mirror of
https://github.com/swaywm/sway.git
synced 2024-12-29 16:36:26 +01:00
e5ece5f8b3
When destroying swaynag from within wl_display_dispatch, we cannot disconnect the display as that will free the queue's event_list. Free it after running the loop instead. Fixes this use-after-free: ==7312==ERROR: AddressSanitizer: heap-use-after-free on address 0x612000000110 at pc 0x000000412a9f bp 0x7ffd4e811760 sp 0x7ffd4e811750 READ of size 8 at 0x612000000110 thread T0 #0 0x412a9e in wl_list_empty ../common/list.c:206 #1 0x7f5b58f0d42f in dispatch_queue src/wayland-client.c:1572 #2 0x7f5b58f0d42f in wl_display_dispatch_queue_pending src/wayland-client.c:1815 #3 0x40f465 in swaynag_run ../swaynag/swaynag.c:390 #4 0x407576 in main ../swaynag/main.c:123 #5 0x7f5b58bb9412 in __libc_start_main ../csu/libc-start.c:308 #6 0x404a3d in _start (/opt/wayland/bin/swaynag+0x404a3d) 0x612000000110 is located 208 bytes inside of 320-byte region [0x612000000040,0x612000000180) freed by thread T0 here: #0 0x7f5b594ab480 in free (/lib64/libasan.so.5+0xef480) #1 0x40faff in swaynag_destroy ../swaynag/swaynag.c:454 #2 0x40cbb4 in layer_surface_closed ../swaynag/swaynag.c:82 #3 0x7f5b583e1acd in ffi_call_unix64 (/lib64/libffi.so.6+0x6acd) previously allocated by thread T0 here: #0 0x7f5b594aba50 in __interceptor_calloc (/lib64/libasan.so.5+0xefa50) #1 0x7f5b58f0c902 in wl_display_connect_to_fd src/wayland-private.h:236 (you need a wayland compiled with asan, my wl_list hack, or running with valgrind to see this trace)
456 lines
14 KiB
C
456 lines
14 KiB
C
#define _XOPEN_SOURCE 500
|
|
#include <stdlib.h>
|
|
#include <assert.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/wait.h>
|
|
#include <unistd.h>
|
|
#include <wayland-client.h>
|
|
#include <wayland-cursor.h>
|
|
#include "log.h"
|
|
#include "list.h"
|
|
#include "swaynag/render.h"
|
|
#include "swaynag/swaynag.h"
|
|
#include "swaynag/types.h"
|
|
#include "wlr-layer-shell-unstable-v1-client-protocol.h"
|
|
|
|
static void nop() {
|
|
// Intentionally left blank
|
|
}
|
|
|
|
static bool terminal_execute(char *terminal, char *command) {
|
|
char fname[] = "/tmp/swaynagXXXXXX";
|
|
FILE *tmp= fdopen(mkstemp(fname), "w");
|
|
if (!tmp) {
|
|
wlr_log(WLR_ERROR, "Failed to create temp script");
|
|
return false;
|
|
}
|
|
wlr_log(WLR_DEBUG, "Created temp script: %s", fname);
|
|
fprintf(tmp, "#!/bin/sh\nrm %s\n%s", fname, command);
|
|
fclose(tmp);
|
|
chmod(fname, S_IRUSR | S_IWUSR | S_IXUSR);
|
|
char cmd[strlen(terminal) + strlen(" -e ") + strlen(fname) + 1];
|
|
sprintf(cmd, "%s -e %s", terminal, fname);
|
|
execl("/bin/sh", "/bin/sh", "-c", cmd, NULL);
|
|
return true;
|
|
}
|
|
|
|
static void swaynag_button_execute(struct swaynag *swaynag,
|
|
struct swaynag_button *button) {
|
|
wlr_log(WLR_DEBUG, "Executing [%s]: %s", button->text, button->action);
|
|
if (button->type == SWAYNAG_ACTION_DISMISS) {
|
|
swaynag->run_display = false;
|
|
} else if (button->type == SWAYNAG_ACTION_EXPAND) {
|
|
swaynag->details.visible = !swaynag->details.visible;
|
|
render_frame(swaynag);
|
|
} else {
|
|
if (fork() == 0) {
|
|
// Child process. Will be used to prevent zombie processes
|
|
setsid();
|
|
if (fork() == 0) {
|
|
// Child of the child. Will be reparented to the init process
|
|
char *terminal = getenv("TERMINAL");
|
|
if (terminal && strlen(terminal)) {
|
|
wlr_log(WLR_DEBUG, "Found $TERMINAL: %s", terminal);
