From ca9d4cd3e83f6afe7b794b3cbff164e2dd40f38e Mon Sep 17 00:00:00 2001
From: Peter Hutterer <peter.hutterer@who-t.net>
Date: Wed, 6 May 2026 11:45:15 +1000
Subject: [PATCH] present: actually return the created notifies

present_create_notifies() creates an array of notifies but never returns
them to the caller, despite them being passed individually to
present_add_window_notify(). The caller proceeds with a NULL notifies
array, eventually causing an OOB in present_vblank_notify() when
vblank->notifies is NULL.

Reported-by: Feng Ning, Innora Pte. Ltd.
Part-of: <https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2204>
Signed-off-by: Enrico Weigelt, metux IT consult <info@metux.net>
---
 present/present_notify.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/present/present_notify.c b/present/present_notify.c
index 84592765fc..ec9c1aef73 100644
--- a/present/present_notify.c
+++ b/present/present_notify.c
@@ -101,6 +101,8 @@ present_create_notifies(ClientPtr client, int num_notifies, xPresentNotify *x_no
 
         added++;
     }
+
+    *p_notifies = notifies;
     return Success;
 
 bail: