Bug ID | 1202828 |
---|---|
Summary | libva driver_data in vdpau_common_Initialize can have a null pointer for x11_dpy which is not checked |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | X.Org |
Assignee | gfx-bugs@suse.de |
Reporter | mrueckert@suse.com |
QA Contact | gfx-bugs@suse.de |
Found By | --- |
Blocker | --- |
This caused a crash via firefox ``` (gdb) bt #0 XDisplayString (dpy=0x0) at /usr/src/debug/libX11-1.8.1-2.1.x86_64/src/Macros.c:119 #1 0x00007fdbae377b85 in vdpau_common_Initialize (driver_data=0x7fdbb18b6800) at /usr/src/debug/libva-vdpau-driver-0.7.4-7.9.x86_64/src/vdpau_driver.c:188 #2 vdpau_Initialize_Current (ctx=0x7fdbb0fed3e0) at /usr/src/debug/libva-vdpau-driver-0.7.4-7.9.x86_64/src/vdpau_driver_template.h:561 #3 __vaDriverInit_1_14 (ctx=0x7fdbb0fed3e0) at /usr/src/debug/libva-vdpau-driver-0.7.4-7.9.x86_64/src/vdpau_driver.c:317 #4 0x00007fdbae334fcf in va_openDriver (dpy=dpy@entry=0x7fdbbcb30480, driver_name=<optimized out>) at /usr/src/debug/libva-2.15.0-1.1.x86_64/va/va.c:525 #5 0x00007fdbae33ae0e in vaInitialize (dpy=0x7fdbbcb30480, major_version=0x7ffec62bdbfc, minor_version=0x7ffec62bdc00) at /usr/src/debug/libva-2.15.0-1.1.x86_64/va/va.c:743 #6 0x00007fdbb5b0d002 in vaInitialize () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/media/mozva/mozva.c:411 #7 vaInitialize () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/media/mozva/mozva.c:408 #8 childvaapitest () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1012 #9 vaapitest () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1071 #10 childgltest () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1164 #11 0x00007fdbb5b60dde in fire_glxtest_process () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1200 #12 XREMain::XRE_mainInit () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:4017 #13 XREMain::XRE_mainInit () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:3903 #14 XREMain::XRE_main () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:5916 #15 XRE_main () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:6010 #16 0x000056092672e3fd in do_main () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/browser/app/nsBrowserApp.cpp:227 #17 0x0000560926726c20 in main () at /usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/browser/app/nsBrowserApp.cpp:406 ``` though another interesting question is ... why was that a null pointer in first place.