Bug ID 1202828
Summary libva driver_data in vdpau_common_Initialize can have a null pointer for x11_dpy which is not checked
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component X.Org
Assignee gfx-bugs@suse.de
Reporter mrueckert@suse.com
QA Contact gfx-bugs@suse.de
Found By ---
Blocker ---

This caused a crash via firefox

```
(gdb) bt
#0  XDisplayString (dpy=0x0) at
/usr/src/debug/libX11-1.8.1-2.1.x86_64/src/Macros.c:119
#1  0x00007fdbae377b85 in vdpau_common_Initialize (driver_data=0x7fdbb18b6800)
at /usr/src/debug/libva-vdpau-driver-0.7.4-7.9.x86_64/src/vdpau_driver.c:188
#2  vdpau_Initialize_Current (ctx=0x7fdbb0fed3e0) at
/usr/src/debug/libva-vdpau-driver-0.7.4-7.9.x86_64/src/vdpau_driver_template.h:561
#3  __vaDriverInit_1_14 (ctx=0x7fdbb0fed3e0) at
/usr/src/debug/libva-vdpau-driver-0.7.4-7.9.x86_64/src/vdpau_driver.c:317
#4  0x00007fdbae334fcf in va_openDriver (dpy=dpy@entry=0x7fdbbcb30480,
driver_name=<optimized out>) at
/usr/src/debug/libva-2.15.0-1.1.x86_64/va/va.c:525
#5  0x00007fdbae33ae0e in vaInitialize (dpy=0x7fdbbcb30480,
major_version=0x7ffec62bdbfc, minor_version=0x7ffec62bdc00) at
/usr/src/debug/libva-2.15.0-1.1.x86_64/va/va.c:743
#6  0x00007fdbb5b0d002 in vaInitialize () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/media/mozva/mozva.c:411
#7  vaInitialize () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/media/mozva/mozva.c:408
#8  childvaapitest () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1012
#9  vaapitest () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1071
#10 childgltest () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1164
#11 0x00007fdbb5b60dde in fire_glxtest_process () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/glxtest.cpp:1200
#12 XREMain::XRE_mainInit () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:4017
#13 XREMain::XRE_mainInit () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:3903
#14 XREMain::XRE_main () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:5916
#15 XRE_main () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/toolkit/xre/nsAppRunner.cpp:6010
#16 0x000056092672e3fd in do_main () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/browser/app/nsBrowserApp.cpp:227
#17 0x0000560926726c20 in main () at
/usr/src/debug/MozillaFirefox-103.0.2-2.1.x86_64/browser/app/nsBrowserApp.cpp:406
```

though another interesting question is ... why was that a null pointer in first
place.


You are receiving this mail because: