From c329f4e91c5756a19b2e6c78779488975461a060 Mon Sep 17 00:00:00 2001 From: Tautvis Date: Wed, 29 Oct 2025 01:27:55 +0200 Subject: [PATCH] dix: dixFreeScreen call hookPostCreateResources too Call DeleteCallbackList(&pScreen->hookPostCreateResources) during dixFreeScreen, because otherwise it will be heap-use-after-free during DeleteCallbackManager call. Signed-off-by: Tautvis --- dix/screen.c | 1 + 1 file changed, 1 insertion(+) diff --git a/dix/screen.c b/dix/screen.c index fe39a275c4..0cfbee7fcb 100644 --- a/dix/screen.c +++ b/dix/screen.c @@ -25,5 +25,6 @@ void dixFreeScreen(ScreenPtr pScreen) DeleteCallbackList(&pScreen->hookClose); DeleteCallbackList(&pScreen->hookPostClose); DeleteCallbackList(&pScreen->hookPixmapDestroy); + DeleteCallbackList(&pScreen->hookPostCreateResources); free(pScreen); }