edje_message_queue: decrease number of messages when message is removed.

Summary:
Sometimes edje_message_del is called while processing edje message.
It makes double free corruption.

Reviewers: raster, bu5hm4n, zmike

Reviewed By: zmike

Subscribers: bu5hm4n, zmike, cedric, #reviewers, #committers

Tags: #efl

Differential Revision: https://phab.enlightenment.org/D11393

src/lib/edje/edje_message_queue.c

@@ -223,6 +223,7 @@ again:
         if (!lookup_ed) continue;
         tmp_msgq = eina_inlist_remove(tmp_msgq, &(em->inlist_main));
         lookup_ed->messages = eina_inlist_remove(lookup_ed->messages, &(em->inlist_edje));
+        lookup_ed->message.num--;
         if (!lookup_ed->delete_me)
           {
              lookup_ed->processing_messages++;