From a581ba59649b69f2477a16d70cf9e18c0460ba6f Mon Sep 17 00:00:00 2001
From: Tautvis <gtautvis@gmail.com>
Date: Wed, 29 Oct 2025 01:27:55 +0200
Subject: [PATCH] dix: dixFreeScreen call hookPostCreateResources too

Call DeleteCallbackList(&pScreen->hookPostCreateResources) during
dixFreeScreen, because otherwise it will be heap-use-after-free during
DeleteCallbackManager call.

Signed-off-by: Tautvis <gtautvis@gmail.com>
---
 dix/screen.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dix/screen.c b/dix/screen.c
index 05be0beeb1..7dc7bf8cf8 100644
--- a/dix/screen.c
+++ b/dix/screen.c
@@ -29,5 +29,6 @@ void dixFreeScreen(ScreenPtr pScreen)
     DeleteCallbackList(&pScreen->hookClose);
     DeleteCallbackList(&pScreen->hookPostClose);
     DeleteCallbackList(&pScreen->hookPixmapDestroy);
+    DeleteCallbackList(&pScreen->hookPostCreateResources);
     free(pScreen);
 }