[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1095443: marked as done (Segmentation fault in KeepassXC when retrieving credentials via browser extension)

Your message dated Sat, 08 Feb 2025 17:29:03 +0000
with message-id <E1tgodb-0072Pw-B1@fasolo.debian.org>
and subject line Bug#1095423: fixed in qtbase-opensource-src 5.15.15+dfsg-4
has caused the Debian Bug report #1095423,
regarding Segmentation fault in KeepassXC when retrieving credentials via browser extension
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1095423: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1095423
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libqt5core5t64
Version: 5.15.15+dfsg-3
Severity: important
Control: affects -1 keepassxc-full

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear maintainer,

the latest upload for Qt5 makes my KeepassXC crash when I try to access 
credentials via browser extension. Downgrading Qt5 to 5.15.15+dfsg-2 
resolves the issue, which is why I am filing this bug against Qt5.

I'm the first to admit that the change looks really innocent, though. Maybe 
something else in the toolchain changed which caused Qt5 to miscompile?


GDB stack trace:

#0  __strlen_avx2 () at ../sysdeps/x86_64/multiarch/strlen-avx2.S:76
#1  0x00007ffff61e4de5 in QString::fromUtf8 (size=-1, str=0x8000f64947a8 <error: Cannot access memory at address 0x8000f64947a8>) at ../../include/QtCore/../../src/corelib/text/qstring.h:703
#2  containsTLDEntry (entry=..., match=match@entry=ExactMatch) at io/qtldurl.cpp:101
#3  0x00007ffff61e4eae in qIsEffectiveTLD (domain=...) at io/qtldurl.cpp:144
#4  0x00007ffff7c4e4b9 in qIsEffectiveTLD (domain=...) at ../../include/QtCore/5.15.15/QtCore/private/../../../../../src/corelib/io/qtldurl_p.h:66
#5  QNetworkCookieJar::validateCookie (this=<optimized out>, cookie=..., url=...) at access/qnetworkcookiejar.cpp:372
#6  0x00007ffff7c4df39 in QNetworkCookieJar::setCookiesFromUrl (this=this@entry=0x7fffffffd1f0, cookieList=..., url=...) at access/qnetworkcookiejar.cpp:203
#7  0x000055555583d227 in UrlTools::getTopLevelDomainFromUrl (this=this@entry=0x555555a81cf0 <(anonymous namespace)::Q_QGS_s_urlTools::innerFunction()::holder>, url=...)
    at /usr/include/c++/14/bits/stl_algobase.h:401
#8  0x000055555583d6a5 in UrlTools::getBaseDomainFromUrl (this=this@entry=0x555555a81cf0 <(anonymous namespace)::Q_QGS_s_urlTools::innerFunction()::holder>, url=...)
    at ./src/core/UrlTools.cpp:66
#9  0x0000555555888ffb in BrowserService::handleURL (this=this@entry=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, entryUrl=..., siteUrl=...,
    formUrl=..., omitWwwSubdomain=omitWwwSubdomain@entry=false) at ./src/browser/BrowserService.cpp:1489
#10 0x000055555588a52f in BrowserService::shouldIncludeEntry (this=this@entry=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>,
    entry=entry@entry=0x555556ee6050, url=..., submitUrl=..., omitWwwSubdomain=omitWwwSubdomain@entry=false) at ./src/browser/BrowserService.cpp:1350
#11 0x000055555588b4c8 in BrowserService::searchEntries (this=this@entry=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, db=..., siteUrl=...,
    formUrl=..., passkey=passkey@entry=false) at ./src/browser/BrowserService.cpp:953
#12 0x000055555588e6fa in BrowserService::searchEntries (this=this@entry=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, siteUrl=..., formUrl=...,
    keyList=..., passkey=passkey@entry=false) at ./src/browser/BrowserService.cpp:1011
#13 0x00005555558914c6 in BrowserService::findEntries (this=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, entryParameters=..., keyList=...,
    entriesFound=entriesFound@entry=0x7fffffffd6ff) at ./src/browser/BrowserService.cpp:340
#14 0x00005555558af47f in BrowserAction::handleGetLogins (this=this@entry=0x555555df2de0, json=..., action=...) at ./src/browser/BrowserAction.cpp:253
#15 0x00005555558b0801 in BrowserAction::handleAction (this=this@entry=0x555555df2de0, socket=socket@entry=0x555557594280, json=...) at ./src/browser/BrowserAction.cpp:94
#16 0x00005555558b0d1f in BrowserAction::processClientMessage (this=0x555555df2de0, socket=socket@entry=0x555557594280, json=...) at ./src/browser/BrowserAction.cpp:75
#17 0x000055555588c156 in BrowserService::processClientMessage (this=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, socket=0x555557594280,
    message=...) at ./src/browser/BrowserService.cpp:1753
#18 0x00007ffff63185be in QtPrivate::QSlotObjectBase::call (this=0x555555fd00b0, r=0x555555a81f20 <(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, a=0x7fffffffdaf0)
    at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#19 doActivate<false> (sender=0x555555d20990, signal_index=3, argv=0x7fffffffdaf0) at kernel/qobject.cpp:3925
#20 0x00007ffff6310d87 in QMetaObject::activate (sender=sender@entry=0x555555d20990, m=m@entry=0x555555a78d80 <BrowserHost::staticMetaObject>, local_signal_index=local_signal_index@entry=0,
    argv=argv@entry=0x7fffffffdaf0) at kernel/qobject.cpp:3985
#21 0x00005555558768a8 in BrowserHost::clientMessageReceived (this=this@entry=0x555555d20990, _t1=<optimized out>, _t1@entry=0x555557594280, _t2=...)
    at ./obj-x86_64-linux-gnu-full/src/browser/keepassxcbrowser_autogen/EWIEGA46WW/moc_BrowserHost.cpp:152
#22 0x000055555587b766 in BrowserHost::readProxyMessage (this=0x555555d20990) at ./src/browser/BrowserHost.cpp:91
#23 0x00007ffff6318592 in doActivate<false> (sender=0x555557594280, signal_index=3, argv=0x7fffffffdc20) at kernel/qobject.cpp:3937
#24 0x00007ffff6318592 in doActivate<false> (sender=0x555555fa8350, signal_index=3, argv=0x7fffffffdcf0) at kernel/qobject.cpp:3937
#25 0x00007ffff6310d87 in QMetaObject::activate (sender=sender@entry=0x555555fa8350, m=m@entry=0x7ffff6587940 <QIODevice::staticMetaObject>, local_signal_index=local_signal_index@entry=0,
    argv=argv@entry=0x0) at kernel/qobject.cpp:3985
#26 0x00007ffff6201ac4 in QIODevice::readyRead (this=this@entry=0x555555fa8350) at .moc/moc_qiodevice.cpp:190
#27 0x00007ffff7ce3a7f in QAbstractSocketPrivate::emitReadyRead (this=0x555555b40390, channel=0) at socket/qabstractsocket.cpp:1323
#28 QAbstractSocketPrivate::canReadNotification (this=0x555555b40390) at socket/qabstractsocket.cpp:748
#29 0x00007ffff7cf68b9 in QReadNotifier::event (this=<optimized out>, e=<optimized out>) at socket/qnativesocketengine.cpp:1274
#30 0x00007ffff7563052 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x5555575941c0, e=0x7fffffffde00) at kernel/qapplication.cpp:3640
#31 0x00007ffff62ddc98 in QCoreApplication::notifyInternal2 (receiver=0x5555575941c0, event=0x7fffffffde00) at kernel/qcoreapplication.cpp:1064
#32 0x00007ffff62dde82 in QCoreApplication::sendEvent (receiver=<optimized out>, event=<optimized out>) at kernel/qcoreapplication.cpp:1462
#33 0x00007ffff633b76d in socketNotifierSourceDispatch (source=0x555555b664b0) at kernel/qeventdispatcher_glib.cpp:107
#34 0x00007ffff4d03d5f in g_main_dispatch (context=context@entry=0x7fffec000ed0) at ../../../glib/gmain.c:3361
#35 0x00007ffff4d05fd7 in g_main_context_dispatch_unlocked (context=0x7fffec000ed0) at ../../../glib/gmain.c:4212


