1939713 - Crash in [@ wl_proxy_get_user_data | libgdk-3.so.0]

Status: RESOLVED DUPLICATE of bug 1942232

(Core :: Widget: Gtk, defect)

Description

[Maddi]

Crash report: https://crash-stats.mozilla.org/report/index/777e176a-4c51-4871-a6ed-df84b0250102

Reason:

SIGSEGV / SEGV_MAPERR

Top 10 frames:

0  libwayland-client.so.0  wl_proxy_get_user_data
1  libgdk-3.so.0  libgdk-3.so.0@0x75d53
2  libffi.so.7  <.fini ELF section in libffi.so.7.1.0>
3  libffi.so.7  <.fini ELF section in libffi.so.7.1.0>
4  libffi.so.7  ffi_prep_go_closure
5  libffi.so.7  ffi_closure_free
6  libgdk-3.so.0  libgdk-3.so.0@0x75d1f
7  libgdk-3.so.0  libgdk-3.so.0@0x115fe7
8  libwayland-client.so.0  wl_log_set_handler_client
9  libwayland-client.so.0  <.text ELF section in libwayland-client.so.0.22.0>

Comment 1

[Martin Stránský [:stransky] (ni? me) (PTO, back on Feb 17)]

This is actually good. We're using old proxy (perhaps wl_buffer) but instead to access unreleased WaylandBuffer (and hit UAF) we crash null because we cleared the WaylandBuffer reference explicitly. May be fixed by Bug 1942232.