maxmustermann/godot
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

[macOS] Fix heap use-after-free in DisplayServer.

Browse source
This commit is contained in:
bruvzg 2020-08-25 13:50:41 +03:00
parent dd58f4da66
commit 9a85948907
No known key found for this signature in database
GPG key ID: FCED35F1CECE0D3A
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
platform/osx/display_server_osx.mm
View file

@ -311,8 +311,6 @@ static NSCursor *_cursorFromSelector(SEL selector, SEL fallback = nil) {
DS_OSX->window_set_transient(wd.transient_children.front()->get(), DisplayServerOSX::INVALID_WINDOW_ID); DS_OSX->window_set_transient(wd.transient_children.front()->get(), DisplayServerOSX::INVALID_WINDOW_ID);
} }
DS_OSX->windows.erase(window_id);
if (wd.transient_parent != DisplayServerOSX::INVALID_WINDOW_ID) { if (wd.transient_parent != DisplayServerOSX::INVALID_WINDOW_ID) {
DisplayServerOSX::WindowData &pwd = DS_OSX->windows[wd.transient_parent]; DisplayServerOSX::WindowData &pwd = DS_OSX->windows[wd.transient_parent];
[pwd.window_object makeKeyAndOrderFront:nil]; // Move focus back to parent. [pwd.window_object makeKeyAndOrderFront:nil]; // Move focus back to parent.
@ -332,6 +330,8 @@ static NSCursor *_cursorFromSelector(SEL selector, SEL fallback = nil) {
DS_OSX->context_vulkan->window_destroy(window_id); DS_OSX->context_vulkan->window_destroy(window_id);
} }
#endif #endif
DS_OSX->windows.erase(window_id);
} }
- (void)windowDidEnterFullScreen:(NSNotification *)notification { - (void)windowDidEnterFullScreen:(NSNotification *)notification {
@ -3803,9 +3803,11 @@ DisplayServerOSX::~DisplayServerOSX() {
} }
//destroy all windows //destroy all windows
for (Map<WindowID, WindowData>::Element *E = windows.front(); E; E = E->next()) { for (Map<WindowID, WindowData>::Element *E = windows.front(); E;) {
[E->get().window_object setContentView:nil]; Map<WindowID, WindowData>::Element *F = E;
[E->get().window_object close]; E = E->next();
[F->get().window_object setContentView:nil];
[F->get().window_object close];
} }
//destroy drivers //destroy drivers