From b81bb2ef3040e5cf3dcffbddcb5389775c879d85 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gy=C3=B6rgy=20Kurucz?= <kuruczgyurci@hotmail.com>
Date: Sun, 27 Oct 2019 12:40:13 +0100
Subject: [PATCH] Fix heap-use-after-free in
 wlr_send_tablet_v2_tablet_pad_leave

See swaywm/sway#4660
---
 types/tablet_v2/wlr_tablet_v2_pad.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/types/tablet_v2/wlr_tablet_v2_pad.c b/types/tablet_v2/wlr_tablet_v2_pad.c
index 515d1fbb..fdffd475 100644
--- a/types/tablet_v2/wlr_tablet_v2_pad.c
+++ b/types/tablet_v2/wlr_tablet_v2_pad.c
@@ -171,6 +171,9 @@ void destroy_tablet_pad_v2(struct wl_resource *resource) {
 	}
 	free(pad->strips);
 
+	if (pad->pad->current_client == pad) {
+		pad->pad->current_client = NULL;
+	}
 	free(pad);
 	wl_resource_set_user_data(resource, NULL);
 }