1
1
mirror of https://github.com/swaywm/sway synced 2025-12-26 01:01:44 +01:00
sway/sway/input
llyyr 238f0d4a8b tiling_resize: fix use-after-free on view unmap during resize
Closing a tiled window (mod+shift+q) while resizing (mod+click) causes
an use-after-free in handle_unref.

Both conditions can be true in this case, which will result in
dereferencing `e` on the second check after it has already been freed by
the first `seatop_begin_default`.

Fix by combining separate checks for the main container and its
horizontal/vertical siblings into a single condition.

The second check was added in 9e272a7986aa586a73951069aa76068e408a2c3f
and I've checked that this fix does not regress that issue.
2025-12-19 14:05:18 +01:00
..
cursor.c sway/input/cursor: send frame event when simulating pointer from tablet 2025-10-05 19:46:53 +02:00
input-manager.c input/input-manager: remove event listeners on fini 2025-04-13 23:40:56 +02:00
keyboard.c Remove trailing spaces 2025-06-05 18:15:56 +02:00
libinput.c Revert drag_lock default to disabled 2025-07-29 09:41:19 +02:00
seat.c stringop: move over has_prefix() 2025-01-07 16:35:31 +01:00
seatop_default.c Add cursor->hidden check to handle_rebase 2025-08-03 15:01:21 +02:00
seatop_down.c input/seatop_down: Update decorations for touchscreen inputs 2025-05-06 11:22:41 +02:00
seatop_move_floating.c Convert to new pointer enums 2024-02-28 14:28:11 -05:00
seatop_move_tiling.c Convert to new pointer enums 2024-02-28 14:28:11 -05:00
seatop_resize_floating.c Convert to new pointer enums 2024-02-28 14:28:11 -05:00
seatop_resize_tiling.c tiling_resize: fix use-after-free on view unmap during resize 2025-12-19 14:05:18 +01:00
switch.c Drop server.h include from input/input-manager.h 2024-05-27 09:28:43 -04:00
tablet.c Chase wlroots!2434 2024-07-14 23:19:19 +02:00
text_input.c input/text_input: stop using listener data 2025-09-15 07:41:51 +02:00