[Webkit-unassigned] [Bug 216828] [gtk] evolution's html composer incorrectly allows dragging files as path causing crashes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Sep 22 09:36:22 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=216828

--- Comment #2 from Milan Crha <mcrha at redhat.com> ---
(In reply to Hussam Al-Tayeb from comment #0)
> #1 0x00007fffea2cabf9 in webkit_editor_drag_data_received_cb (
> widget=0x555556aae230, context=0x555555989920, x=0, y=0,
> selection=0x7fffffffdf40, info=6, time=4772764)
> at
> /home/hussam/cache/system/gnome/evolution/src/evolution/src/modules/webkit-
> editor/e-webkit-editor.c:5082
> 5082 if (!GTK_WIDGET_CLASS (e_webkit_editor_parent_class)->drag_drop
> (widget, context, x, y, time)) {

The EWebKitEditor derives from WebKitWebView and the line above calls the parent method, which causes the crash. After a bit more debugging the `GTK_WIDGET_CLASS (e_webkit_editor_parent_class)->drag_drop` is NULL. It splits this bug into two pieces:

1) make sure evolution doesn't dereference NULL here
2) WebKitGTK should not accept the file as a text input for the WebView content

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200922/7063485c/attachment-0001.htm>


More information about the webkit-unassigned mailing list