xserver/hw
Olivier Fourdan 1930ed233f xwayland: Remove pending stream reference when freeing
The EGLStream backend keeps a queue of pending streams for each Xwayland
window.

However, when this pending queue is freed, the corresponding private
data may not be cleared (typically if the pixmap for this window has
changed before the compositor finished attaching the consumer for the
window's pixmap's original eglstream), leading to a use-after-free and a
crash when trying to use that data as the window pixmap.

Make sure to clear the private data when the pending stream is freed.

Closes: https://gitlab.freedesktop.org/xorg/xserver/-/issues/1055
Signed-off-by: Olivier Fourdan <ofourdan@redhat.com>
Tested-by: Karol Szuster <karolsz9898@gmail.com>
Reviewed-by: Adam Jackson <ajax@redhat.com>
(cherry picked from commit a5f439dcd2)
2020-10-01 08:29:01 +00:00
..
dmx Update URL's in man pages 2020-08-18 04:12:08 +00:00
kdrive Add ddxInputThread call from os layer into ddx layer 2020-01-13 22:25:39 +00:00
vfb Add ddxInputThread call from os layer into ddx layer 2020-01-13 22:25:39 +00:00
xfree86 xfree86: Take second reference for SavedCursor in xf86CursorSetCursor 2020-09-30 15:06:30 +00:00
xnest Add ddxInputThread call from os layer into ddx layer 2020-01-13 22:25:39 +00:00
xquartz Update URL's in man pages 2020-08-18 04:12:08 +00:00
xwayland xwayland: Remove pending stream reference when freeing 2020-10-01 08:29:01 +00:00
xwin Add ddxInputThread call from os layer into ddx layer 2020-01-13 22:25:39 +00:00
Makefile.am Xwayland DDX 2014-04-03 15:19:22 -07:00
meson.build meson: Move Xvfb build under an option. 2017-09-20 13:19:21 -04:00