https://bugs.kde.org/show_bug.cgi?id=523770
Zamundaaa <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Latest Commit|https://invent.kde.org/plas |https://invent.kde.org/plas |ma/kwin/-/commit/30473e000a |ma/kwin/-/commit/7169fc4125 |95c0cca4dab4ee00b4773388bbd |eaa748b856bb19cda9adbc1aaf6 |462 |3d5 --- Comment #7 from Zamundaaa <[email protected]> --- Git commit 7169fc4125eaa748b856bb19cda9adbc1aaf63d5 by Xaver Hugl, on behalf of Sebastian Müller. Committed on 25/08/2026 at 22:12. Pushed by zamundaaa into branch 'Plasma/6.7'. dpmsinputeventfilter: fix use-after-free in touchUp notify() calls Workspace::requestDpmsState(DpmsState::On), which resets Workspace::m_dpmsFilter and thereby destroys this filter synchronously, from inside its own event handler. The two member assignments that follow the call therefore write into freed memory. The other handlers are unaffected: they call notify() and immediately return without touching any member afterwards. Reorder so that the filter's state is reset before notify() is called, leaving notify() as the last statement that touches this object. (cherry picked from commit 5e984f80c2d84333e5e8a6ad911299a71d753702) M +5 -3 src/dpmsinputeventfilter.cpp https://invent.kde.org/plasma/kwin/-/commit/7169fc4125eaa748b856bb19cda9adbc1aaf63d5 -- You are receiving this mail because: You are watching all bug changes.
