GNOME Shell qrcode generator may create invalid QR code images
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gnome-shell (Ubuntu) |
Fix Released
|
High
|
Marco Trevisan (Treviño) | ||
Noble |
Fix Released
|
High
|
Marco Trevisan (Treviño) |
Bug Description
[ Impact ]
When creating QR Code images for long(er) URIs we may end up creating qr codes whose size isn't matching the expected one and this may lead to a wrongly generated texture (and potential memory access errors).
An example: https:/
[ Test case ]
In order to test this from GNOME shell, many components have to be set up that are harder to check so this can be easily simulated using a simple test program that replicates what the shell does to generate the image: https:/
0. Install mutter compositor (prerequisite, remove it afterwards):
$ sudo apt install mutter
1. Download and run the test script:
$ wget -O /tmp/shell-
2. Run it with:
$ python3 /tmp/shell-
3. The qrcode should open in a new window and display correctly as
https:/
[ Regression potential ]
QrCodes are used only during web authentication that is not something that is generally exposed to users, but this may potentially lead to wrong or missing qr codes textures.
Changed in gnome-shell (Ubuntu Noble): | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Marco Trevisan (Treviño) (3v1n0) |
tags: | added: noble oracular |
description: | updated |
This bug was fixed in the package gnome-shell - 46.2-1ubuntu1
---------------
gnome-shell (46.2-1ubuntu1) oracular; urgency=medium
[ Jeremy Bícha ]
* Merge with Debian
* Refresh patches
[ Marco Trevisan (Treviño) ] patches/ ubuntu- authd: Properly draw qr-codes for longer URIs patches/ ubuntu- authd: Fix dialog text color when using light theme patches/ ubuntu- authd: Use right colors to draw the QR code in
* debian/
(LP: #2067610)
* debian/
(LP: #2067661)
* debian/
light mode (LP: #2067661)
gnome-shell (46.2-1) experimental; urgency=medium
* New upstream release
* Drop screencast patch applied in new release
* Drop revert tecla patch: no longer needed
* Add Depends: tecla. Drop Recommends: gkbd-capplet
-- Jeremy Bícha <email address hidden> Fri, 31 May 2024 07:14:43 -0400