236,7 +236,8 @@ int SwMarkdownParser::enter_span_callback(MD_SPANTYPE type, 
void* detail, void*
 int SwMarkdownParser::leave_span_callback(MD_SPANTYPE type, void* /*detail*/, 
void* userdata)
 {
     SwMarkdownParser* parser = static_cast<SwMarkdownParser*>(userdata);
-    parser->m_aAttrStack.pop_back();
+    if (!parser->m_aAttrStack.empty())
+        parser->m_aAttrStack.pop_back();
     switch (type)
     {
         case MD_SPAN_IMG:

Reply via email to