Geis may crash when getting MT axis labels

Bug #839664 reported by Chase Douglas
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Geis
Fix Released
High
Chase Douglas
utouch-geis (Ubuntu)
Fix Released
High
Chase Douglas

Bug Description

In geis_xcb_backend.c, axis labels are retrieved from the server. If the axis isn't labeled, a static string constant is used instead. However, at the end of the axis handling, XFree is called on the axis label no matter what. This may cause XFree to be called on the static string, resulting in a segfault.

Related branches

Changed in utouch-geis:
status: New → In Progress
Changed in utouch-geis (Ubuntu):
status: New → In Progress
Changed in utouch-geis:
importance: Undecided → High
Changed in utouch-geis (Ubuntu):
importance: Undecided → High
Changed in utouch-geis:
assignee: nobody → Chase Douglas (chasedouglas)
Changed in utouch-geis (Ubuntu):
assignee: nobody → Chase Douglas (chasedouglas)
Stephen M. Webb (bregma)
Changed in utouch-geis:
milestone: none → 2.1.3
Changed in utouch-geis:
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package utouch-geis - 2.1.2-0ubuntu3

---------------
utouch-geis (2.1.2-0ubuntu3) oneiric; urgency=low

  * Fix crash on unlabelled MT axes (LP: #839664)
  * Fix crash due to device array overrun (LP: #836924)
 -- Chase Douglas <email address hidden> Fri, 02 Sep 2011 10:14:52 -0700

Changed in utouch-geis (Ubuntu):
status: In Progress → Fix Released
Stephen M. Webb (bregma)
Changed in utouch-geis:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.