core.git: bridges/source cppu/source

[Caolán McNamara (via logerrit)]

 bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx |    1 +
 cppu/source/helper/purpenv/helper_purpenv_Proxy.cxx  |    1 +
 2 files changed, 2 insertions(+)

New commits:
commit 4cd24c130c361756485b1bf4cd8e9ef6aa0513c6
Author:     Caolán McNamara <caolan.mcnam...@collabora.com>
AuthorDate: Fri Aug 1 19:40:27 2025 +0100
Commit:     Caolán McNamara <caolan.mcnam...@collabora.com>
CommitDate: Fri Aug 1 22:16:05 2025 +0200

    cid#1660150 silence Use after free
    
    and
    
    cid#1659619 Use after free
    
    Change-Id: If8e25a72475085c5e0d1e7d9b86b5eeff9a2eee6
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/188782
    Tested-by: Jenkins
    Reviewed-by: Caolán McNamara <caolan.mcnam...@collabora.com>

diff --git a/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx 
b/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx
index 8934943622b4..c901449422dd 100644
--- a/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx
+++ b/bridges/source/cpp_uno/gcc3_linux_x86-64/uno2cpp.cxx
@@ -113,6 +113,7 @@ static void cpp_call(
 
     // Return
     typelib_TypeDescription * pReturnTypeDescr = nullptr;
+    // coverity[freed_arg] - pReturnTypeRef's nRefCount is > 1 here
     TYPELIB_DANGER_GET( &pReturnTypeDescr, pReturnTypeRef );
     assert(pReturnTypeDescr);
 
diff --git a/cppu/source/helper/purpenv/helper_purpenv_Proxy.cxx 
b/cppu/source/helper/purpenv/helper_purpenv_Proxy.cxx
index fc4f82daf07c..16352fdac006 100644
--- a/cppu/source/helper/purpenv/helper_purpenv_Proxy.cxx
+++ b/cppu/source/helper/purpenv/helper_purpenv_Proxy.cxx
@@ -397,6 +397,7 @@ void Proxy::dispatch(typelib_TypeDescriptionReference * 
pReturnTypeRef,
     void * ret = pReturn;
     if (pReturnTypeRef)
     {
+        // coverity[freed_arg] - pReturnTypeRef's nRefCount is > 1 here
         TYPELIB_DANGER_GET(&return_td, pReturnTypeRef);
 
         if (relatesToInterface(return_td))