[Konsole-devel] [Bug 202293] XFree bug in Qt message processing

Octavian octavian.voicu at gmail.com
Mon Aug 3 00:11:02 UTC 2009


https://bugs.kde.org/show_bug.cgi?id=202293





--- Comment #4 from Octavian <octavian voicu gmail com>  2009-08-03 02:10:55 ---
I think I found the cause of the bug. Look in QX11Data::xdndHandleEnter. There
is only one XFree call so it doesn't matter if the line numbers don't match:
http://qt.gitorious.org/qt/qt/blobs/5aed3db0a4084f470769ad4b965001f17b878c79/src/gui/kernel/qdnd_x11.cpp#line814

The bug could be triggered if the call to XGetWindowProperty fails. In that
case retval would remain uninitialized, and although there is no SEGV (most
likely the uninitialized value points to some valid memory), the call to XFree
fails with a "double free or corruption (out)". There is a simple fix for this
I guess: initialize retval to NULL before the call and make sure data is not
accessed if it's NULL.

Should I report it on the Qt bug tracker?

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the konsole-devel mailing list