After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 317362 - should not allow overlong window titles
should not allow overlong window titles
Status: RESOLVED FIXED
Product: gtk+
Classification: Platform
Component: Backend: X11
unspecified
Other Linux
: High critical
: ---
Assigned To: gtk-bugs
gtk-bugs
Depends on:
Blocks:
 
 
Reported: 2005-09-27 18:24 UTC by Christian Persch
Modified: 2006-03-29 04:52 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
testcase (563 bytes, text/plain)
2005-09-27 18:24 UTC, Christian Persch
Details

Description Christian Persch 2005-09-27 18:24:03 UTC
Setting an enormously long window title can crash the window manager or even the
X server. (See also https://bugzilla.mozilla.org/show_bug.cgi?id=167315 .) Gtk+
should prevent this from happening through gtk_window_set_title.

Steps to reproduce:
0) Compile & run the attached testcase
1) Watch metacity crash repeatedly
Comment 1 Christian Persch 2005-09-27 18:24:21 UTC
Created attachment 52738 [details]
testcase
Comment 2 Elijah Newren 2005-09-27 20:04:49 UTC
I have a stack trace of the Metacity crashing with Christian's testcase in bug
317364; it appears to crash somewhere deep into pango and cairo but doesn't mean
much to me.  *shrug*
Comment 3 Matthias Clasen 2005-09-28 19:02:46 UTC
Hmm, I have not been able to crash server or client by feeding long strings to 
pango_renderer_draw_layout(). It does get very slow though, so maybe we should
do some clipping.
Comment 4 Christian Persch 2005-09-28 19:29:06 UTC
Here it crashes with length >= 0x5553; Elijah said in bug 317364 that he needed
a much higher value to crash. Also the window list applet crashes when hiding
the tooltip with the window title, with a trace similar to the one Elijah has in
bug 317364. 
Comment 5 Matthias Clasen 2006-03-29 04:52:52 UTC
The crash has been worked around inside cairo, as far as I know.