|
|
if (!terminal_execute(terminal, button->action)) {
|
|
swaynag_destroy(swaynag);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
} else {
|
|
wlr_log(WLR_DEBUG, "$TERMINAL not found. Running directly");
|
|
execl("/bin/sh", "/bin/sh", "-c", button->action, NULL);
|
|
}
|
|
}
|
|
exit(EXIT_SUCCESS);
|
|
}
|
|
}
|
|
wait(0);
|
|
}
|
|
|
|
static void layer_surface_configure(void *data,
|
|
struct zwlr_layer_surface_v1 *surface,
|
|
uint32_t serial, uint32_t width, uint32_t height) {
|
|
struct swaynag *swaynag = data;
|
|
swaynag->width = width;
|
|
swaynag->height = height;
|
|
zwlr_layer_surface_v1_ack_configure(surface, serial);
|
|
render_frame(swaynag);
|
|
}
|
|
|
|
static void layer_surface_closed(void *data,
|
|
struct zwlr_layer_surface_v1 *surface) {
|
|
struct swaynag *swaynag = data;
|
|
swaynag_destroy(swaynag);
|
|
}
|
|
|
|
static struct zwlr_layer_surface_v1_listener layer_surface_listener = {
|
|
.configure = layer_surface_configure,
|
|
.closed = layer_surface_closed,
|
|
};
|
|
|
|
static void surface_enter(void *data, struct wl_surface *surface,
|
|
struct wl_output *output) {
|
|
struct swaynag *swaynag = data;
|
|
struct swaynag_output *swaynag_output;
|
|
wl_list_for_each(swaynag_output, &swaynag->outputs, link) {
|
|
if (swaynag_output->wl_output == output) {
|
|
wlr_log(WLR_DEBUG, "Surface enter on output %s",
|
|
swaynag_output->name);
|
|
swaynag->output = swaynag_output;
|
|
swaynag->scale = swaynag->output->scale;
|
|
render_frame(swaynag);
|
|
break;
|
|
}
|
|
};
|
|
}
|
|
|
|
static struct wl_surface_listener surface_listener = {
|
|
.enter = surface_enter,
|
|
.leave = nop,
|
|
};
|
|
|
|
static void update_cursor(struct swaynag *swaynag) {
|
|
struct swaynag_pointer *pointer = &swaynag->pointer;
|
|
if (swaynag->pointer.cursor_theme) {
|
|
wl_cursor_theme_destroy(swaynag->pointer.cursor_theme);
|
|
}
|
|
pointer->cursor_theme = wl_cursor_theme_load(NULL, 24 * swaynag->scale,
|
|
swaynag->shm);
|
|
struct wl_cursor *cursor =
|
|
wl_cursor_theme_get_cursor(pointer->cursor_theme, "left_ptr");
|
|
pointer->cursor_image = cursor->images[0];
|
|
wl_surface_set_buffer_scale(pointer->cursor_surface,
|
|
swaynag->scale);
|
|
wl_surface_attach(pointer->cursor_surface,
|
|
wl_cursor_image_get_buffer(pointer->cursor_image), 0, 0);
|
|
wl_pointer_set_cursor(pointer->pointer, pointer->serial,
|
|
pointer->cursor_surface,
|
|
pointer->cursor_image->hotspot_x / swaynag->scale,
|
|
pointer->cursor_image->hotspot_y / swaynag->scale);
|
|
wl_surface_commit(pointer->cursor_surface);
|
|
}
|
|
|
|
static void wl_pointer_enter(void *data, struct wl_pointer *wl_pointer,
|
|
uint32_t serial, struct wl_surface *surface,
|
|
wl_fixed_t surface_x, wl_fixed_t surface_y) {
|
|
struct swaynag *swaynag = data;
|
|
struct swaynag_pointer *pointer = &swaynag->pointer;
|
|
pointer->serial = serial;
|
|
update_cursor(swaynag);
|
|
}
|
|
|
|
static void wl_pointer_motion(void *data, struct wl_pointer *wl_pointer,
|
|
uint32_t time, wl_fixed_t surface_x, wl_fixed_t surface_y) {
|
|
struct swaynag *swaynag = data;
|
|
swaynag->pointer.x = wl_fixed_to_int(surface_x);
|
|
swaynag->pointer.y = wl_fixed_to_int(surface_y);
|
|
}
|
|
|
|
static void wl_pointer_button(void *data, struct wl_pointer *wl_pointer,
|
|
uint32_t serial, uint32_t time, uint32_t button, uint32_t state) {
|
|
struct swaynag *swaynag = data;
|
|
|
|
