timer23
/
efl
forked from enlightenment/efl
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

evas textblock: fix dereferenced memory after free issue for ellipsis 

Summary:
_layout_ellipsis_item_new() function deallocates "ellip_ti" and
allocates memory for new one. The local "ellip_ti" pointer should be
updated.
@fix

Test Plan: N/A

Reviewers: raster, cedric, herdsman, jpeg, woohyun

Differential Revision: https://phab.enlightenment.org/D4854
This commit is contained in:
Youngbok Shin 2017-05-12 14:17:30 +09:00 committed by Jean-Philippe Andre
parent c6d6e13060
commit f97920816d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/lib/evas/canvas/evas_object_textblock.c
View File

@ -5309,7 +5309,7 @@ _layout_par_ellipsis_items(Ctxt *c, double ellip)
off += it->adv;
}
c->o->ellip_prev_it = i;
if (it) _layout_ellipsis_item_new(c, it);
if (it) ellip_ti = _layout_ellipsis_item_new(c, it);
pos = (it && it->type == EVAS_TEXTBLOCK_ITEM_TEXT) ?