Paul Gofman : d3d8: Fix crash in d3d8_vertexbuffer_Release().

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 90bd6dc3eedda2c65308258ca49056d006fae222
URL:    https://source.winehq.org/git/wine.git/?a=commit;h=90bd6dc3eedda2c65308258ca...

Author: Paul Gofman <gofmanp(a)gmail.com>
Date:   Tue Dec 18 19:57:24 2018 +0300

d3d8: Fix crash in d3d8_vertexbuffer_Release().

Signed-off-by: Paul Gofman <gofmanp(a)gmail.com>
Signed-off-by: Henri Verbeet <hverbeet(a)codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard(a)winehq.org>

---

 dlls/d3d8/buffer.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/dlls/d3d8/buffer.c b/dlls/d3d8/buffer.c
index 58aaff2..887ecf4 100644
--- a/dlls/d3d8/buffer.c
+++ b/dlls/d3d8/buffer.c
@@ -74,12 +74,13 @@ static ULONG WINAPI d3d8_vertexbuffer_Release(IDirect3DVertexBuffer8 *iface)
 
     if (!refcount)
     {
+        struct wined3d_buffer *draw_buffer = buffer->draw_buffer;
         IDirect3DDevice8 *device = buffer->parent_device;
 
         wined3d_mutex_lock();
         wined3d_buffer_decref(buffer->wined3d_buffer);
-        if (buffer->draw_buffer)
-            wined3d_buffer_decref(buffer->draw_buffer);
+        if (draw_buffer)
+            wined3d_buffer_decref(draw_buffer);
         wined3d_mutex_unlock();
 
         /* Release the device last, as it may cause the device to be destroyed. */