/srv/irclogs.ubuntu.com/2009/12/10/#ubuntu-bugs.txt

=== asac_ is now known as asac
nigel_nbhey, anyone here?01:54
jtniehofyep. what's up?01:57
nigel_nbdoes open office support docx editing?02:06
nigel_nbjtniehof: check out bug 494813, as far as I know it doesn't02:07
ubot4Launchpad bug 494813 in openoffice.org "problem with subscript/superscript font while editing .docx files" [Undecided,New] https://launchpad.net/bugs/49481302:07
jtniehoflast I checked, it tries to handle it, but poorly02:08
* jtniehof grubs around a bit02:08
nigel_nbI remember being able to open it02:08
nigel_nbbut being able to save.... thats news to me02:09
jtniehofyep, right there on the save as dropdown02:10
jtniehofand sure enough, superscript doesn't stay02:10
nigel_nbjtniehof: thank you, I'll confirm it, but I guess its upstream02:11
nigel_nbanother new sign up02:11
jtniehofhmmm. I'll try it in Windows and see02:12
nigel_nbjtniehof: reported upstream :)02:28
* nigel_nb finds it irksome joining so many bug trackers 02:28
nigel_nbinteresting bug 49475802:31
ubot4Launchpad bug 494758 in evolution "Evolution incorrectly reports dates in the near future" [Undecided,New] https://launchpad.net/bugs/49475802:31
nigel_nbI dont know about everyone else, but I dont generally get mails in the future02:31
jtniehofnigel_nb: did you check the upstream build of OO? not seeing the docx saving on Windows, going to pull the upstream linux build next02:36
nigel_nbjtniehof: I reported the bug upstream, so they'll take care02:37
nigel_nbWhen a bug is reported against the current release, but is fixed in the dev release (not reproducible), is the bug considered fixed?02:54
=== astechgeek is now known as techgeek
micahgnigel_nb: if you can reproduce it in the reported release or there is a changelog/upstream changelog entry for the devel release02:55
nigel_nbbug 493250, I could reproduce it before the last update to ubuntu (now I realize) in karmic02:56
ubot4Launchpad bug 493250 in software-center "Ubuntu Software Center doesn't list GoldenDict when searching for 'dictionary'" [Undecided,Incomplete] https://launchpad.net/bugs/49325002:56
* micahg sees it in karmic02:57
micahgnigel_nb: maybe ask to try again...I see it down the list03:00
nigel_nbmicahg: yeah me too, I remember checking it out and not seeing it.03:00
nigel_nbmicahg: check out bug 49475803:03
ubot4Launchpad bug 494758 in evolution "Evolution incorrectly reports dates in the near future" [Undecided,New] https://launchpad.net/bugs/49475803:03
nigel_nbI dont even know if its worth wishlisting, I mean, that is almost impossible to reproduce (and isn't it worthless to fix)03:04
jtniehofnigel_nb: docx saving is not present in upstream, so it's not an upstream bug (maybe deactivated in standard build b/c they're still working on it)03:07
nigel_nbjtniehof: oops03:08
nigel_nbjtniehof: which means its only on the repos?03:08
jtniehofyeah, checking Debian now, to see if it's in the debian build03:08
nigel_nbit should be03:08
nigel_nbbecause the build is 5ubuntu (I think, lemme check)03:09
micahgnigel_nb: the evo bug isn't a bug, the date displayed was correct based on the header information03:09
nigel_nbI'll close it as invalid then03:09
jtniehofit's 5ubuntu1, so there are changes between debian and ubuntu03:09
micahgnigel_nb: be sure to explaiyn wh03:09
nigel_nbjtniehof: openoffice.org-core 1:3.1.1-5ubuntu103:09
nigel_nbmicahg: I'll paste what I'm going to say first03:10
nigel_nbdont wanna get flamed to the sky03:10
micahgnigel_nb: pastebin03:10
nigel_nbsure :)03:10
nigel_nbmicahg: as such, we've been getting flamed to much ;)03:10
dtcheneh, come talk to me about being flamed after you've done Ubuntu audio for a few years03:11
nigel_nbdtchen: hehe, I forget we've got some veterans at getting flamed ;)03:12
dtchenI've been very close to writing off Ubuntu completely because of it03:14
nigel_nbmicahg: whoa that was one hell of a flame03:17
nigel_nb"The Ubuntu bug triage “process” is worse than useless" --- whoa :O03:17
jtniehofdtchen: I found pulse a royal pain for several revisions, but there's no excuse for the stuff people said when you'd try to post information03:18
jtniehofat this point, it's settled down to something very nice03:18
nigel_nbmicahg: http://mdzlog.alcor.net/2008/10/29/ubuntu-quality/ is the best I've seen as a reply to a flame :)03:24
nigel_nboh about the evo bug, how is it not a bug?03:24
jtniehofnigel_nb: docx is in Debian sid, oo.o-writer 3.1.1-8, and the super/sub bug is present there. So might be worth filing on the Debian package03:25
micahgnigel_nb: evo and every other client determines the time from the header in the email which the sending client adds03:25
nigel_nbjtniehof: will do :) thanks for tracking it down03:25
nigel_nbmicahg: okay03:26
nigel_nbthe current date is 12/9/0903:26
nigel_nbthe date in the header is 12/11/0903:26
nigel_nband its saying tomorrow03:26
nigel_nbso isn't it wrong?03:26
micahgoh...03:27
* micahg needs to read...03:27
micahgnigel_nb: I would ask for the date line from the header...I"m guessing it's a timezone issue03:28
jtniehofanyhow, g'night folks03:28
nigel_nboh, will do03:28
micahgnigel_nb: if said friend was +12 from user, time would be correct03:29
micahgnigel_nb: also ask for user's timezone03:29
nigel_nbmicahg: so I'll ask him to paste the time from the header?03:29
nigel_nbokay, will do03:29
LimCoreI found incredible stupid bug in kerneltop application, how to get it's fixed version to ubuntu?03:55
dogatemycomputermicahg:  Greetings.  Do you have a moment?04:02
LimCoreI sent a patch to fix https://bugs.launchpad.net/ubuntu/+source/kerneltop/+bug/486218  please apply it04:03
ubot4Launchpad bug 486218 in kerneltop "kerneltop reports wrong map line on 2.6.31-14-generic" [Undecided,Confirmed]04:04
micahgLimCore: we don't apply patches in here...someone in -motu would04:05
micahgdogatemycomputer: sure04:06
dogatemycomputermicahg:  I am looking at bug #494810 .   S/he is trying to view a specific movie that uses Windows Media Player.   I don't know if their use of a proprietary format constitutes a bug?04:07
ubot4Launchpad bug 494810 in firefox-3.5 "I can't see the video stream in the site" [Undecided,New] https://launchpad.net/bugs/49481004:07
LimCoremicahg: can you set bug priority? the application seems to be useless - it does not work at all with ubuntu kernels due to bug in application04:08
micahgLimCore: done04:11
micahgdogatemycomputer: I'm not sure, the user has the totem plugin for x-ms-asf04:12
dogatemycomputermicahg: so do I..  but it never actually plays..04:12
micahgdogatemycomputer: well, I can test from home later04:13
LimCorethanks micahg04:13
micahgLimCore: np04:13
dogatemycomputermicahg: I believe it is actually a website coding error.  The reason I believe so is because it fails to specify the FQDN of the movie in the link.  If you attempt to view it then it dumps out an error indicating the location of the video is invalid (not the video itself).04:14
micahgdogatemycomputer: if that's the case, then the user should report it to the website, but I can't test that now04:15
dogatemycomputermicahg: I'll leave the bug alone for the moment.   It plays fine on Windows with WMP but that still does not mean it is a bug.04:16
dogatemycomputermicahg:  thank you for your time!04:22
micahgdogatemycomputer: np04:22
=== fenris__ is now known as ejat
=== _stink__ is now known as _stink_
dogatemycomputergreg-g:  do you have a moment?04:53
dogatemycomputerI am new to triaging bugs.   Could someone tell me if it is appropriate for multiple bug reports to be submitted on the same bug?04:56
dogatemycomputer..  multiple un-related bug reports submitted on the same bug.04:56
^arky^When is the ubuntu bug hug  day starting ?06:35
Wimbuntuhi guys i need some help on ubuntu 9.10 , ubuntu error main process 735 , x doesn't startup , anyone able to help out there07:01
nigel_nbWimbuntu: if u are facing a problem and you need help, please ask in #ubuntu07:02
WimbuntuHi Thanks mate , sorry newbie07:03
nigel_nbWimbuntu: no problem, I've been there too :)07:03
thekorngood morning07:14
=== thekorn_ is now known as thekorn
fujimitsualright, kernel updates ready .. time for bacon07:58
nigel_nbthekorn: good morning :)08:01
nigel_nbthough its kinda like afternoon here ;)08:02
thekornhehe, good "kinda like adfternoon" to you, nigel_nb08:02
nigel_nbhehe08:02
nigel_nbthekorn: can you check out a bug for me? donno what to do next08:07
nigel_nbbug 411229, can't reproduce with my camera, so what do we do? a trace?08:07
ubot4Launchpad bug 411229 in f-spot "f-spot import folder structure wrong time zone" [Low,Incomplete] https://launchpad.net/bugs/41122908:07
thekornnigel_nb, sure08:08
thekornnigel_nb, first of all I would ask the reporter to run  apport-collect 411229  to make it a proper apport styled bugreport08:12
thekornlet me start f-spot to try to understand the reporter's problem08:13
nigel_nbthere is no hook for f-spot :(08:13
nigel_nbwe donno if its camera specific, f-spot specific, or camera+f-spot specific08:13
thekornnigel_nb, hmm, maybe I don't completely get what this report is about, but maybe it is a duplicate of bug 17519108:18
ubot4Launchpad bug 175191 in f-spot "f-spot changes timestamp in an incorrect way" [Unknown,Confirmed] https://launchpad.net/bugs/17519108:19
thekornthis bug also has a upstream bugreport linked08:19
nigel_nbthekorn: there is a patch08:21
nigel_nbI could try and pester someone to get a debdiff for lucid or teach me how to do that, does that help?08:21
thekornnigel_nb, looks like the author of this patch already has build a package with this patch in his PPA08:24
thekornhttps://edge.launchpad.net/~smcgrath23/+archive/f-spot/+packages08:24
nigel_nbso, what would be the ideal next step?08:24
thekornask the reporter to install the version from this PPA, ask him to confirm if this package fixes his issues08:25
thekornif so, mark your bug as a dupolicate of the other one08:25
nigel_nbI already asked him for apport-collect08:26
thekornsuper08:26
nigel_nbshall I tell him to forget it or say this after the apport-collect?08:26
thekornnigel_nb, tell him to use the PPA after running apport-collect, running apport-collect is not a big thing and nice to have08:31
nigel_nbthekorn: I'll not mark it dup now, coz it will flood the other bug with a lot of noise, I'll just leave a comment08:32
nigel_nbwhat if he doesn't know how to do a ppa, I'll just tell him its a dup and there is a ppa version and test it08:32
thekornnigel_nb, right, mark it as dup if the patched package fixes is issue08:32
nigel_nbthekorn: how do we get the ppa into the actual release?08:33
thekornyou mean the package from this PPA, if it is confirmed it morks better than the version we have in karmic?08:34
nigel_nbthekorn: yep08:38
nigel_nbthekorn: a, it would be nice to learn how to do it.  b, it would be nice to get it fixed08:39
thekornnigel_nb, we have the SRU (stable release update) process to get bug fixes into stable releases08:41
thekornyou can read more about it at https://wiki.ubuntu.com/StableReleaseUpdates08:41
nigel_nbthank you08:41
thekornnigel_nb, but there are two more important steps: try to convince upstream to either adopt this patch, or provide a different solution08:42
thekornand fix this bug in lucid first08:42
nigel_nbthekorn: so that we dont branch from upstream08:42
thekornright, we should try to keep the diff to upstream as small as possible08:43
nigel_nbI'm talking about fixing it on lucid, if at all08:43
thekornwhich makes the product easier to maintain on our side08:43
nigel_nbyea, I read up the process some time back08:43
nigel_nbbut with main software, getting it working is an important factor too isn't it08:44
thekornnigel_nb, I'm sorry, I have to do some other stuff right now, will be back in a few hours,08:45
thekornkeep on asking questions, I'm sure others are able to answer them too08:45
nigel_nbthekorn: I'm off to catch some sleep08:45
nigel_nbcatch ya later :)08:45
nigel_nbthanks a lot for the help thekorn :)08:45
thekornno problemo, sleep tight ;)08:46
=== micahg1 is now known as micahg
=== ogra_ is now known as ogra
TLEhey guys13:04
TLEI was wondering about bug 24620513:05
ubot4Launchpad bug 246205 in ca-certificates "Wordcommunitygrid Message "Peer certificate cannot be authenticated with known CA certificates."" [Medium,Fix released] https://launchpad.net/bugs/24620513:05
TLEit has been fixed for intrepid and jaunty, but the problem exist now again in karmic, I thought that those fixes would automatically trickle down13:05
bddebianBoo14:48
greg-gheya dogatemycomputer, Sorry. I was with out power last night (my IRC session is on a server I connect to). Just saw your message. To answer your question: no. Un-related bug should be submitted in separate bugs. Otherwise it would be next to impossible to actually track the progress on anything.15:33
greg-gdogatemycomputer: so, if someone did that, politely ask them to open separate bugs for each issue.15:33
greg-gdogatemycomputer: and of course, if they sound like support requests, have them open them on answers.launchpad.net instead15:33
malevhi! how are you foks! I'm comming for the hug day :D I'm gonna read a little about it and the I wanna help here16:17
thekornwhat, we have a bugday today? /me goes getting the mail16:21
thekornoh, it's on compiz16:22
thekornhappy hugday everybody!16:22
malevhaha!16:22
malevhey, how can I find if a bug is duplicated?16:23
malevI wanna learn about the work at the bugsquad, can anyone help me. for example I'm looking at the bug https://bugs.launchpad.net/ubuntu/+source/compiz/+bug/49227116:26
ubot4Launchpad bug 492271 in compiz "ubuntu 9.10 totally freezes when compiz is enabled" [Undecided,New]16:26
thekornmalev, to be honest, I think finding out if a bug is a dup of another one is one of the hardest things to start with,16:27
thekornbecause it needs some understanding of how the software works, at least in some cases16:27
malevthekorn, oks! thanks for that!16:27
thekornmalev, looking at this bug now16:27
malevthekorn, yes i think like you about that16:27
malevthekorn, you are investigating this bug too? excelent! maybe you could teach me! :D16:28
hggdhmalev: also, you do not need to ask for help -- just ask your question. We are here to help triagers16:28
thekornhey hggdh16:29
hggdhhi thekorn hope life is good for you. Here life is extremely cold (-20C)16:29
thekornhggdh, och, are you at the noth pole?16:29
malevhggdh, hi! -20C where are you?16:29
thekornnorth16:29
nperryThat is cold :)16:30
hggdhthat:-) Chicago area, US, right now16:30
thekornhggdh, just wanted to complain about the weather here +1C and *alot* of rain16:30
thekornhggdh, ah, have heard about it in the news today16:30
hggdhah, at least no rain today :-)16:30
malevhggdh, well Buenos Aires is 26C :D :D :D16:31
hggdhand, since my hotel is about 750m from  the customer, I decided I would walk (instead of renting a car). Real bad choice16:31
hggdhbut -- back to business -- malev: tahnk you for helping. We appreciate it.16:32
malevhggdh, don't worry.16:33
thekornmalev, ok, back to your bug. WeatherGod has been very active lately traiging bugs, and he has commented on the bugreport, saying he is waiting for similar reports16:33
thekornI think it is still on his radar16:33
hggdh(and a bit of OT) I was down nearby Rio the week before... 40C!16:33
thekornso maybe you are safe to just skip this one and go to another one ;)16:33
hggdhyes. And chat with WeatherGod on questions about this (and similar) bugs16:34
malevexcelent! now I'm with https://bugs.launchpad.net/ubuntu/+source/compiz/+bug/491770 and it also has apport. but of course, I can't reproduce it in my machine16:34
ubot4Launchpad bug 491770 in compiz "compiz cube rotate mouse pointer lost" [Undecided,New]16:34
* hggdh does not deal with X, and compiz...16:35
* thekorn neither16:35
thekornmalev, but this one is easy,16:35
thekornit should be fixed by now16:35
malev... why?16:36
maleveasy to ...?16:36
thekornthere was an issue in kubuntu with two x-server running16:36
malevso it's duplicated?16:37
thekornhmm, I'm unable to find the related bugreport right now16:37
malevthekorn, I'm gonna look for it, don't worry16:37
thekornmalev, not sure if this is a duplicate, but there might be the same cause16:38
thekornmalev, in such cases it makes sense to ask the reporter to update the system, and check if this issue is still happening16:38
malevthekorn, oks! well I'm gonna ask that!! thanks16:39
thekornmalev, I *think* this is the bug I mean, bug 49148316:41
ubot4Launchpad bug 491483 in gdm "Since failsafe-x was enabled in karmic it starts if gdm is disabled and kdm is used. (low graphics mode error)" [High,Fix released] https://launchpad.net/bugs/49148316:41
malevthekorn, what's about this answer to bug 491770    http://pastie.org/73749216:47
ubot4Launchpad bug 491770 in compiz "compiz cube rotate mouse pointer lost" [Undecided,New] https://launchpad.net/bugs/49177016:47
nperrymalev: I would still mark it as a duplicate - imho16:48
thekornmalev, super, change it to [...]fixed care (bug 491483)[...] - this will make it a clickable link in your comment16:48
ubot4Launchpad bug 491483 in gdm "Since failsafe-x was enabled in karmic it starts if gdm is disabled and kdm is used. (low graphics mode error)" [High,Fix released] https://launchpad.net/bugs/49148316:48
malevnperry, thekorn oks! thanks you two! I'm gonna mark it as duplicated too :D16:49
thekornmy personal opinion here is: only mark it as duplicate if you are sure, to avoid additional bugmails to the subscribers of the potential master and its dups16:49
malevready! now i guess i have to paint green the row in the wiki :D I'm really happy this is my first bug work :D16:51
thekornmalev, there are three things which should also be done by you: you should subscribe to the bug you commented on (to get notofied when the reporter answers your question)16:52
thekornset the status to "incomplete"16:53
malevoks!16:53
thekornand mark the entry on the hugday wiki page in green16:53
hggdhmalev: you may want ot look at hugday-tools also16:53
thekornhaha, yeah16:53
* thekorn is suprised this little tool is still working16:54
* hggdh is happy it still works ;-)16:55
malevso, I have to run:  hugday init --user malev --cookie /home/malev/.mozilla/firefox/zhucgzuk.default/cookies.sqlite     ?16:57
malevand :  hugday close 491483   ?16:57
thekornmalev, exactly16:59
thekornmaybe you have to also run   hugday current --remember  after running the hugday init command17:00
thekornotherwise you have to always run   hugday close 123456 --date 2009121017:01
malevI'm going for launch, i come back in a while17:01
thekornsuper, thanks for your help17:02
=== mac_v_ is now known as mac_v
malevhi! is anyone here?17:45
persiamalev: Lots of people, but you'll get a more specific answer to a more specific question.17:47
hggdhheh17:49
malevwell here is the thing. I've been working on bug 491770  and I'm getting: RuntimeError: You are not allowed to change the content of 'https://wiki.ubuntu.com/UbuntuBugDay/20091210'. Plase run 'hugday init' and try again.17:50
malevbut I thing is something about "persmisos" I can't remember how to translate that word :S17:50
ubot4Launchpad bug 491770 in compiz "compiz cube rotate mouse pointer lost" [Undecided,Incomplete] https://launchpad.net/bugs/49177017:51
nperryHummm 4171 incomplete bugs alot of them are old, going to do some housekeeping by invaildating them17:52
hggdhmalev: permisos?17:56
hggdh(or permissos, don't remember)17:56
pedro_hggdh, i'm trying to solve the issue with malev by priv17:57
pedro_spanish speaker, so might be faster that way17:57
hggdhpedro_: OK. But it sounded liker permissions17:57
pedro_hggdh, yeap that's the translation17:58
pedro_looks like he wasn't logged into the wiki17:58
* pedro_ reading the instructions17:58
malevhey! i wasn't that difficult persmisos = permissions :D17:58
pedro_will update the doc, there's nothing about logging into the wiki first18:00
malevYESS!! I make it!! haha I'm happy :D :D :D18:02
malevthanks pedro_ and hggdh18:02
pedro_malev, rock on! if you have any further question just ask here at the channel18:02
malevpedro_, I will don't worry :D18:03
pedro_;-)18:04
thekornohja, right, of course, you need to login to wiki.ubuntu.com first, before being able to use the hugday tool18:08
malevMe again! I'm looking at bug 451974 I can't reproduce it, but I've tried. It has a lot of information and it has apport. And I've seen other bugs about totem and compiz, but they are focus con crashing when returning from full screen mode.18:12
ubot4Launchpad bug 451974 in fglrx-installer "Black video minimizing Totem window" [Undecided,New] https://launchpad.net/bugs/45197418:12
malevthe question: what can I do?18:12
malev:D18:12
malevthe bug was reported in october, maybe there is a solution if he upgrade.... I don't know18:17
thekornmalev, I'm not sure about this bug. But to give the reporter the feeling of working on this bug, and given the fact that he used a pre release version of ubuntu karmic, I think it makes sense to ask if this is fixed on an up-to-date system18:21
malevthekorn, thanks! I'm taking care of it right now!18:21
thekornsuper18:21
nperryIs there a patricular way on triaging ubuntu-one bugs?18:45
persianperry: Upstream is active enough with Ubuntu that it's probably worth creating upstream tasks fairly quickly (but you might want to confirm that with upstream first)18:47
nperryHow would i go about that persia?18:49
* persia checks the upstream docs to find the right channel18:50
thekornthey have an rc channel18:50
thekorn#ubuntuone18:50
thekornI think18:50
PiciYes.18:50
persiaThat's what I think too, but I wanted to check their website to confirm.18:50
persiaOK.  Three of us is enough to skip checking :)18:51
thekornhehe, yeah18:51
persianperry: Go check on #ubuntuone if they want us to do anything special, and let us know :)18:51
malevwell my friends. I'm taking of for now!19:11
malevthanks to everbody and have a nice day19:11
nperry#ubuntuone said most of the bugs they've had in the last couple of days are dups19:13
nperryhttps://wiki.ubuntu.com/UbuntuOne#Bug%20Triage apport uploads everything the devs need :)19:14
persianperry: Cool.  Thanks for checking and passing on the pointer.19:15
hggdhhum. This link should be in our wiki (cannto check now, real slow wiki connection)19:16
nperryWould you like me to add hggdh as im there now?19:17
hggdhnperry: yes, please19:17
nperryDone :)19:22
hggdhnperry, thank you19:25
=== yofel_ is now known as yofel
=== astechgeek is now known as techgeek
WeatherGodhey, is anyone here triaging compiz bug reports related to systems hanging?20:53
WeatherGodbug 487519 can probably be marked as "Triaged"21:31
ubot4Launchpad bug 487519 in compiz "“window previews” plugin leaves garbage on screen" [Undecided,New] https://launchpad.net/bugs/48751921:31
WeatherGodthe OR gives very detailed description of the bug and screenshots to supplement it21:31
WeatherGodthere really isn't anything more someone can do, except confirming it21:32
=== micahg1 is now known as micahg
hggdh?21:33
hggdhWeatherGod: did you reproduce it (just curious)21:33
WeatherGodI don't use Compiz21:34
WeatherGodmy graphic cards are too weak21:35
WeatherGodhggdh, do you think I should flag bug 487165 as a possible security issue?22:09
ubot4Launchpad bug 487165 in compiz "screensaver unlock dialog under other windows" [Undecided,New] https://launchpad.net/bugs/48716522:09
WeatherGodhe can't seem to reproduce it yet, but the fact that it happened once shows that it is possible22:10
hggdhlooking at it22:11
WeatherGodit should at least also be linked against the gnome-screensaver22:11
hggdhWeatherGod: please wait. It takes for even and ever, hallelujah, etc, for a page to load here22:14
WeatherGodheh22:14
WeatherGodis nperry around?22:16
persiaWeatherGod: /names will give you a complete list (not right now that I see)22:17
