src/fccache.c | 7 +++++-- src/fccfg.c | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) New commits: commit 55d39bcad0737e92e1207fabbd8c65fa9e5e0482 Author: Behdad Esfahbod <behdad@xxxxxxxxxx> Date: Wed Jan 16 07:30:44 2013 -0600 Fix fc-cache crash caused by looking up NULL object incorrectly We were returning a skiplist node when looking up NULL! diff --git a/src/fccache.c b/src/fccache.c index ddcf070..610b8f0 100644 --- a/src/fccache.c +++ b/src/fccache.c @@ -449,6 +449,9 @@ FcCacheFindByAddrUnlocked (void *object) FcCacheSkip **next = fcCacheChains; FcCacheSkip *s; + if (!object) + return NULL; + /* * Walk chain pointers one level at a time */ @@ -556,7 +559,7 @@ FcCacheObjectDereference (void *object) skip = FcCacheFindByAddrUnlocked (object); if (skip) { - if (FcRefDec (&skip->ref) <= 1) + if (FcRefDec (&skip->ref) == 1) FcDirCacheDisposeUnlocked (skip->cache); } unlock_cache (); @@ -1109,6 +1112,7 @@ FcDirCacheClean (const FcChar8 *cache_dir, FcBool verbose) cache_dir, ent->d_name, target_dir); remove = FcTrue; } + FcDirCacheUnload (cache); } if (remove) { @@ -1118,7 +1122,6 @@ FcDirCacheClean (const FcChar8 *cache_dir, FcBool verbose) ret = FcFalse; } } - FcDirCacheUnload (cache); FcStrFree (file_name); } diff --git a/src/fccfg.c b/src/fccfg.c index 3e9fdab..12d7e1a 100644 --- a/src/fccfg.c +++ b/src/fccfg.c @@ -337,8 +337,8 @@ FcConfigAddCache (FcConfig *config, FcCache *cache, if (!FcConfigAcceptFont (config, font)) continue; - nref++; - FcFontSetAdd (config->fonts[set], font); + if (FcFontSetAdd (config->fonts[set], font)) + nref++; } FcDirCacheReference (cache, nref); } _______________________________________________ Fontconfig mailing list Fontconfig@xxxxxxxxxxxxxxxxxxxxx http://lists.freedesktop.org/mailman/listinfo/fontconfig