fix invalid list node accesses, spotted by Benjamin Berg, bug #475158.

2007-09-09 18:22:28  Tim Janik  <timj@gtk.org>

        * gdk/x11/gdkgeometry-x11.c (_gdk_window_process_expose): fix invalid
        list node accesses, spotted by Benjamin Berg, bug #475158.

svn path=/trunk/; revision=18769

diff --git a/ChangeLog b/ChangeLog
index bb2d6d569111264f0f65e2d5b01baa66c153447d..defe6f225941930e53ed0f4f348607875e3ebed2 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2007-09-09 18:22:28  Tim Janik  <timj@gtk.org>
+
+       * gdk/x11/gdkgeometry-x11.c (_gdk_window_process_expose): fix invalid
+       list node accesses, spotted by Benjamin Berg, bug #475158.
+
 2007-09-09  Kristian Rietveld  <kris@gtk.org>
 
        Reverted r16699:

diff --git a/gdk/x11/gdkgeometry-x11.c b/gdk/x11/gdkgeometry-x11.c
index 2b476cfb103688454f7db129eda159a34e302bf1..017acfdeff05533daae0935bdee08a6e218831a7 100644 (file)
--- a/gdk/x11/gdkgeometry-x11.c
+++ b/gdk/x11/gdkgeometry-x11.c
@@ -1142,6 +1142,7 @@ _gdk_window_process_expose (GdkWindow    *window,
       while (tmp_list)
        {
          GdkWindowQueueItem *item = tmp_list->data;
+          GList *next = tmp_list->next;
           if (item->serial - serial < 0x7FFFFFFF)
            {
              if (item->window == window)
@@ -1173,7 +1174,7 @@ _gdk_window_process_expose (GdkWindow    *window,
              queue_delete_link (display_x11->translate_queue, tmp_list);
              queue_item_free (item);
            }
-         tmp_list = tmp_list->next;
+         tmp_list = next;
        }
     }