https://bugs.kde.org/show_bug.cgi?id=523770
Zamundaaa <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Latest Commit| |https://invent.kde.org/plas | |ma/kwin/-/commit/5e984f80c2 | |d84333e5e8a6ad911299a71d753 | |702 Status|ASSIGNED |RESOLVED --- Comment #3 from Zamundaaa <[email protected]> --- Git commit 5e984f80c2d84333e5e8a6ad911299a71d753702 by Xaver Hugl, on behalf of Sebastian Müller. Committed on 25/08/2026 at 20:44. Pushed by zamundaaa into branch 'master'. dpmsinputeventfilter: fix use-after-free in touchUp notify() calls Workspace::requestDpmsState(DpmsState::On), which resets Workspace::m_dpmsFilter and thereby destroys this filter synchronously, from inside its own event handler. The two member assignments that follow the call therefore write into freed memory. The other handlers are unaffected: they call notify() and immediately return without touching any member afterwards. Reorder so that the filter's state is reset before notify() is called, leaving notify() as the last statement that touches this object. M +5 -3 src/dpmsinputeventfilter.cpp https://invent.kde.org/plasma/kwin/-/commit/5e984f80c2d84333e5e8a6ad911299a71d753702 -- You are receiving this mail because: You are watching all bug changes.
