CVS Update: xc (branch: trunk)

[Eric Anholt]

CVSROOT:	/cvs/xorg
Module name:	xc
Changes by:	anholt at gabe.freedesktop.org	05/08/25 15:11:04

Log message:
  Fix a use-after-free of cursor data by refcounting for the
  sprite.current reference.  The particular path seen was XFixes'
  ReplaceCursor() resulting in the sprite.current being freed, but then it
  getting accessed during the ChangeToCursor() that happens as a result of
  WindowHasNewCursor().

Modified files:
      ./:
        ChangeLog 
      xc/programs/Xserver/dix/:
        events.c 
  
  Revision      Changes    Path
  1.1249        +10 -0     xc/ChangeLog
  1.17          +6 -1      xc/programs/Xserver/dix/events.c