zmike pushed a commit to branch master.
http://git.enlightenment.org/core/efl.git/commit/?id=91ab84286a87521fea9f7eba587e0a095c8dcc5d
commit 91ab84286a87521fea9f7eba587e0a095c8dcc5d
Author: Hosang Kim <hosang12....@samsung.com>
Date: Tue Mar 17 09:52:59 2020 -0400
edje_message_queue: decrease number of messages when message is removed.
Summary:
Sometimes edje_message_del is called while processing edje message.
It makes double free corruption.
Reviewers: raster, bu5hm4n, zmike
Reviewed By: zmike
Subscribers: bu5hm4n, zmike, cedric, #reviewers, #committers
Tags: #efl
Differential Revision: https://phab.enlightenment.org/D11393
---
src/lib/edje/edje_message_queue.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/lib/edje/edje_message_queue.c
b/src/lib/edje/edje_message_queue.c
index 020f89b46d..d92601073b 100644
--- a/src/lib/edje/edje_message_queue.c
+++ b/src/lib/edje/edje_message_queue.c
@@ -223,6 +223,7 @@ again:
if (!lookup_ed) continue;
tmp_msgq = eina_inlist_remove(tmp_msgq, &(em->inlist_main));
lookup_ed->messages = eina_inlist_remove(lookup_ed->messages,
&(em->inlist_edje));
+ lookup_ed->message.num--;
if (!lookup_ed->delete_me)
{
lookup_ed->processing_messages++;
--
