Skip to content

libweston: fix possible crash after a view is removed the layer

Loïc Yhuel requested to merge hwti/weston:fix-wl_list_remove-crash into master

weston_compositor_build_view_list can reconstruct the view_list without a view which was previously in it. The existing pointers in view->link are left unchanged, which could lead to corruption or access to released memory in wl_list_remove, depending of the order of destruction of the views.

This can happen at least with the black view created by the desktop shell for fullscreen surfaces, when it is hidden in lower_fullscreen_layer.

Edited by Loïc Yhuel

Merge request reports

Loading