Resolve TODO about possible use after free bug.

src/servers/notification/AppGroupView.cpp

@@ -185,11 +185,10 @@ AppGroupView::AddInfo(NotificationView* view)
 
 		for (int32 i = 0; i < children; i++) {
 			if (id == fInfo[i]->MessageID()) {
-				// TODO: because NotificationWindow also tracks these
+				NotificationView* oldView = fInfo[i];
-				// views, we may be heading towards a use-after-free with
+				fParent->NotificationViewSwapped(oldView, view);
-				// this code.
+				GetLayout()->RemoveView(oldView);
-				GetLayout()->RemoveView(fInfo[i]);
+				delete oldView;
-				delete fInfo[i];
 				
 				fInfo[i] = view;
 				found = true;

src/servers/notification/NotificationWindow.cpp

@@ -324,6 +324,17 @@ NotificationWindow::_ShowHide()
 }
 
 
+void
+NotificationWindow::NotificationViewSwapped(NotificationView* stale,
+	NotificationView* fresh)
+{
+	views_t::iterator it = find(fViews.begin(), fViews.end(), stale);
+
+	if (it != fViews.end())
+		*it = fresh;
+}
+
+
 void
 NotificationWindow::SetPosition()
 {

src/servers/notification/NotificationWindow.h

@@ -57,6 +57,10 @@ public:
 private:
 	friend class AppGroupView;
 
+			void					NotificationViewSwapped(
+										NotificationView* stale,
+										NotificationView* fresh);
+
 			void					SetPosition();
 			void					_LoadSettings(bool startMonitor = false);
 			void					_LoadAppFilters(bool startMonitor = false);