sway

commit 32e5e5232d1b0b5a34b4296a79a4e8cfa32b5090
parent 3e956b922958b182912775497812cd42439b2955
Author: Kirill Primak <vyivel@eclair.cafe>
Date:   Wed,  7 Aug 2024 15:27:02 +0300

tearing: fix UAF on destroy

Fixes: 9a1c411abd8261c121dcd50dfe54132718768084

Diffstat:
M
sway/desktop/tearing.c
 | 
2
++

1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/sway/desktop/tearing.c b/sway/desktop/tearing.c
@@ -29,6 +29,8 @@ static void handle_tearing_controller_destroy(struct wl_listener *listener,
 		void *data) {
 	struct sway_tearing_controller *controller =
 		wl_container_of(listener, controller, destroy);
+	wl_list_remove(&controller->set_hint.link);
+	wl_list_remove(&controller->destroy.link);
 	wl_list_remove(&controller->link);
 	free(controller);
 }