compositor: fix use after free in wlsc_zoom_frame
Add the missing return statement, so the destroyed zoom object is not
used.
Found by Valgrind.
Signed-off-by: Pekka Paalanen <ppaalanen@gmail.com>
diff --git a/compositor/util.c b/compositor/util.c
index 4ce1774..6d6c0c9 100644
--- a/compositor/util.c
+++ b/compositor/util.c
@@ -189,8 +189,10 @@
wlsc_spring_update(&zoom->spring, msecs);
- if (wlsc_spring_done(&zoom->spring))
+ if (wlsc_spring_done(&zoom->spring)) {
wlsc_zoom_destroy(zoom);
+ return;
+ }
scale = zoom->start +
(zoom->stop - zoom->start) * zoom->spring.current;