From c552d1bf167a240d28f82b4d78a604a12da3326a Mon Sep 17 00:00:00 2001
From: nicm <nicm@openbsd.org>
Date: Mon, 31 Aug 2026 07:44:39 +0000
Subject: [PATCH] Layout cell can be replaced by unzoom, fixes use after free.
 From Uzair Aftab.

---
 cmd-resize-pane.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cmd-resize-pane.c b/cmd-resize-pane.c
index 01ddf424a..fc5062ab4 100644
--- a/cmd-resize-pane.c
+++ b/cmd-resize-pane.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: cmd-resize-pane.c,v 1.67 2026/07/10 13:38:45 nicm Exp $ */
+/* $OpenBSD: cmd-resize-pane.c,v 1.68 2026/08/31 07:44:39 nicm Exp $ */
 
 /*
  * Copyright (c) 2009 Nicholas Marriott <nicholas.marriott@gmail.com>
@@ -92,6 +92,7 @@ cmd_resize_pane_exec(struct cmd *self, struct cmdq_item *item)
 		return (CMD_RETURN_NORMAL);
 	}
 	server_unzoom_window(w);
+	lc = wp->layout_cell; /* may have been replaced by unzoom */
 
 	if (args_has(args, 'x')) {
 		x = args_percentage(args, 'x', 0, PANE_MAXIMUM, w->sx, &cause);