Skip to content

backend/drm: Fix memory leak

Alexander Orzechowski requested to merge Nefsen402/wlroots:drm-page-flip-leak into master

Fixes: #3756 (closed)

This implementation uses aligned memory using the least significant bits to tag the pointer with a serial used to track concurrent page flips. With this approach, we're free to just free() page flip structs whenever we want without risking UAF.

Compile tested on x86 and tested on asahi (aarch64)

Merge request reports