mshtml: Fixed use after free in HTMLElement_destructor.
This commit is contained in:
parent
eaa6a9fdcf
commit
873619e9bd
|
@ -1649,7 +1649,10 @@ void HTMLElement_destructor(HTMLDOMNode *iface)
|
||||||
HTMLElement *This = impl_from_HTMLDOMNode(iface);
|
HTMLElement *This = impl_from_HTMLDOMNode(iface);
|
||||||
HTMLDOMAttribute *attr;
|
HTMLDOMAttribute *attr;
|
||||||
|
|
||||||
LIST_FOR_EACH_ENTRY(attr, &This->attrs, HTMLDOMAttribute, entry) {
|
while(!list_empty(&This->attrs)) {
|
||||||
|
attr = LIST_ENTRY(list_head(&This->attrs), HTMLDOMAttribute, entry);
|
||||||
|
|
||||||
|
list_remove(&attr->entry);
|
||||||
attr->elem = NULL;
|
attr->elem = NULL;
|
||||||
IHTMLDOMAttribute_Release(&attr->IHTMLDOMAttribute_iface);
|
IHTMLDOMAttribute_Release(&attr->IHTMLDOMAttribute_iface);
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue