input: Fix possible crash in clip_pointer_motion

It was erronously using output->current->height in one
place where it should use output->height. This may cause
it to create an invalid clipped coordinate in case of output
scaling or transform, because the next round "prev" would
end up NULL.

diff --git a/src/input.c b/src/input.c
index 129593f..89f74f4 100644 (file)
--- a/src/input.c
+++ b/src/input.c
@@ -593,7 +593,7 @@ clip_pointer_motion(struct weston_seat *seat, wl_fixed_t *fx, wl_fixed_t *fy)
                                                prev->width - 1);
                if (y < prev->y)
                        *fy = wl_fixed_from_int(prev->y);
-               else if (y >= prev->y + prev->current->height)
+               else if (y >= prev->y + prev->height)
                        *fy = wl_fixed_from_int(prev->y +
                                                prev->height - 1);
        }