- -- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.12-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libqt5network5t64 depends on:
ii  libc6                                2.40-6
ii  libgssapi-krb5-2                     1.21.3-4
ii  libqt5core5t64 [qtbase-abi-5-15-15]  5.15.15+dfsg-3
ii  libqt5dbus5t64                       5.15.15+dfsg-3
ii  libssl3t64                           3.4.0-2
ii  libstdc++6                           14.2.0-16
ii  zlib1g                               1:1.3.dfsg+really1.3.1-1+b1

libqt5network5t64 recommends no packages.

libqt5network5t64 suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=2j+M
-----END PGP SIGNATURE-----

--- End Message ---
--- Begin Message --- 
Source: qtbase-opensource-src
Source-Version: 5.15.15+dfsg-4
Done: Dmitry Shachnev <mitya57@debian.org>

We believe that the bug you reported is fixed in the latest version of
qtbase-opensource-src, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1095423@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dmitry Shachnev <mitya57@debian.org> (supplier of updated qtbase-opensource-src package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Feb 2025 19:24:33 +0300
Source: qtbase-opensource-src
Architecture: source
Version: 5.15.15+dfsg-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Dmitry Shachnev <mitya57@debian.org>
Closes: 1095423
Changes:
 qtbase-opensource-src (5.15.15+dfsg-4) unstable; urgency=medium
 .
   * Fix containsTLDEntry() crash when tldChunkCount >= 3 (closes: #1095423).
     - Thanks to Timo Röhling for help with debugging this!
Checksums-Sha1:
 dfd3eb722e14268e4da018ad840d3c84121b838d 5322 qtbase-opensource-src_5.15.15+dfsg-4.dsc
 d3c9fdd2e25ed7a2123c0cc81946e15a180de5e7 229192 qtbase-opensource-src_5.15.15+dfsg-4.debian.tar.xz
 166aeda400950638ab1bc5ceccdeaf547259bbb7 17042 qtbase-opensource-src_5.15.15+dfsg-4_source.buildinfo
Checksums-Sha256:
 091777aeb611aba727c263c6d00f5de16234c649ec8c6277d8694e5590056a22 5322 qtbase-opensource-src_5.15.15+dfsg-4.dsc
 e5901c89c49d9ff66642eed822e0823b5beeebc57855a30da86f1710b30d8582 229192 qtbase-opensource-src_5.15.15+dfsg-4.debian.tar.xz
 6511f0864602261f83766e410c8ecf4ac238528c9ebb862ed9eae409501087c1 17042 qtbase-opensource-src_5.15.15+dfsg-4_source.buildinfo
Files:
 6abecf7f4ebe33820d8f459cf73e09bf 5322 libs optional qtbase-opensource-src_5.15.15+dfsg-4.dsc
 97c5104be5079e37072cbbf7da83c91f 229192 libs optional qtbase-opensource-src_5.15.15+dfsg-4.debian.tar.xz
 6b075b81af5878f332fa40aa98589b1f 17042 libs optional qtbase-opensource-src_5.15.15+dfsg-4_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=KdWl
-----END PGP SIGNATURE-----

Attachment: pgpAw0_uQ2h_0.pgp
Description: PGP signature


--- End Message ---
Reply to: