diff options
| author | Furkan Sahin <furkan-dev@proton.me> | 2025-03-21 18:35:36 +0100 |
|---|---|---|
| committer | Furkan Sahin <furkan-dev@proton.me> | 2025-03-21 18:35:36 +0100 |
| commit | f9b92b4668cbffe3efc75a04dd1bae415e7077ad (patch) | |
| tree | eae246cd4915db70ccc8160f112f2a29e460a64d /include | |
| parent | 4fa27dd69b2cfcf2858c59686ea6e627aea6909d (diff) | |
server: recreate renderer in idle callback to avoid UAF
Destroying the wlr_renderer in a callback to its own renderer_lost event
is unsafe due to wl_signal_emit*() still accessing it after it was
destroyed.
Delegate recreation of renderer to an idle callback and ensure that only
one such idle callback is scheduled at a time by storing the returned
event source.
Diffstat (limited to 'include')
| -rw-r--r-- | include/sway/server.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/sway/server.h b/include/sway/server.h index feb516c5..b1d7523c 100644 --- a/include/sway/server.h +++ b/include/sway/server.h @@ -46,6 +46,7 @@ struct sway_server { struct wl_listener new_output; struct wl_listener renderer_lost; + struct wl_event_source *recreating_renderer; struct wlr_idle_notifier_v1 *idle_notifier_v1; struct sway_idle_inhibit_manager_v1 idle_inhibit_manager_v1; |