From 56a85aba5ec065af700257ca688426eef3336107 Mon Sep 17 00:00:00 2001
From: Timo Kreuzer <timo.kreuzer@reactos.org>
Date: Sat, 6 Oct 2012 19:04:36 +0000
Subject: [PATCH] [WIN32K] - Keep an additional reference while processing the
 message list of a message queue - CID 716808

svn path=/trunk/; revision=57501
---
 reactos/win32ss/user/ntuser/msgqueue.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/reactos/win32ss/user/ntuser/msgqueue.c b/reactos/win32ss/user/ntuser/msgqueue.c
index 35c5ca49255..6188a1973b2 100644
--- a/reactos/win32ss/user/ntuser/msgqueue.c
+++ b/reactos/win32ss/user/ntuser/msgqueue.c
@@ -874,6 +874,9 @@ MsqRemoveWindowMessagesFromQueue(PVOID pWindow)
       }
    }
 
+   /* Reference we message queue, so it won't get deleted */
+   IntReferenceMessageQueue(MessageQueue);
+
    /* remove the sent messages for this window */
    CurrentEntry = MessageQueue->SentMessagesListHead.Flink;
    ListHead = &MessageQueue->SentMessagesListHead;
@@ -930,6 +933,9 @@ MsqRemoveWindowMessagesFromQueue(PVOID pWindow)
          CurrentEntry = CurrentEntry->Flink;
       }
    }
+
+   /* Remove the reference we added */
+   IntDereferenceMessageQueue(MessageQueue);
 }
 
 BOOL FASTCALL