Use after free in gdbus leads to eds segfaults

Bug #1848202 reported by errors.ubuntu.com bug bridge on 2019-10-15
14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
GLib
Fix Released
Unknown
glib2.0 (Ubuntu)
High
Iain Lane
Eoan
Undecided
Iain Lane

Bug Description

[ Description ]

The Ubuntu Error Tracker has been receiving reports about a problem regarding evolution-data-server. This problem was most recently seen with package version 3.34.1-1, the problem page at https://errors.ubuntu.com/problem/b1f62616406e36e521fd1fb1d2be4ac2fe9a2cda contains more details, including versions of packages affected, stacktrace or traceback, and individual crash reports.
If you do not have access to the Ubuntu Error Tracker and are a software developer, you can request it at http://forms.canonical.com/reports/.

[ Fix ]

This bug was fixed upstream in 2.62.2 (see the links below). That update is being issues to eoan.

[ QA ]

Under https://wiki.ubuntu.com/StableReleaseUpdates/GNOME, we don't need to explicitly test that this bug is fixed. Nevertheless, to verify this bug please give the desktop a good workout. Ideally install the SRU and use your machine as you would normally for a variety of tasks. Make sure there are no regressions.

[ Regression potential ]

1) The changes involve mutexes and stuff, which is error prone.

2) It's GLib, a core library, so any bad regressions will be really serious for the desktop as a whole.

Sebastien Bacher (seb128) wrote :
summary: - /usr/libexec/evolution-calendar-
- factory:11:malloc:pvl_newlist:icalcomponent_new_impl:icalcomponent_new:i_cal_component_new
+ Use after free in gdbus leads to eds segfaults
affects: evolution-data-server (Ubuntu) → glib2.0 (Ubuntu)
Changed in glib2.0 (Ubuntu):
importance: Undecided → High
Changed in glib:
status: Unknown → Fix Released
Iain Lane (laney) on 2019-10-25
Changed in glib2.0 (Ubuntu):
status: New → In Progress
Changed in glib2.0 (Ubuntu Eoan):
status: New → In Progress
Changed in glib2.0 (Ubuntu):
assignee: nobody → Iain Lane (laney)
Changed in glib2.0 (Ubuntu Eoan):
assignee: nobody → Iain Lane (laney)
description: updated

Hello errors.ubuntu.com, or anyone else affected,

Accepted glib2.0 into eoan-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/glib2.0/2.62.2-2~ubuntu19.10.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-eoan to verification-done-eoan. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-eoan. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in glib2.0 (Ubuntu Eoan):
status: In Progress → Fix Committed
tags: added: verification-needed verification-needed-eoan
Gunnar Hjalmarsson (gunnarhj) wrote :

Bug #1844853 was explicitly verified (comment #15). Didn't observe any unexpected behavior due to the glib2.0 upgrade.

tags: added: verification-done verification-done-eoan
removed: verification-needed verification-needed-eoan
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package glib2.0 - 2.63.1-2

---------------
glib2.0 (2.63.1-2) experimental; urgency=medium

  * d/p/Revert-glocalfileinfo-Only-return-file-mode-not-type-as-U.patch:
    Revert "glocalfileinfo: Only return file mode, not type, as UNIX_MODE
    attribute" This reverts commit bfdc5fc4fc84ef8518d2d1a328c8482cf5a38e98.
    This commit changes the semantics of the `unix::mode` attribute, which
    some things (the one we've noticed is ostree) rely on.
  * d/p/test_copy_preserve_mode-Adjust-for-revert-semantics.patch:
    test_copy_preserve_mode: Adjust for revert semantics. Now we're returning
    the file type again, we need to mask it out to compare with the mode.

 -- Iain Lane <email address hidden> Mon, 18 Nov 2019 13:59:35 +0000

Changed in glib2.0 (Ubuntu):
status: In Progress → Fix Released

All autopkgtests for the newly accepted glib2.0 (2.62.2-2~ubuntu19.10.1) for eoan have finished running.
The following regressions have been reported in tests triggered by the package:

indicator-session/17.3.20+19.10.20190921-0ubuntu1 (arm64)
sbd/1.4.0-18-g5e3283c-1ubuntu1 (i386)
cairo/unknown (armhf)
netplan.io/0.98-0ubuntu1 (ppc64el)
apport/2.20.11-0ubuntu8.2 (amd64)
snapd-glib/unknown (armhf)
firefox/70.0.1+build1-0ubuntu0.19.10.1 (armhf)
bumblebee/unknown (armhf)
glib2.0/2.62.2-2~ubuntu19.10.1 (i386)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/eoan/update_excuses.html#glib2.0

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.