Summary: | KWin crash in KWaylandServer::TextInputV2Interface::setModifiersMap() during zwp_input_method_context_v1_modifiers_map | ||
---|---|---|---|
Product: | [Plasma] kwin | Reporter: | Bobby Bingham <koorogi+kdebugs> |
Component: | wayland-generic | Assignee: | KWin default assignee <kwin-bugs-null> |
Status: | RESOLVED FIXED | ||
Severity: | crash | CC: | nate, xaver.hugl |
Priority: | NOR | ||
Version: | 5.27.10 | ||
Target Milestone: | --- | ||
Platform: | Gentoo Packages | ||
OS: | Linux | ||
Latest Commit: | https://invent.kde.org/plasma/kwin/-/commit/2f0faf45858d6dbafa00875e584bc1f6b1861b3a | Version Fixed In: | 5.27.11 |
Description
Bobby Bingham
2024-02-11 19:24:54 UTC
Good investigation. Afaik the wl_array data is deleted again after the callback... https://invent.kde.org/plasma/kwin/-/merge_requests/5203 should address that. Git commit 3a8ae60f87968ba2d16454b331e807b5127bcc85 by Vlad Zahorodnii, on behalf of Xaver Hugl. Committed on 15/02/2024 at 12:07. Pushed by vladz into branch 'master'. wayland/textinput_v2: copy the data instead of assuming ownership The life time of the wl_array is limited to the callback, afterwards it's a dangling pointer M +1 -1 src/wayland/inputmethod_v1.cpp https://invent.kde.org/plasma/kwin/-/commit/3a8ae60f87968ba2d16454b331e807b5127bcc85 Git commit 60849214b3968b779f60f53c8592e1fd6ce2d8af by Vlad Zahorodnii, on behalf of Xaver Hugl. Committed on 15/02/2024 at 12:23. Pushed by vladz into branch 'Plasma/6.0'. wayland/textinput_v2: copy the data instead of assuming ownership The life time of the wl_array is limited to the callback, afterwards it's a dangling pointer (cherry picked from commit 3a8ae60f87968ba2d16454b331e807b5127bcc85) M +1 -1 src/wayland/inputmethod_v1.cpp https://invent.kde.org/plasma/kwin/-/commit/60849214b3968b779f60f53c8592e1fd6ce2d8af Git commit 2f0faf45858d6dbafa00875e584bc1f6b1861b3a by Vlad Zahorodnii, on behalf of Xaver Hugl. Committed on 15/02/2024 at 12:23. Pushed by vladz into branch 'Plasma/5.27'. wayland/textinput_v2: copy the data instead of assuming ownership The life time of the wl_array is limited to the callback, afterwards it's a dangling pointer (cherry picked from commit 3a8ae60f87968ba2d16454b331e807b5127bcc85) M +1 -1 src/wayland/inputmethod_v1_interface.cpp https://invent.kde.org/plasma/kwin/-/commit/2f0faf45858d6dbafa00875e584bc1f6b1861b3a |