compositor: fix use after free in wlsc_zoom_frame

Add the missing return statement, so the destroyed zoom object is not
used.

Found by Valgrind.

Signed-off-by: Pekka Paalanen <ppaalanen@gmail.com>

diff --git a/compositor/util.c b/compositor/util.c
index 4ce1774..6d6c0c9 100644 (file)
--- a/compositor/util.c
+++ b/compositor/util.c
@@ -189,8 +189,10 @@ wlsc_zoom_frame(struct wlsc_animation *animation,
 
        wlsc_spring_update(&zoom->spring, msecs);
 
-       if (wlsc_spring_done(&zoom->spring))
+       if (wlsc_spring_done(&zoom->spring)) {
                wlsc_zoom_destroy(zoom);
+               return;
+       }
 
        scale = zoom->start +
                (zoom->stop - zoom->start) * zoom->spring.current;