if (state != WL_POINTER_BUTTON_STATE_PRESSED) {
|
|
return;
|
|
}
|
|
|
|
double x = swaynag->pointer.x * swaynag->scale;
|
|
double y = swaynag->pointer.y * swaynag->scale;
|
|
for (int i = 0; i < swaynag->buttons->length; i++) {
|
|
struct swaynag_button *nagbutton = swaynag->buttons->items[i];
|
|
if (x >= nagbutton->x
|
|
&& y >= nagbutton->y
|
|
&& x < nagbutton->x + nagbutton->width
|
|
&& y < nagbutton->y + nagbutton->height) {
|
|
swaynag_button_execute(swaynag, nagbutton);
|
|
return;
|
|
}
|
|
}
|
|
|
|
if (swaynag->details.visible &&
|
|
swaynag->details.total_lines != swaynag->details.visible_lines) {
|
|
struct swaynag_button button_up = swaynag->details.button_up;
|
|
if (x >= button_up.x
|
|
&& y >= button_up.y
|
|
&& x < button_up.x + button_up.width
|
|
&& y < button_up.y + button_up.height
|
|
&& swaynag->details.offset > 0) {
|
|
swaynag->details.offset--;
|
|
render_frame(swaynag);
|
|
return;
|
|
}
|
|
|
|
struct swaynag_button button_down = swaynag->details.button_down;
|
|
int bot = swaynag->details.total_lines;
|
|
bot -= swaynag->details.visible_lines;
|
|
if (x >= button_down.x
|
|
&& y >= button_down.y
|
|
&& x < button_down.x + button_down.width
|
|
&& y < button_down.y + button_down.height
|
|
&& swaynag->details.offset < bot) {
|
|
swaynag->details.offset++;
|
|
render_frame(swaynag);
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
|
|
static void wl_pointer_axis(void *data, struct wl_pointer *wl_pointer,
|
|
uint32_t time, uint32_t axis, wl_fixed_t value) {
|
|
struct swaynag *swaynag = data;
|
|
if (!swaynag->details.visible
|
|
|| swaynag->pointer.x < swaynag->details.x
|
|
|| swaynag->pointer.y < swaynag->details.y
|
|
|| swaynag->pointer.x >= swaynag->details.x + swaynag->details.width
|
|
|| swaynag->pointer.y >= swaynag->details.y + swaynag->details.height
|
|
|| swaynag->details.total_lines == swaynag->details.visible_lines) {
|
|
return;
|
|
}
|
|
|
|
int direction = wl_fixed_to_int(value);
|
|
int bot = swaynag->details.total_lines - swaynag->details.visible_lines;
|
|
if (direction < 0 && swaynag->details.offset > 0) {
|
|
swaynag->details.offset--;
|
|
} else if (direction > 0 && swaynag->details.offset < bot) {
|
|
swaynag->details.offset++;
|
|
}
|
|
|
|
render_frame(swaynag);
|
|
}
|
|
|
|
static struct wl_pointer_listener pointer_listener = {
|
|
.enter = wl_pointer_enter,
|
|
.leave = nop,
|
|
.motion = wl_pointer_motion,
|
|
.button = wl_pointer_button,
|
|
.axis = wl_pointer_axis,
|
|
.frame = nop,
|
|
.axis_source = nop,
|
|
.axis_stop = nop,
|
|
.axis_discrete = nop,
|
|
};
|
|
|
|
static void seat_handle_capabilities(void *data, struct wl_seat *wl_seat,
|
|
enum wl_seat_capability caps) {
|
|
struct swaynag *swaynag = data;
|
|
if ((caps & WL_SEAT_CAPABILITY_POINTER)) {
|
|
swaynag->pointer.pointer = wl_seat_get_pointer(wl_seat);
|
|
wl_pointer_add_listener(swaynag->pointer.pointer, &pointer_listener,
|
|
swaynag);
|
|
}
|
|
}
|
|
|
|
const struct wl_seat_listener seat_listener = {
|
|
.capabilities = seat_handle_capabilities,
|
|
.name = nop,
|
|
};
|
|
|
|
static void output_scale(void *data, struct wl_output *output,
|
|
int32_t factor) {
|
|
struct swaynag_output *swaynag_output = data;
|
|
swaynag_output->scale = factor;
|
|
if (swaynag_output->swaynag->output == swaynag_output) {
|
|
swaynag_output->swaynag->scale = swaynag_output->scale;
|
|
update_cursor(swaynag_output->swaynag);
|
|
render_frame(swaynag_output->swaynag);
|
|
}
|
|
}
|
|
|
|
static struct wl_output_listener output_listener = {
|
|
.geometry = nop,
|
|
.mode = nop,
|
|
.done = nop,
|
|
.scale = output_scale,
|
|
};
|
|
|
|
static void xdg_output_handle_name(void *data,
|
|
struct zxdg_output_v1 *xdg_output, const char *name) {
|
|
struct swaynag_output *swaynag_output = data;
|
|
char *outname = swaynag_output->swaynag->type->output;
|
|
wlr_log(WLR_DEBUG, "Checking against output %s for %s", name, outname);
|
|
if (!swaynag_output->swaynag->output && outname && name
|
|
&& strcmp(outname, name) == 0) {
|
|
wlr_log(WLR_DEBUG, "Using output %s", name);
|
|
swaynag_output->swaynag->output = swaynag_output;
|
|
}
|
|
swaynag_output->name = strdup(name);
|
|
zxdg_output_v1_destroy(xdg_output);
|
|
swaynag_output->swaynag->querying_outputs--;
|
|
}
|
|
|
|
static struct zxdg_output_v1_listener xdg_output_listener = {
|
|
.logical_position = nop,
|
|
.logical_size = nop,
|
|
.done = nop,
|
|
.name = xdg_output_handle_name,
|
|
.description = nop,
|
|
};
|
|
|
|
static void handle_global(void *data, struct wl_registry *registry,
|
|
uint32_t name, const char *interface, uint32_t version) {
|
|
struct swaynag *swaynag = data;
|
|
if (strcmp(interface, wl_compositor_interface.name) == 0) {
|
|
swaynag->compositor = wl_registry_bind(registry, name,
|
|
&wl_compositor_interface, 3);
|
|
} else if (strcmp(interface, wl_seat_interface.name) == 0) {
|
|
swaynag->seat = wl_registry_bind(registry, name, &wl_seat_interface, 1);
|
|
wl_seat_add_listener(swaynag->seat, &seat_listener, swaynag);
|
|
} else if (strcmp(interface, wl_shm_interface.name) == 0) {
|
|
swaynag->shm = wl_registry_bind(registry, name, &wl_shm_interface, 1);
|
|
} else if (strcmp(interface, wl_output_interface.name) == 0) {
|
|
if (!swaynag->output && swaynag->xdg_output_manager) {
|
|
swaynag->querying_outputs++;
|
|
struct swaynag_output *output =
|
|
calloc(1, sizeof(struct swaynag_output));
|
|
output->wl_output = wl_registry_bind(registry, name,
|
|
&wl_output_interface, 3);
|
|
output->wl_name = name;
|
|
output->scale = 1;
|
|
output->swaynag = swaynag;
|
|
wl_list_insert(&swaynag->outputs, &output->link);
|
|
wl_output_add_listener(output->wl_output,
|
|
&output_listener, output);
|
|
|
|
struct zxdg_output_v1 *xdg_output;
|
|
xdg_output = zxdg_output_manager_v1_get_xdg_output(
|
|
swaynag->xdg_output_manager, output->wl_output);
|
|
zxdg_output_v1_add_listener(xdg_output,
|
|
&xdg_output_listener, output);
|
|
}
|
|
} else if (strcmp(interface, zwlr_layer_shell_v1_interface.name) == 0) {
|
|
swaynag->layer_shell = wl_registry_bind(
|
|
registry, name, &zwlr_layer_shell_v1_interface, 1);
|
|
} else if (strcmp(interface, zxdg_output_manager_v1_interface.name) == 0
|
|
&& version >= ZXDG_OUTPUT_V1_NAME_SINCE_VERSION) {
|
|
swaynag->xdg_output_manager = wl_registry_bind(registry, name,
|
|
&zxdg_output_manager_v1_interface,
|
|
ZXDG_OUTPUT_V1_NAME_SINCE_VERSION);
|
|
}
|
|
}
|
|
|
|
static void handle_global_remove(void *data, struct wl_registry *registry,
|
|
uint32_t name) {
|
|
struct swaynag *swaynag = data;
|
|
if (swaynag->output->wl_name == name) {
|
|
swaynag->run_display = false;
|
|
}
|
|
}
|
|
|
|
static const struct wl_registry_listener registry_listener = {
|
|
.global = handle_global,
|
|
.global_remove = handle_global_remove,
|
|
};
|
|
|
|
void swaynag_setup(struct swaynag *swaynag) {
|
|
swaynag->display = wl_display_connect(NULL);
|
|
assert(swaynag->display);
|
|
|
|
swaynag->scale = 1;
|
|
wl_list_init(&swaynag->outputs);
|
|
|
|
struct wl_registry *registry = wl_display_get_registry(swaynag->display);
|
|
wl_registry_add_listener(registry, ®istry_listener, swaynag);
|
|
wl_display_roundtrip(swaynag->display);
|
|
assert(swaynag->compositor && swaynag->layer_shell && swaynag->shm);
|
|
|
|
while (swaynag->querying_outputs > 0) {
|
|
wl_display_roundtrip(swaynag->display);
|
|
}
|
|
|
|
if (!swaynag->output && swaynag->type->output) {
|
|
wlr_log(WLR_ERROR, "Output '%s' not found", swaynag->type->output);
|
|
swaynag_destroy(swaynag);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
struct swaynag_pointer *pointer = &swaynag->pointer;
|
|
pointer->cursor_surface = wl_compositor_create_surface(swaynag->compositor);
|
|
assert(pointer->cursor_surface);
|
|
|
|
swaynag->surface = wl_compositor_create_surface(swaynag->compositor);
|
|
assert(swaynag->surface);
|
|
wl_surface_add_listener(swaynag->surface, &surface_listener, swaynag);
|
|
|
|
swaynag->layer_surface = zwlr_layer_shell_v1_get_layer_surface(
|
|
swaynag->layer_shell, swaynag->surface,
|
|
swaynag->output ? swaynag->output->wl_output : NULL,
|
|
ZWLR_LAYER_SHELL_V1_LAYER_TOP, "swaynag");
|
|
assert(swaynag->layer_surface);
|
|
zwlr_layer_surface_v1_add_listener(swaynag->layer_surface,
|
|
&layer_surface_listener, swaynag);
|
|
zwlr_layer_surface_v1_set_anchor(swaynag->layer_surface,
|
|
swaynag->type->anchors);
|
|
|
|
wl_registry_destroy(registry);
|
|
}
|
|
|
|
void swaynag_run(struct swaynag *swaynag) {
|
|
swaynag->run_display = true;
|
|
render_frame(swaynag);
|
|
while (swaynag->run_display
|
|
&& wl_display_dispatch(swaynag->display) != -1) {
|
|
// This is intentionally left blank
|
|
}
|
|
|
|
if (swaynag->display) {
|
|
wl_display_disconnect(swaynag->display);
|
|
}
|
|
}
|
|
|
|
void swaynag_destroy(struct swaynag *swaynag) {
|
|
swaynag->run_display = false;
|
|
|
|
free(swaynag->message);
|
|
while (swaynag->buttons->length) {
|
|
struct swaynag_button *button = swaynag->buttons->items[0];
|
|
list_del(swaynag->buttons, 0);
|
|
free(button->text);
|
|
free(button->action);
|
|
free(button);
|
|
}
|
|
list_free(swaynag->buttons);
|
|
free(swaynag->details.message);
|
|
free(swaynag->details.button_up.text);
|
|
free(swaynag->details.button_down.text);
|
|
|
|
if (swaynag->type) {
|
|
swaynag_type_free(swaynag->type);
|
|
}
|
|
|
|
if (swaynag->layer_surface) {
|
|
zwlr_layer_surface_v1_destroy(swaynag->layer_surface);
|
|
}
|
|
|
|
if (swaynag->surface) {
|
|
wl_surface_destroy(swaynag->surface);
|
|
}
|
|
|
|
if (swaynag->pointer.cursor_theme) {
|
|
wl_cursor_theme_destroy(swaynag->pointer.cursor_theme);
|
|
}
|
|
|
|
if (&swaynag->buffers[0]) {
|
|
destroy_buffer(&swaynag->buffers[0]);
|
|
}
|
|
|
|
if (&swaynag->buffers[1]) {
|
|
destroy_buffer(&swaynag->buffers[1]);
|
|
}
|
|
|
|
if (swaynag->outputs.prev || swaynag->outputs.next) {
|
|
struct swaynag_output *output, *temp;
|
|
wl_list_for_each_safe(output, temp, &swaynag->outputs, link) {
|
|
wl_output_destroy(output->wl_output);
|
|
free(output->name);
|
|
wl_list_remove(&output->link);
|
|
free(output);
|
|
};
|
|
}
|
|
|
|
if (swaynag->compositor) {
|
|
wl_compositor_destroy(swaynag->compositor);
|
|
}
|
|
|
|
if (swaynag->shm) {
|
|
wl_shm_destroy(swaynag->shm);
|
|
}
|
|
}
|