backend: Fix use after free in CBaseBackendFb::DecRef

brain-anti-freeze · Apr 13, 2024 · 89cd1ca · 89cd1ca
1 parent 39f2779
commit 89cd1ca
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/backend.cpp b/src/backend.cpp
@@ -74,11 +74,12 @@ namespace gamescope
     }
     uint32_t CBaseBackendFb::DecRef()
     {
+        wlr_buffer *pClientBuffer = m_pClientBuffer;
         uint32_t uRefCount = IBackendFb::DecRef();
-        if ( m_pClientBuffer && !uRefCount )
+        if ( pClientBuffer && !uRefCount )
         {
             wlserver_lock();
-            wlr_buffer_unlock( m_pClientBuffer );
+            wlr_buffer_unlock( pClientBuffer );
             wlserver_unlock();
         }
         return uRefCount;