icon cache: Fix double free

The symbolic icon cache code free crashed with a double free
due to a missing ->next in the loop.

diff --git a/gtk/gtkicontheme.c b/gtk/gtkicontheme.c
index dc589254c386c6652b88ea20b295c3d4d423af54..0520686206cdd467cbc034b9af24d4fcaf32c7b9 100644 (file)
--- a/gtk/gtkicontheme.c
+++ b/gtk/gtkicontheme.c
@@ -1568,7 +1568,7 @@ symbolic_pixbuf_cache_free (SymbolicPixbufCache *cache)
 
   while (cache != NULL)
     {
-      next = cache;
+      next = cache->next;
       g_object_unref (cache->pixbuf);
       g_free (cache);