fdo-mirrors/cairo
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/cairo/cairo.git synced 2026-05-01 11:28:09 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge branch 'tag_stack' into 'master'

Browse source 
Fix use-after-free in _cairo_tag_stack_pop

See merge request cairo/cairo!483
This commit is contained in:
Uli Schlachter 2023-06-29 15:11:17 +00:00
commit 42555cb0a7
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/cairo-tag-stack.c
View file

@ -249,10 +249,12 @@ _cairo_tag_stack_pop (cairo_tag_stack_t *stack,
cairo_list_del (&top->link);
stack->size--;
if (strcmp (top->name, name) != 0) {
cairo_status_t status =
_cairo_tag_error ("cairo_tag_end(\"%s\") does not matching previous begin tag \"%s\"",
name, top->name);
stack->type = TAG_TYPE_INVALID;
_cairo_tag_stack_free_elem (top);
return _cairo_tag_error ("cairo_tag_end(\"%s\") does not matching previous begin tag \"%s\"",
name, top->name);
return status;
}
if (elem)