fdo#68064: Do not insert aTempEntry multiple times

...and do not let it go out of scope before being used in BigPtrArray::Remove.
(And, en passant, avoid use of reserved identifier, starting with an underscore
followed by a capital letter.)

Change-Id: Ic5730f707601a2070f2eed3ba017650026657df3

1 files changed, 8 insertions, 4 deletions

diff --git a/sw/source/core/docnode/nodes.cxx b/sw/source/core/docnode/nodes.cxx
index 61c309829977..4c02bf092f18 100644
--- a/sw/source/core/docnode/nodes.cxx
+++ b/sw/source/core/docnode/nodes.cxx
@@ -2323,11 +2323,14 @@ void SwNodes::ForEach( const SwNodeIndex& rStart, const SwNodeIndex& rEnd,
                             (FnForEach) fnForEach, pArgs );
 }
 
-struct _TempBigPtrEntry : public BigPtrEntry
+namespace {
+
+struct TempBigPtrEntry : public BigPtrEntry
 {
-    _TempBigPtrEntry() {}
+    TempBigPtrEntry() {}
 };
 
+}
 
 void SwNodes::RemoveNode( sal_uLong nDelPos, sal_uLong nSz, sal_Bool bDel )
 {
@@ -2371,6 +2374,7 @@ void SwNodes::RemoveNode( sal_uLong nDelPos, sal_uLong nSz, sal_Bool bDel )
         }
     }
 
+    std::vector<TempBigPtrEntry> aTempEntries;
     if( bDel )
     {
         sal_uLong nCnt = nSz;
@@ -2383,14 +2387,14 @@ void SwNodes::RemoveNode( sal_uLong nDelPos, sal_uLong nSz, sal_Bool bDel )
         //      ablaueft, wird hier ein temp. Objekt eingefuegt, das
         //      dann mit dem Remove wieder entfernt wird.
         // siehe Bug 55406
-        _TempBigPtrEntry aTempEntry;
-        BigPtrEntry* pTempEntry = &aTempEntry;
+        aTempEntries.resize(nCnt);
 
         while( nCnt-- )
         {
             delete pDel;
             pDel = pPrev;
             sal_uLong nPrevNdIdx = pPrev->GetIndex();
+            BigPtrEntry* pTempEntry = &aTempEntries[nCnt];
             BigPtrArray::Replace( nPrevNdIdx+1, pTempEntry );
             if( nCnt )
                 pPrev = (*this)[ nPrevNdIdx  - 1 ];