xemu/include/ui
Marc-André Lureau 330ef31deb ui/win32: fix potential use-after-free with dbus shared memory
DisplaySurface may be free before the pixman image is freed, since the
image is refcounted and used by different objects, including pending
dbus messages.

Furthermore, setting the destroy function in
create_displaysurface_from() isn't appropriate, as it may not be used,
and may be overriden as in ramfb.

Set the destroy function when the shared handle is set, use the HANDLE
directly for destroy data, using a single common helper
qemu_pixman_win32_image_destroy().

Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Reviewed-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Message-ID: <20241008125028.1177932-5-marcandre.lureau@redhat.com>
2024-10-14 17:34:09 +04:00
..
clipboard.h spelling: information 2023-06-09 23:38:16 +03:00
console.h ui/cursor: remove cursor_get_mono_image 2024-10-03 17:26:06 +03:00
dbus-display.h Clean up ill-advised or unusual header guards 2022-05-11 16:50:01 +02:00
dbus-module.h Clean up ill-advised or unusual header guards 2022-05-11 16:50:01 +02:00
dmabuf.h ui/console: move QemuDmaBuf struct def to dmabuf.c 2024-05-14 17:14:12 +04:00
egl-context.h ui: split the GL context in a different object 2021-12-21 10:50:21 +04:00
egl-helpers.h ui/egl: query ANGLE d3d device 2023-06-27 17:08:56 +02:00
gtk.h ui: add optional d3d texture pointer to scanout texture 2023-06-27 17:08:56 +02:00
input.h ui/input: Constify QemuInputHandler structure 2023-10-19 23:13:28 +02:00
kbd-state.h ui/vnc: Do not use console_select() 2024-03-20 10:27:54 +04:00
pixel_ops.h ui: move files to ui/ and include/ui/ 2012-12-19 08:31:30 +01:00
pixman-minimal.h ui/pixman-minimal.h: fix empty allocation 2023-11-21 14:38:14 +04:00
qemu-pixman.h ui/win32: fix potential use-after-free with dbus shared memory 2024-10-14 17:34:09 +04:00
qemu-spice-module.h spice: wire up monitor in QemuSpiceOps. 2020-10-21 15:46:14 +02:00
qemu-spice.h ui/spice: QXLInterface method set_mm_time() is now dead, drop 2023-01-19 13:30:01 +01:00
rect.h include: Clean up includes 2024-01-30 21:20:20 +03:00
sdl2.h ui/sdl2: ignore GUI keys in SDL_TEXTINPUT handler 2024-09-13 20:12:16 +02:00
shader.h opengl: add flipping vertex shader 2017-10-17 10:25:42 +02:00
spice-display.h ui: spelling fixes 2023-08-31 19:47:43 +02:00
surface.h ui+display: rename is_buffer_shared() -> surface_is_allocated() 2024-06-19 12:42:03 +02:00
win32-kbd-hook.h ui/win32-kbd-hook: handle AltGr in a hook procedure 2020-05-19 09:06:44 +02:00