backend/wayland: fix wlr_wl_pointer use-after-free

6 years ago · 933208837d
parent f42816ce3f
commit 933208837d
1 changed files with 5 additions and 0 deletions
--- a/backend/wayland/wl_seat.c
+++ b/backend/wayland/wl_seat.c
@ -331,6 +331,11 @@ struct wlr_wl_pointer *pointer_get_wl(struct wlr_pointer *wlr_pointer) {

 static void pointer_destroy(struct wlr_pointer *wlr_pointer) {
 	struct wlr_wl_pointer *pointer = pointer_get_wl(wlr_pointer);
+
+	if (pointer->output->backend->current_pointer == pointer) {
+		pointer->output->backend->current_pointer = NULL;
+	}
+
 	wl_list_remove(&pointer->output_destroy.link);
 	free(pointer);
 }