[elm_cnp] Fix a use after free problem.

diff --git a/src/lib/elm_cnp.c b/src/lib/elm_cnp.c
index 1cd5606..36099a7 100644 (file)
--- a/src/lib/elm_cnp.c
+++ b/src/lib/elm_cnp.c
@@ -3195,9 +3195,8 @@ elm_drag_item_container_del_internal(Evas_Object *obj, Eina_Bool full)
              st->data_get = NULL;
              evas_object_event_callback_del_full
                 (obj, EVAS_CALLBACK_MOUSE_DOWN, _cont_obj_mouse_down, st);
-
-             free(st);
              cont_drag_tg = eina_list_remove(cont_drag_tg, st);
+             free(st);
           }
 
         return EINA_TRUE;