Eina tmpstr: fix race condition.

We take a lock, search the list, and the release the lock before we
finish using the values of the list. While unlikely, the string could be
deleted in the meanwhile.

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/eina/eina_tmpstr.c b/src/lib/eina/eina_tmpstr.c
index 7181b75c65..a49279b698 100644
--- a/src/lib/eina/eina_tmpstr.c
+++ b/src/lib/eina/eina_tmpstr.c
@@ -133,8 +133,9 @@ eina_tmpstr_len(Eina_Tmpstr *tmpstr)
      {
         if (s->str == tmpstr)
           {
+             size_t ret = s->length;
              eina_lock_release(&_mutex);
-             return s->length;
+             return ret;
           }
      }
    eina_lock_release(&_mutex);