[Bug 1228524] New: xfwm4: add missing break to fix use-after-free when alt-tabbing
https://bugzilla.suse.com/show_bug.cgi?id=1228524 Bug ID: 1228524 Summary: xfwm4: add missing break to fix use-after-free when alt-tabbing Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 URL: https://gitlab.xfce.org/xfce/xfwm4/-/issues/762 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce@forge.provo.novell.com Reporter: ohering@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- xfwm4 crashes often for me due to invalid pointer usage in tabwinRemoveClient. This is apparently fixed upstream. Process 12345 (xfwm4) of user 1000 dumped core. Stack trace of thread 12345: #0 tabwinRemoveClient (xfwm4 + 0x469e9) #1 clientCycleEventFilter (xfwm4 + 0x20a6c) #2 eventXfwmFilter (xfwm4 + 0x22f12) #3 gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf) #4 gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e1a2) #5 gdk_display_get_event (libgdk-3.so.0 + 0x388e0) #6 gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42) #7 g_main_dispatch (libglib-2.0.so.0 + 0x5afac) #8 g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0) #9 g_main_loop_run (libglib-2.0.so.0 + 0x5d402) #10 gtk_main (libgtk-3.so.0 + 0x1fa945) #11 clientCycle (xfwm4 + 0x21028) #12 handleKeyPress (xfwm4 + 0x25324) #13 eventXfwmFilter (xfwm4 + 0x22f12) #14 gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf) #15 gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e099) #16 gdk_display_get_event (libgdk-3.so.0 + 0x388e0) #17 gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42) #18 g_main_dispatch (libglib-2.0.so.0 + 0x5afac) #19 g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0) #20 g_main_loop_run (libglib-2.0.so.0 + 0x5d402) #21 gtk_main (libgtk-3.so.0 + 0x1fa945) #22 main (xfwm4 + 0x11123) #23 __libc_start_call_main (libc.so.6 + 0x40eec) #24 __libc_start_main_impl (libc.so.6 + 0x40fb5) #25 _start (xfwm4 + 0x11291) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1228524 https://bugzilla.suse.com/show_bug.cgi?id=1228524#c2 --- Comment #2 from Marcus Meissner <meissner@suse.com> --- openSUSE-RU-2024:0265-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1228524 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP5 (src): xfwm4-4.18.0-bp155.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1228524 https://bugzilla.suse.com/show_bug.cgi?id=1228524#c3 --- Comment #3 from Marcus Meissner <meissner@suse.com> --- openSUSE-RU-2024:0266-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1228524 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP6 (src): xfwm4-4.18.0-bp156.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1228524 https://bugzilla.suse.com/show_bug.cgi?id=1228524#c4 Olaf Hering <ohering@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #4 from Olaf Hering <ohering@suse.com> --- Updated packages released. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com