Go to file
Dominique Martinet 8529141150 view_destroy: fix use-after-free with subsurface_destroy
remove view from its own unmap event listener so when subsurfaces
link try to remove themselves they won't run into it.

This fixes the following ASAN use-after-free error on a build slightly
modified to instrument wl_list operations:
==71705==ERROR: AddressSanitizer: heap-use-after-free on address 0x6160000829a0 at pc 0x000000508eb7 bp 0x7ffec8fd8030 sp 0x7ffec8fd8028
WRITE of size 8 at 0x6160000829a0 thread T0
    #0 0x508eb6 in wl_list_remove ../common/list.c:181
    #1 0x4f4998 in view_child_destroy ../sway/tree/view.c:1131
    #2 0x4f38fa in subsurface_handle_destroy ../sway/tree/view.c:946
    #3 0x7fda50744892 in wlr_signal_emit_safe ../util/signal.c:29
    #4 0x7fda5072f0dd in subsurface_destroy ../types/wlr_surface.c:649
    #5 0x7fda507312c4 in subsurface_handle_surface_destroy ../types/wlr_surface.c:1094
    #6 0x7fda50744892 in wlr_signal_emit_safe ../util/signal.c:29
    #7 0x7fda5072f305 in surface_handle_resource_destroy ../types/wlr_surface.c:677
    #8 0x7fda508180ce in destroy_resource (/lib64/libwayland-server.so.0+0xc0ce)
    #9 0x7fda508187f2 in wl_client_destroy (/lib64/libwayland-server.so.0+0xc7f2)
    #10 0x7fda50818e5f in wl_client_connection_data (/lib64/libwayland-server.so.0+0xce5f)
    #11 0x7fda50818219 in wl_event_loop_dispatch (/lib64/libwayland-server.so.0+0xc219)
    #12 0x7fda50818984 in wl_display_run (/lib64/libwayland-server.so.0+0xc984)
    #13 0x43122c in server_run ../sway/server.c:254
    #14 0x42f47c in main ../sway/main.c:433
    #15 0x7fda503cab74 in __libc_start_main (/lib64/libc.so.6+0x27b74)
    #16 0x40f6fd in _start (/opt/wayland/bin/sway+0x40f6fd)

0x6160000829a0 is located 288 bytes inside of 592-byte region [0x616000082880,0x616000082ad0)
freed by thread T0 here:
    #0 0x7fda50f01a27 in free (/lib64/libasan.so.6+0xaea27)
    #1 0x4532d8 in destroy ../sway/desktop/xdg_shell.c:262
    #2 0x4ed17b in view_destroy ../sway/tree/view.c:67
    #3 0x4ed300 in view_begin_destroy ../sway/tree/view.c:83
    #4 0x454a3f in handle_destroy ../sway/desktop/xdg_shell.c:507
    #5 0x7fda50744892 in wlr_signal_emit_safe ../util/signal.c:29
    #6 0x7fda506e2c87 in reset_xdg_surface ../types/xdg_shell/wlr_xdg_surface.c:481
    #7 0x7fda506e3018 in destroy_xdg_surface ../types/xdg_shell/wlr_xdg_surface.c:516
    #8 0x7fda506dfbe5 in xdg_client_handle_resource_destroy ../types/xdg_shell/wlr_xdg_shell.c:71
    #9 0x7fda508180ce in destroy_resource (/lib64/libwayland-server.so.0+0xc0ce)

previously allocated by thread T0 here:
    #0 0x7fda50f01ed7 in calloc (/lib64/libasan.so.6+0xaeed7)
    #1 0x454bc8 in handle_xdg_shell_surface ../sway/desktop/xdg_shell.c:528
    #2 0x7fda50744892 in wlr_signal_emit_safe ../util/signal.c:29
    #3 0x7fda506e2363 in handle_xdg_surface_commit ../types/xdg_shell/wlr_xdg_surface.c:378
    #4 0x7fda5072e368 in surface_commit_state ../types/wlr_surface.c:455
    #5 0x7fda5072e51d in surface_commit_pending ../types/wlr_surface.c:474
    #6 0x7fda5072ea58 in surface_commit ../types/wlr_surface.c:542
    #7 0x7fda4fb3ac03 in ffi_call_unix64 (/lib64/libffi.so.6+0x6c03)

Fixes #5168
2021-04-22 23:19:08 +02:00
.builds ci: Install libseat 2021-04-14 23:29:09 +02:00
.github/ISSUE_TEMPLATE Remove advice about Firefox from issue template 2021-03-30 18:32:55 +02:00
assets License wallpapers as CC-0 2019-12-16 14:35:58 -05:00
client Rename symbol set_cloexec to sway_set_cloexec, remove duplicates. 2019-11-01 12:41:08 -04:00
common common/log: write log importance 2020-12-10 09:26:02 +01:00
completions i3-compat: add GET_BINDING_STATE IPC command 2020-06-14 00:55:14 -04:00
contrib refactor icon_for_window function 2021-04-09 22:08:53 +02:00
include idle_inhibit: Store wlr inhibitor instead of view 2021-03-21 12:27:29 +01:00
protocols protocols: update layer-shell-unstable-v1 to v4 2021-01-12 22:38:45 +01:00
sway view_destroy: fix use-after-free with subsurface_destroy 2021-04-22 23:19:08 +02:00
swaybar swaybar: fail gracefully on tokener creation fail 2021-03-22 14:10:53 +01:00
swaymsg Make command line option lists const 2021-02-04 09:49:06 +01:00
swaynag Use execlp("sh") instead of execl("/bin/sh") 2021-04-22 23:12:49 +02:00
.clang-format Update .clang-format - not entirely usable yet 2017-01-10 23:30:34 -05:00
.editorconfig Create .editorconfig 2016-07-04 14:12:32 +02:00
.gitignore Allocate minimum size necessary in pango text functions. (#3473) 2019-01-20 15:03:30 +01:00
config.in rephrase swayidle-timout example to improve readability 2020-07-12 14:29:49 +02:00
CONTRIBUTING.md CONTRIBUTING.md: Add note on sway's scope 2021-01-04 09:18:13 -05:00
LICENSE MIT license 2017-01-06 13:45:48 -05:00
meson.build meson: libseat is no longer optional 2021-04-14 23:29:09 +02:00
meson_options.txt build: add basu as sd-bus provider 2020-12-09 17:39:20 -05:00
README.de.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.dk.md Fix typo in README.dk.md 2021-02-18 12:47:14 +01:00
README.es.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.fr.md readme: update French translation 2021-02-10 09:44:38 +01:00
README.hu.md Add Hungarian translation for the README 2021-04-03 14:26:53 +02:00
README.ja.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.ko.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.md Add Hungarian translation for the README 2021-04-03 14:26:53 +02:00
README.nl.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.pl.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.pt.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.ro.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.ru.md Update Russian translation 2021-02-17 09:21:08 +01:00
README.uk.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.zh-CN.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
README.zh-TW.md Remove Patreon links from README.*.md 2020-12-26 20:14:24 -05:00
sway.desktop Update language in sway.desktop & sway(1) 2019-03-10 15:09:52 -04:00

sway

English - 日本語 - Français - Українська - Español - Polski - 中文-简体 - Deutsch - Nederlands - Русский - 中文-繁體 - Português - Danish - 한국어 - Română - Magyar

sway is an i3-compatible Wayland compositor. Read the FAQ. Join the IRC channel (#sway on irc.freenode.net).

Release Signatures

Releases are signed with E88F5E48 and published on GitHub.

Installation

From Packages

Sway is available in many distributions. Try installing the "sway" package for yours.

If you're interested in packaging sway for your distribution, stop by the IRC channel or shoot an email to sir@cmpwn.com for advice.

Compiling from Source

Check out this wiki page if you want to build the HEAD of sway and wlroots for testing or development.

Install dependencies:

  • meson *
  • wlroots
  • wayland
  • wayland-protocols *
  • pcre
  • json-c
  • pango
  • cairo
  • gdk-pixbuf2 (optional: system tray)
  • scdoc (optional: man pages) *
  • git (optional: version info) *

*Compile-time dep

Run these commands:

meson build/
ninja -C build/
sudo ninja -C build/ install

On systems without logind, you need to suid the sway binary:

sudo chmod a+s /usr/local/bin/sway

Sway will drop root permissions shortly after startup.

Configuration

If you already use i3, then copy your i3 config to ~/.config/sway/config and it'll work out of the box. Otherwise, copy the sample configuration file to ~/.config/sway/config. It is usually located at /etc/sway/config. Run man 5 sway for information on the configuration.

Running

Run sway from a TTY. Some display managers may work but are not supported by sway (gdm is known to work fairly well).