[Webkit-unassigned] [Bug 236144] Crash at WebKit::bindA11y() in WebKit 2.35.2

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 4 10:25:34 PST 2022


https://bugs.webkit.org/show_bug.cgi?id=236144

Michael Catanzaro <mcatanzaro at gnome.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mcatanzaro at gnome.org

--- Comment #2 from Michael Catanzaro <mcatanzaro at gnome.org> ---
This file hasn't changed since 2.35.1. Line numbers would help a lot. That said, I guess it's coming from here:

proxy.setAddress(a11yAddress.get(), DBusAddressType::Abstract);

What happens when you run:

$ gdbus call --session --dest org.a11y.Bus --object-path /org/a11y/bus --method org.a11y.Bus.GetAddress

It must be returning something bogus? Of course, we should still not crash on unexpected data.

(In reply to Alexander Mikhaylenko from comment #1)
> I can reproduce it as well, and speciically only outside flatpak.

This code doesn't run under flatpak.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220204/b391755d/attachment.htm>


More information about the webkit-unassigned mailing list