From f28d798073e571cb3114208cfa81653b9b502f6c Mon Sep 17 00:00:00 2001
From: Simon Howard
Date: Wed, 3 Jun 2015 20:20:37 -0400
Subject: Fix demo desyncs caused by P_RunThinkers() change.

1bcff874c52a changed the behavior of P_RunThinkers() to avoid
dereferencing thinker pointers after they had been freed, but the
modified version of the function was not logically equivalent to
Vanilla version, because the 'next' pointer can be changed by the
thinker function if one is invoked.

This fixes a desync in tnt-speed-movie-0443131.lmp. Thanks to Zvonimir
Bužanić for the bug report and Fabian Greffrath for reporting.

Fixes #547.
---
 src/strife/p_tick.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/strife/p_tick.c')

diff --git a/src/strife/p_tick.c b/src/strife/p_tick.c
index c0dd4786..3c6caa06 100644
--- a/src/strife/p_tick.c
+++ b/src/strife/p_tick.c
@@ -104,11 +104,10 @@ void P_RunThinkers (void)
     currentthinker = thinkercap.next;
     while (currentthinker != &thinkercap)
     {
-        nextthinker = currentthinker->next;
-
         if ( currentthinker->function.acv == (actionf_v)(-1) )
         {
             // time to remove it
+            nextthinker = currentthinker->next;
             currentthinker->next->prev = currentthinker->prev;
             currentthinker->prev->next = currentthinker->next;
             Z_Free (currentthinker);
@@ -117,6 +116,7 @@ void P_RunThinkers (void)
         {
             if (currentthinker->function.acp1)
                 currentthinker->function.acp1 (currentthinker);
+            nextthinker = currentthinker->next;
         }
 
         currentthinker = nextthinker;
-- 
cgit v1.2.3