xserver/Xext/security
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Mason Green 918104424d Xext: security: fix double free when AddResource() fails
When AddResource() cannot allocate its record, it calls the resource
type's delete function before returning FALSE. For an authorization that
is SecurityDeleteAuthorization(), which removes the authorization,
releases its event clients and frees pAuth.

ProcSecurityGenerateAuthorization() then went to bailout, which removed
the authorization a second time and freed pAuth again. Return BadAlloc
directly instead.

Signed-off-by: Mason Green <mason@greenm01.net>
(cherry picked from commit f5f356158c)

Note: This commit was backported from an open PR (3911).
2026-10-13 16:58:15 +02:00
..
meson.build
security.c Xext: security: fix double free when AddResource() fails 2026-10-13 16:58:15 +02:00
securitysrv.h