gtk4-rs icon indicating copy to clipboard operation
gtk4-rs copied to clipboard

[BUG] ` gtk4::CellRendererAccel.set_language` cause crash

Open qarmin opened this issue 3 years ago • 0 comments

System:    Host: rafalkom Kernel: 5.13.0-28-generic x86_64 bits: 64 compiler: gcc v: 11.2.0 Desktop: GNOME 40.5 
           tk: GTK 3.24.30 wm: gnome-shell dm: GDM3 Distro: Ubuntu 21.10 (Impish Indri) 
RUST_BACKTRACE=full RUSTFLAGS=-Zsanitizer=address RUSTDOCFLAGS=-Zsanitizer=address cargo run  -Zbuild-std --target x86_64-unknown-linux-gnu

Bug description

    let object_281 = CellRendererAccel::new(); // CellRendererAccel
    object_281.set_language(Some("-39344"));

cause crash:

AddressSanitizer:DEADLYSIGNAL
=================================================================
==27301==ERROR: AddressSanitizer: SEGV on unknown address 0x34343339332d (pc 0x7fd6ec89e0b1 bp 0x603000237898 sp 0x7ffcbc594358 T0)
==27301==The signal is caused by a READ memory access.
    #0 0x7fd6ec89e0b1  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x370b1)
    #1 0x7fd6ec887a08  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x20a08)
    #2 0x7fd6ecd6596e  (/lib/x86_64-linux-gnu/libgtk-4.so.1+0xfb96e)
    #3 0x7fd6ec887b75  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x20b75)
    #4 0x560f65434112  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x6fa112)
    #5 0x560f6549d73a  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x76373a)
    #6 0x560f650b0ffa  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x376ffa)
    #7 0x560f65066f78  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x32cf78)
    #8 0x560f6505f487  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x325487)
    #9 0x560f6505ea6a  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x324a6a)
    #10 0x7fd6ec87ac0e  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x13c0e)
    #11 0x7fd6ec896ea5  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x2fea5)
    #12 0x7fd6ec898883  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x31883)
    #13 0x7fd6ec898ad2  (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x31ad2)
    #14 0x7fd6ec99d9d7  (/lib/x86_64-linux-gnu/libgio-2.0.so.0+0xdb9d7)
    #15 0x7fd6ec99dbb5  (/lib/x86_64-linux-gnu/libgio-2.0.so.0+0xdbbb5)
    #16 0x560f6505fee8  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x325ee8)
    #17 0x560f6505f8d7  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x3258d7)
    #18 0x560f65066a76  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x32ca76)
    #19 0x560f65068c7a  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x32ec7a)
    #20 0x560f65064864  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x32a864)
    #21 0x560f65060af3  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x326af3)
    #22 0x560f6587c35d  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb4235d)
    #23 0x560f6588a44e  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb5044e)
    #24 0x560f658935fa  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb595fa)
    #25 0x560f658886f2  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb4e6f2)
    #26 0x560f6563aa09  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x900a09)
    #27 0x560f656d7a7b  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x99da7b)
    #28 0x560f6588a24d  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb5024d)
    #29 0x560f658935fa  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb595fa)
    #30 0x560f658893eb  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0xb4f3eb)
    #31 0x560f6563ad29  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x900d29)
    #32 0x560f656d73c9  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x99d3c9)
    #33 0x560f65060a55  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x326a55)
    #34 0x560f650671eb  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x32d1eb)
    #35 0x7fd6ec436fcf  (/lib/x86_64-linux-gnu/libc.so.6+0x2dfcf)
    #36 0x7fd6ec43707c  (/lib/x86_64-linux-gnu/libc.so.6+0x2e07c)
    #37 0x560f64fcc1e4  (/home/rafal/Projekty/Rust/gtk_rs_fuzzer/Project/target/x86_64-unknown-linux-gnu/debug/crash_thing+0x2921e4)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libgobject-2.0.so.0+0x370b1) 

Issue found by fuzzer - https://github.com/qarmin/gtk-rs-fuzzer

qarmin avatar Feb 11 '22 16:02 qarmin