Commit 48194cf0 authored by Uli Schlachter's avatar Uli Schlachter

Merge branch 'fill-use-after-free' into 'master'

Avoid use after free in cairo_fill

See merge request !116
parents ee90ce59 b345be5a
Pipeline #260307 passed with stages
in 26 minutes and 12 seconds
......@@ -1128,6 +1128,7 @@ _cairo_spans_compositor_fill (const cairo_compositor_t *_compositor,
}
if (status == CAIRO_INT_STATUS_UNSUPPORTED) {
cairo_polygon_t polygon;
cairo_box_t limits;
TRACE((stderr, "%s - polygon\n", __FUNCTION__));
......@@ -1138,7 +1139,6 @@ _cairo_spans_compositor_fill (const cairo_compositor_t *_compositor,
if (extents->clip->num_boxes == 1) {
_cairo_polygon_init (&polygon, extents->clip->boxes, 1);
} else {
cairo_box_t limits;
_cairo_box_from_rectangle (&limits, &extents->unbounded);
_cairo_polygon_init (&polygon, &limits, 1);
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment