diff options
| author | Liam P. White <inkscapebrony@gmail.com> | 2014-11-10 14:06:53 +0000 |
|---|---|---|
| committer | Liam P. White <inkscapebrony@gmail.com> | 2014-11-10 14:06:53 +0000 |
| commit | 581b206d6d02582aa5b20bb7f8c523be458357d8 (patch) | |
| tree | eca3ef66f0364eb958593ad5ca893dc86cb2bd97 /src/gradient-drag.cpp | |
| parent | fix a bug pointed by su_v in fillet chamfer dialog, about units (diff) | |
| download | inkscape-581b206d6d02582aa5b20bb7f8c523be458357d8.tar.gz inkscape-581b206d6d02582aa5b20bb7f8c523be458357d8.zip | |
Fix use-after-free crash
(bzr r13698)
Diffstat (limited to 'src/gradient-drag.cpp')
| -rw-r--r-- | src/gradient-drag.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/gradient-drag.cpp b/src/gradient-drag.cpp index a14220cfa..d945231fc 100644 --- a/src/gradient-drag.cpp +++ b/src/gradient-drag.cpp @@ -782,6 +782,8 @@ static void gr_knot_moved_handler(SPKnot *knot, Geom::Point const &ppointer, gui // unlink and delete this dragger dragger->parent->draggers = g_list_remove (dragger->parent->draggers, dragger); + d_new->parent->draggers = g_list_remove (d_new->parent->draggers, dragger); + d_new->parent->selected = g_list_remove (d_new->parent->selected, dragger); delete dragger; // throw out delayed snap context |