gdiplus: Fix use after free in GdipAddPathString.

3ca82048 · Esme Povirk · Alexandre Julliard · 02b68a0a · 3ca82048
Commit 3ca82048 authored Mar 01, 2024 by Esme Povirk Committed by Alexandre Julliard Mar 01, 2024
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

graphicspath.c dlls/gdiplus/graphicspath.c +1 -1

No files found.
--- a/dlls/gdiplus/graphicspath.c
+++ b/dlls/gdiplus/graphicspath.c
@@ -1141,7 +1141,6 @@ GpStatus WINGDIPAPI GdipAddPathString(GpPath* path, GDIPCONST WCHAR* string, INT
    }

    get_log_fontW(font, graphics, &lfw);
-    GdipDeleteGraphics(graphics);

    hfont = CreateFontIndirectW(&lfw);
    if (!hfont)
@@ -1167,6 +1166,7 @@ GpStatus WINGDIPAPI GdipAddPathString(GpPath* path, GDIPCONST WCHAR* string, INT
    DeleteDC(dc);
    DeleteObject(hfont);
    GdipDeleteFont(font);
+    GdipDeleteGraphics(graphics);

    if (status != Ok) /* free backup */
    {