mirrors/labwc
1
0
Fork 0
mirror of https://github.com/labwc/labwc.git synced 2026-04-10 08:21:07 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix UAF when granting an output lease

Browse source 
Wlroots now destroys the wlr_output when granting a lease.
So we can't iterate through the outputs in the request after
granting the lease. This is also not necessary anymore because
they are already destroyed and thus removed from the layout.
This commit is contained in:
Consolatis 2025-07-05 00:15:53 +02:00
parent 76c954fcc9
commit 22924d43e1
3 changed files with 2 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

16
src/server.c
View file

@ -183,22 +183,6 @@ handle_drm_lease_request(struct wl_listener *listener, void *data)
wlr_drm_lease_request_v1_reject(req);
return;
}
for (size_t i = 0; i < req->n_connectors; ++i) {
struct output *output = req->connectors[i]->output->data;
if (!output) {
continue;
}
wlr_output_state_set_enabled(&output->pending, false);
output_state_commit(output);
wlr_output_layout_remove(output->server->output_layout,
output->wlr_output);
output->scene_output = NULL;
output->leased = true;
}
}
static bool