After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 340668 - [PATCH] GDM crashes parsing greeter configuration
[PATCH] GDM crashes parsing greeter configuration
Status: RESOLVED FIXED
Product: gdm
Classification: Core
Component: general
2.15.x
Other All
: Normal critical
: ---
Assigned To: GDM maintainers
GDM maintainers
Depends on:
Blocks:
 
 
Reported: 2006-05-04 18:15 UTC by Joe Marcus Clarke
Modified: 2006-05-04 19:57 UTC
See Also:
GNOME target: ---
GNOME version: 2.15/2.16


Attachments
Fix crash due to free'ing of bogus pointer (315 bytes, patch)
2006-05-04 18:16 UTC, Joe Marcus Clarke
none Details | Review

Description Joe Marcus Clarke 2006-05-04 18:15:52 UTC
Steps to reproduce:
1. Launch GDM with a graphical greeter.
2. 
3. 


Stack trace:

Thread 1 (LWP 100094)

  • #0 idalloc
    at /usr/src/lib/libc/stdlib/malloc.c line 2866
  • #1 free
    at /usr/src/lib/libc/stdlib/malloc.c line 3565
  • #2 IA__g_free
    at gmem.c line 187
  • #3 parse_stock
    at greeter_parser.c line 370
  • #4 parse_gtkbutton
    at greeter_parser.c line 519
  • #5 parse_items
    at greeter_parser.c line 1654
  • #6 parse_box
    at greeter_parser.c line 795
  • #7 parse_rect
    at greeter_parser.c line 1100
  • #8 parse_items
    at greeter_parser.c line 1642
  • #9 parse_fixed
    at greeter_parser.c line 647
  • #10 parse_rect
    at greeter_parser.c line 1095
  • #11 parse_items
    at greeter_parser.c line 1642
  • #12 greeter_parse
    at greeter_parser.c line 1776
  • #13 main
    at greeter.c line 1194


Other information:
The problem is that a variable was not properly initialized to NULL before
calling g_free() on it.  The attached patch corrects that.
Comment 1 Joe Marcus Clarke 2006-05-04 18:16:51 UTC
Created attachment 64821 [details] [review]
Fix crash due to free'ing of bogus pointer
Comment 2 Brian Cameron 2006-05-04 19:57:23 UTC
Thanks, fixed in CVS head.