From 22e659117f4302718e5bb82f7c74251bf032be4d Mon Sep 17 00:00:00 2001 From: Jun Fang Date: Fri, 5 Feb 2016 21:48:00 -0800 Subject: Fix heap-use-after-free in CXFA_FFWidget::GetDataAcc() BUG=pdfium:386 R=thestig@chromium.org Review URL: https://codereview.chromium.org/1680463002 . --- xfa/src/fxfa/src/parser/xfa_layout_appadapter.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/xfa/src/fxfa/src/parser/xfa_layout_appadapter.cpp b/xfa/src/fxfa/src/parser/xfa_layout_appadapter.cpp index 8e0a9444c5..855483bbae 100644 --- a/xfa/src/fxfa/src/parser/xfa_layout_appadapter.cpp +++ b/xfa/src/fxfa/src/parser/xfa_layout_appadapter.cpp @@ -52,6 +52,7 @@ void XFA_ReleaseLayoutItem(CXFA_LayoutItem* pLayoutItem) { XFA_ReleaseLayoutItem(pNode); pNode = pNext; } + pNotify->OnLayoutEvent(pDocLayout, pLayoutItem, XFA_LAYOUTEVENT_ItemRemoving); if (pLayoutItem->m_pFormNode->GetClassID() == XFA_ELEMENT_PageArea) { pNotify->OnPageEvent(static_cast(pLayoutItem), XFA_PAGEEVENT_PageRemoved); -- cgit v1.2.3