Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(210)

Issue 668239: Fix memory errors in third_party/ibus-chewing/files/src. (Closed)

Created:
10 years, 9 months ago by Yusuke Sato
Modified:
9 years, 7 months ago
Reviewers:
satorux1
CC:
chromium-os-reviews_chromium.org, mazda
Visibility:
Public.

Description

Fix memory errors in third_party/ibus-chewing/files/src. In src/IBusChewingEngine.gob, an uninitialized GValue object is passed in to ibus_config_get_value() API. This seems to cause an unexpected termination of the IBus connection: Program received signal SIGPIPE, Broken pipe. [Switching to Thread 0x6f7dd6c0 (LWP 3013)] 0x005b5416 in __kernel_vsyscall () (gdb) bt #0 0x005b5416 in __kernel_vsyscall () #1 0x01075ac1 in writev () from /lib/libc.so.6 #2 0x00397b15 in _dbus_write_two (fd=4, buffer1=0x9ed259c, start1=0, len1=128, buffer2=0x9ed25d8, start2=0, len2=38) at dbus-sysdeps-unix.c:425 #3 0x00397954 in _dbus_write_socket_two (fd=4, buffer1=0x9ed259c, start1=0, len1=128, buffer2=0x9ed25d8, start2=0, len2=38) at dbus-sysdeps-unix.c:258 #4 0x0038e6d1 in do_writing (transport=0x9ed1910) at dbus-transport-socket.c:597 #5 0x0038edb8 in socket_do_iteration (transport=0x9ed1910, flags=1, timeout_milliseconds=-1) at dbus-transport-socket.c:1016 #6 0x0038d689 in _dbus_transport_do_iteration (transport=0x9ed1910, flags=1, timeout_milliseconds=-1) at dbus-transport.c:956 #7 0x0037146c in _dbus_connection_do_iteration_unlocked (connection=0x9ed1d30, flags=1, timeout_milliseconds=-1) at dbus-connection.c:1163 #8 0x00372436 in _dbus_connection_send_preallocated_unlocked_no_update (connection=0x9ed1d30, preallocated=0x0, message=0x9ed2598, client_serial=0x0) at dbus-connection.c:1984 #9 0x00373ba0 in _dbus_connection_send_unlocked_no_update (connection=0x9ed1d30, message=0x9ed2598, client_serial=0x0) at dbus-connection.c:3100 #10 0x00373f39 in dbus_connection_send_with_reply (connection=0x9ed1d30, message=0x9ed2598, pending_return=0x77aeae78, timeout_milliseconds=-1) at dbus-connection.c:3263 #11 0x0037413d in dbus_connection_send_with_reply_and_block (connection=0x9ed1d30, message=0x9ed2598, timeout_milliseconds=-1, error=0xa331c50) at dbus-connection.c:3341 #12 0x0032f6b0 in ibus_connection_send_with_reply_and_block (connection=0x9ebbe60, message=0x9ed2598, timeout_milliseconds=-1, error=0x77aeaf68) at ibusconnection.c:722 #13 0x003323a3 in ibus_proxy_call_with_reply_and_block (proxy=0x9ef36c0, method=0x351592 "GetValue", timeout_milliseconds=-1, error=0x77aeaf68, first_arg_type=64) at ibusproxy.c:750 #14 0x0033f444 in ibus_config_get_value (config=0x9ef36c0, section=0x8057032 "engine/Chewing", name=0x805a87c "hsuSelKeyType", value=0x77aeb07c) at ibusconfig.c:229 #15 0x0804f0c2 in ibus_chewing_engine_load_setting () #16 0x0805190d in ___1d_ibus_chewing_engine_enable () #17 0x002ad7dc in g_cclosure_marshal_VOID__VOID () from /usr/lib/libgobject-2.0.so.0 #18 0x0029e6c9 in ?? () from /usr/lib/libgobject-2.0.so.0 #19 0x09ec9c08 in ?? () #20 0x00000000 in ?? () (gdb) I'll try to upstream this change later, but let me submit this to our repo first to see if this patch actually fixes the bug. BUG=crosbug.com/1253 TEST=see the bug

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+5 lines, -2 lines) Patch
M src/IBusChewingEngine.gob View 2 chunks +5 lines, -2 lines 0 comments Download

Messages

Total messages: 2 (0 generated)
Yusuke Sato
10 years, 9 months ago (2010-03-08 00:48:58 UTC) #1
satorux1
10 years, 9 months ago (2010-03-08 02:00:45 UTC) #2
lgtm

Powered by Google App Engine
This is Rietveld 408576698