[jira] [Comment Edited] (GUACAMOLE-441) guacd ssh plugin segfault when copy text to clipboard

["Nick Couchman (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-441?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16495480#comment-16495480 ] 

Nick Couchman edited comment on GUACAMOLE-441 at 5/30/18 5:44 PM:
------------------------------------------------------------------

I'm able to reproduce this using the method you suggested - hold left mouse button down while scrolling to select data from several parts of the screen.  I get the same "double free or corruption" error.

Here's my backtrace from guacd, built from one of the git repos (reasonably up-to-date):

{code}
*** Error in `/opt/guacssh/sbin/guacd': double free or corruption (!prev): 0x00007f300c000ba0 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x7c619)[0x7f302c192619]
/opt/guacssh/lib/libguac-client-ssh.so(guac_terminal_send_mouse+0x1ae)[0x7f30261414ae]
/opt/guacssh/lib/libguac-client-ssh.so(guac_ssh_user_mouse_handler+0x46)[0x7f3026135f36]
/opt/guacssh/lib/libguac.so.12(+0xdec9)[0x7f302e4e1ec9]
/lib64/libpthread.so.0(+0x7e25)[0x7f302d913e25]
/lib64/libc.so.6(clone+0x6d)[0x7f302c20e34d]
{code}


was (Author: nick.couchman@yahoo.com):
I'm able to reproduce this using the method you suggested - hold left mouse button down while scrolling to select data from several parts of the screen.  I get the same "double free or corruption" error.

> guacd ssh plugin segfault when copy text to clipboard
> -----------------------------------------------------
>
>                 Key: GUACAMOLE-441
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-441
>             Project: Guacamole
>          Issue Type: Bug
>          Components: SSH, Terminal
>    Affects Versions: 0.9.13-incubating, 0.9.14, 1.0.0
>         Environment: GNU Linux x86_64
>            Reporter: James He
>            Priority: Minor
>
> This segfault can be replicated each time when do the below steps.
> - Login to any SSH server from guacamole.
> - Try a command with much output e.g. "ps aux".
> - Select the output text of the above command.
> - SSH connection will be terminated immediately.
> - Core dump of guacd will be generated.
> {code:none}
> Core was generated by `/sbin/guacd -f'.
> Program terminated with signal SIGABRT, Aborted.
> #0  0x00002aaaabca8437 in raise () from /lib64/libc.so.6
> (gdb) bt
> #0  0x00002aaaabca8437 in raise () from /lib64/libc.so.6
> #1  0x00002aaaabca9818 in abort () from /lib64/libc.so.6
> #2  0x00002aaaabce6574 in ?? () from /lib64/libc.so.6
> #3  0x00002aaaabcebdae in ?? () from /lib64/libc.so.6
> #4  0x00002aaaabcecab6 in ?? () from /lib64/libc.so.6
> #5  0x00002aaaadb6b160 in __guac_terminal_send_mouse (term=0x2aaab401bf60, user=0x2aaab0002920, x=703, y=921,
>     mask=0) at terminal.c:1715
> #6  0x00002aaaadb6b2b5 in guac_terminal_send_mouse (term=0x2aaab401bf60, user=0x2aaab0002920, x=703, y=921, mask=0)
>     at terminal.c:1753
> #7  0x00002aaaadb5c532 in guac_ssh_user_mouse_handler (user=0x2aaab0002920, x=703, y=921, mask=0) at input.c:41
> #8  0x00002aaaaaf4dc2e in __guac_handle_mouse (user=0x2aaab0002920, argc=3, argv=0x2aaab000adc0)
>     at user-handlers.c:134
> #9  0x00002aaaaaf4d3ea in guac_user_handle_instruction (user=0x2aaab0002920, opcode=0x2aaab0012b29 "mouse", argc=3,
>     argv=0x2aaab000adc0) at user.c:178
> #10 0x00000000004055e7 in guacd_user_input_thread (data=0x2aaaaf353d20) at user.c:127
> #11 0x00002aaaab8521a4 in start_thread (arg=0x2aab0d029700) at pthread_create.c:309
> #12 0x00002aaaabd5965d in clone () from /lib64/libc.so.6
> (gdb) frame 5
> #5  0x00002aaaadb6b160 in __guac_terminal_send_mouse (term=0x2aaab401bf60, user=0x2aaab0002920, x=703, y=921,
>     mask=0) at terminal.c:1715
> warning: Source file is more recent than executable.
> 1715                guac_common_clipboard_reset(term->clipboard, "text/plain");
> (gdb) p term->clipboard->length
> $6 = 9500
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)