Partial review of the patch so far. I haven't read much openbox code so take this with a grain of salt.
https://bugzilla.icculus.org/show_bug.cgi?id=6669#c9 mentions a concern that itPrev may still be pointing to invalid data. I share this concern. I think some interesting testcases are what happens with lists that have one or two elements, which then are modified by this function. In the single element case, I believe your itPrev now points to the deleted item, and in the two element case, itPrev may be ok but itPrev->prev or itPrev->next are both probably not valid.
Partial review of the patch so far. I haven't read much openbox code so take this with a grain of salt.
https:/ /bugzilla. icculus. org/show_ bug.cgi? id=6669# c9 mentions a concern that itPrev may still be pointing to invalid data. I share this concern. I think some interesting testcases are what happens with lists that have one or two elements, which then are modified by this function. In the single element case, I believe your itPrev now points to the deleted item, and in the two element case, itPrev may be ok but itPrev->prev or itPrev->next are both probably not valid.
https:/ /bugzilla. icculus. org/show_ bug.cgi? id=6669# c5 mentions a work branch. I suggest tracking that down and considering it. It's presumably this patch https:/ /bugzilla. icculus. org/attachment. cgi?id= 3646&action= diff.