| Summary: | gdm-2.20.7 crash with libxml2-2.6.32-r1 (ABI break affecting librsvg and more) | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | chengqiang <cheng91> |
| Component: | [OLD] GNOME | Assignee: | Gentoo Linux Gnome Desktop Team <gnome> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | gengor, graaff, harrisl, natanael.copa, plaes, wschlich |
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | x86 | ||
| OS: | Linux | ||
| URL: | http://bugzilla.gnome.org/show_bug.cgi?id=549087 | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | |||
| Bug Blocks: | 234099, 237413 | ||
|
Description
chengqiang
2008-08-23 12:33:00 UTC
Noticed indepently too now :( Assessing the situation now, as -r1 is supposed to be fixing a security bug Upstream is http://bugzilla.gnome.org/show_bug.cgi?id=549087 I have package.masked libxml-2.6.32-r1 until this is sorted out. gdm not working is a worse DoS than a chance of the other possible DoS that the patch in libxml2-2.6.32-r1 fixes. I think that this goes beyond just gdm. When I upgraded to libxml2 yesterday I found that my panel died after a while. I tried to fix that by logging out and in, but then noticed that gdm had the problem described in this bug. I don't really have time to dive into this at the moment, but reverting to libxml2-2.6.32 fixed things again. Yes, other things using librsvg to parse stuff including entities are affected as well. A recompile of librsvg might help too, but for now we just have libxml-2.6.32-r1 p.masked until we commit a version of the patch that doesn't break ABI. Also on the relevant debian bug there is mentions of strigi (KDE4 stuff) breaking on this too. To clarify further, panels and the like die only if you use a gtk+ theme that uses SVGs and entities in a manner that causes this. Probably when using the gtk+ theme engine librsvg provides. I am aware of all the details, I just need to take time to figure out what patch to take that doesn't break ABI. There are a few patches floating around that abuse an already existing struct field instead of adding a new one (nbEntities) Turned out libxml2-2.7.0 restored ABI before release without it being mentioned in the relevant bugs that I monitored or looked at. libxml2-2.7.1 is now in the tree, and the problematic 2.7.32-r1 is removed. (In reply to comment #7) > Turned out libxml2-2.7.0 restored ABI before release without it being mentioned > in the relevant bugs that I monitored or looked at. libxml2-2.7.1 is now in the > tree, and the problematic 2.7.32-r1 is removed. > I'm afraid it isn't. I still have gdm 2.20.7 and 2.20.8 segfaulting with dmesg saying that gdm segfaults in librsvg. (tried both librsvg 2.20.2 and 2.20.3) Also tried reemerging gdm and librsvg. With libxml2-2.6.32 everything works. Works great for me and supposedly all the arch teams when upgrading from a working 2.6.32 to 2.7.1. As we can't reproduce you will need to provide quite a bit more information for us to be able to do anything. (In reply to comment #9) > Works great for me and supposedly all the arch teams when upgrading from a > working 2.6.32 to 2.7.1. As we can't reproduce you will need to provide quite a > bit more information for us to be able to do anything. > Finally made it work by unprelinking all the packages involved, ummerging gdm, libxml2, librsvg and emerging them again. Sorry for false alert. [but dynamic libraries in Linux are surprising me more and more.] |
