From f66cfd7369b3c12cd0ed4c47c49377ed01727abd Mon Sep 17 00:00:00 2001 From: JUN FANG Date: Thu, 16 Apr 2015 15:19:04 -0700 Subject: Fix heap use after free in FT_Stream_ReleaseFrame Adjust the release order of resource to fix this issue. BUG=452793 R=tsepez@chromium.org Review URL: https://codereview.chromium.org/1082023002 --- xfa/src/fwl/src/core/fwl_noteimp.cpp | 2 +- xfa/src/fwl/src/core/fwl_widgetmgrimp.cpp | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'xfa/src/fwl') diff --git a/xfa/src/fwl/src/core/fwl_noteimp.cpp b/xfa/src/fwl/src/core/fwl_noteimp.cpp index 51041dba5b..101516fcac 100644 --- a/xfa/src/fwl/src/core/fwl_noteimp.cpp +++ b/xfa/src/fwl/src/core/fwl_noteimp.cpp @@ -307,7 +307,7 @@ FWL_ERR CFWL_NoteDriver::Run() } } while (pWidgetMgr->CheckMessage_Native()); } -#elif (_FX_OS_==_FX_LINUX_DESKTOP_ || _FX_OS_ == _FX_LINUX_EMBEDDED_) +#elif (_FX_OS_==_FX_LINUX_DESKTOP_) CFWL_NoteLoop *pTopLoop = NULL; for (;;) { pTopLoop = GetTopLoop(); diff --git a/xfa/src/fwl/src/core/fwl_widgetmgrimp.cpp b/xfa/src/fwl/src/core/fwl_widgetmgrimp.cpp index b5e2547722..283c328008 100644 --- a/xfa/src/fwl/src/core/fwl_widgetmgrimp.cpp +++ b/xfa/src/fwl/src/core/fwl_widgetmgrimp.cpp @@ -738,7 +738,7 @@ FWL_ERR CFWL_WidgetMgrDelegate::OnDrawWidget(IFWL_Widget * pWidget, return FWL_ERR_Succeeded; } CFX_RectF clipBounds; -#if (_FX_OS_==_FX_WIN32_DESKTOP_) || (_FX_OS_==_FX_WIN64_) || (_FX_OS_ == _FX_LINUX_DESKTOP_) || (_FX_OS_ == _FX_LINUX_EMBEDDED_) || (_FX_OS_ == _FX_ANDROID_) +#if (_FX_OS_==_FX_WIN32_DESKTOP_) || (_FX_OS_==_FX_WIN64_) || (_FX_OS_ == _FX_LINUX_DESKTOP_) || (_FX_OS_ == _FX_ANDROID_) IFWL_WidgetDelegate *pDelegate = pWidget->SetDelegate(NULL); pDelegate->OnDrawWidget(pTemp, pMatrix); pGraphics->GetClipRect(clipBounds); -- cgit v1.2.3