avoid memory corruption (#357050).

[~andy/gtk] / gtk / gtktextbtree.c

diff --git a/gtk/gtktextbtree.c b/gtk/gtktextbtree.c
index 30b5d5cd850a1b578f258e385b7ffa2473a558da..d8e436d74a7a0f5e5d553e1b08917853dfd9666a 100644 (file)
--- a/gtk/gtktextbtree.c
+++ b/gtk/gtktextbtree.c
@@ -886,6 +886,7 @@ _gtk_text_btree_delete (GtkTextIter *start,
               start_line->segments = seg;
             }
           else if (prev_seg->next &&
+                  prev_seg->next != last_seg &&
                   seg->type == &gtk_text_toggle_off_type &&
                   prev_seg->next->type == &gtk_text_toggle_on_type &&
                   seg->body.toggle.info == prev_seg->next->body.toggle.info)