mirror of
https://github.com/swaywm/sway
synced 2025-12-26 01:01:44 +01:00
Closing a tiled window (mod+shift+q) while resizing (mod+click) causes an use-after-free in handle_unref. Both conditions can be true in this case, which will result in dereferencing `e` on the second check after it has already been freed by the first `seatop_begin_default`. Fix by combining separate checks for the main container and its horizontal/vertical siblings into a single condition. The second check was added in 9e272a7986aa586a73951069aa76068e408a2c3f and I've checked that this fix does not regress that issue. |
||
|---|---|---|
| .. | ||
| cursor.c | ||
| input-manager.c | ||
| keyboard.c | ||
| libinput.c | ||
| seat.c | ||
| seatop_default.c | ||
| seatop_down.c | ||
| seatop_move_floating.c | ||
| seatop_move_tiling.c | ||
| seatop_resize_floating.c | ||
| seatop_resize_tiling.c | ||
| switch.c | ||
| tablet.c | ||
| text_input.c | ||