mirror of
https://gitlab.freedesktop.org/cairo/cairo.git
synced 2026-05-08 11:28:02 +02:00
clip: Fix clip-double-free
If the call to _cairo_clip_set_all_clipped() right after this is hit, clip->boxes was freed twice. Signed-off-by: Uli Schlachter <psychon@znc.in>
This commit is contained in:
parent
4092e90be5
commit
dca4e6c2dd
1 changed files with 1 additions and 0 deletions
|
|
@ -294,6 +294,7 @@ _cairo_clip_intersect_boxes (cairo_clip_t *clip,
|
||||||
if (clip->boxes != &clip->embedded_box)
|
if (clip->boxes != &clip->embedded_box)
|
||||||
free (clip->boxes);
|
free (clip->boxes);
|
||||||
|
|
||||||
|
clip->boxes = NULL;
|
||||||
boxes = &clip_boxes;
|
boxes = &clip_boxes;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue