Fix use-after-free in ContainmentInterface (!510) · Merge requests · Plasma / libplasma · GitLab

Jakub Nowak requested to merge jakubn/plasma-framework:master into master Apr 20, 2022

The object in property "wallpaperGraphicsObject" isn't cleared after being freed. This causes use-after-free in WorkspaceScripting::Applet::writeConfig at https://invent.kde.org/plasma/plasma-workspace/-/blob/master/shell/scripting/applet.cpp#L108.

BUG: 451267 FIXED-IN: 5.94

Edited Apr 20, 2022 by Nate Graham