Fix heap-use-after-free in wlr_send_tablet_v2_tablet_pad_leave

See swaywm/sway#4660
This commit is contained in:
György Kurucz 2019-10-27 12:40:13 +01:00 committed by Simon Ser
parent 9971db02ff
commit b81bb2ef30
1 changed files with 3 additions and 0 deletions

View File

@ -171,6 +171,9 @@ void destroy_tablet_pad_v2(struct wl_resource *resource) {
} }
free(pad->strips); free(pad->strips);
if (pad->pad->current_client == pad) {
pad->pad->current_client = NULL;
}
free(pad); free(pad);
wl_resource_set_user_data(resource, NULL); wl_resource_set_user_data(resource, NULL);
} }