diff options
| author | Uli Schlachter <psychon@znc.in> | 2011-10-09 09:37:03 +0200 |
|---|---|---|
| committer | Uli Schlachter <psychon@znc.in> | 2011-10-09 09:37:03 +0200 |
| commit | dca4e6c2dd6ebed73abbeb1dd87cb26a3b09685a (patch) | |
| tree | fe9875ea9e3e133432f28ea883bada13562b7134 /src/cairo-clip-boxes.c | |
| parent | 4092e90be5aaedb1182650aa0aee0cae89883ea9 (diff) | |
clip: Fix clip-double-free
If the call to _cairo_clip_set_all_clipped() right after this is hit,
clip->boxes was freed twice.
Signed-off-by: Uli Schlachter <psychon@znc.in>
Diffstat (limited to 'src/cairo-clip-boxes.c')
| -rw-r--r-- | src/cairo-clip-boxes.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/cairo-clip-boxes.c b/src/cairo-clip-boxes.c index 16f5f7fc..1c3f9403 100644 --- a/src/cairo-clip-boxes.c +++ b/src/cairo-clip-boxes.c @@ -294,6 +294,7 @@ _cairo_clip_intersect_boxes (cairo_clip_t *clip, if (clip->boxes != &clip->embedded_box) free (clip->boxes); + clip->boxes = NULL; boxes = &clip_boxes; } |