WeatherGodsometimes people have different sigs here than they do for launchpad22:17
WeatherGodso I just wanted to double-check22:18
hggdhwell. There is a clear security/privacy issue here -- whatever windows that are open on the foreground would be visible. The severity could be discussed, though22:18
hggdhadd to it the fact that has not been repeated...22:18
hggdhWeatherGod: you can always ask at #ubuntu-hardened22:19
WeatherGodmaybe the gnome-screensaver people can come up with some other possible ways to cause this?22:19
WeatherGodyou mean, ask if they think it is a security issue?22:19
hggdhpersia: WeatherGod yes. I consider it a potential one (at the minimum, affecting privacy)22:21
hggdhpersia: heh You been here the whole day? don't you sleep ;-) ?22:21
persiaWait.  What!22:21
hggdhwhat?22:21
persiahggdh: I have discovered the secret of ubiquitous presence: bip.22:22
hggdhLOL22:22
persiaWhat's the potential security issue with gnome-screensaver?22:22
* persia was looking through that code just in October22:22
WeatherGodbug 48716522:22
hggdhnot with g-ss (which I do not even know it is involved), but with the unlock dialog being *under* active windows22:22
ubot4Launchpad bug 487165 in compiz "screensaver unlock dialog under other windows" [Undecided,New] https://launchpad.net/bugs/48716522:23
WeatherGodok, maybe not gnome-screensaver... what ever it is that locks screens22:23
hggdh:-)22:23
WeatherGodI am used to my screen locking to be tied to my screensaver, so it was the first thing I thought of22:24
hggdhWeatherGod: the point is we do not know what Chris is using for that. It is *probably* g-ss, but not necessarily22:24
WeatherGodwell, he said he suspended his laptop (presumedly by closing the lid)22:24
hggdhso, before we add a task for g-ss, we need to ask Chris what is it s/he is using22:25
WeatherGodso, power-manager?22:25
hggdhe.g. kubuntu, Ubuntu, Xubuntu, etc22:25
WeatherGodoh, well, the picture shows Gnome22:25
WeatherGodwell, an odd config, maybe22:26
hggdhI did not even try to open it. It would take 30 min to load the beast :-(22:26
WeatherGoddunno...22:26
WeatherGodthe top toolbar looks like gnome... but everything else isn't what I am used to seeing22:26
WeatherGodok, I will ask22:27
persiaRIght.22:28
persiaIt is gnome-screensaver that locks the screen.22:28
persiaBut it is *supposed* to raise the screensaver window over all other windows.22:28
persiaAnd it grabs *all* XInput events22:28
WeatherGodwell, he said that he could not interact with any of the windows22:29
WeatherGodso that is still good22:29
persiaAnd then it passes some selected XInput Events to other modules linked with XEmbed (e.g. keyboard, memo pad, unlock dialog).22:29
WeatherGodbut, what if the screensaver fails?22:29
macocrappy that his stuff's visible though22:29
persiaWeatherGod: Supposedly it won't fail22:29
WeatherGodor even crashes?22:29
* persia looks for the relevant rant22:29
macothen it unlocks22:29
WeatherGodlovely22:29
persiascreensaver is architected not to be able to crash22:29
macoi have on quite a few occasions unlocked my screen by going into a tty and kill -9'ing the screensaver22:30
persiaxscreensaver almost really can't ever crash22:30
* WeatherGod headdesk22:30
macoi use killall on kscreenlocker pretty often since kscreenlocker often rejects correct passwords22:30
persia(well, an individual screensaver will crash, but that just drops back to the controlling process which either dispatches another one, reloads the crashing one, or does a blank screen, depending on config22:30
persiagnome-screensaver uses more libraries, so might be a bit more vulnerable.22:30
persiaRight.  See http://live.gnome.org/GnomeScreensaver/FrequentlyAskedQuestions#Have_you_read_and_understood_http:.2BAC8ALw-www.jwz.org.2BAC8-xscreensaver.2BAC8-toolkits.html.3F22:31
WeatherGodpersonally, I would program it to stop the screen saver (if one is on)... and take control of all X display... making them black22:32
WeatherGodthen only display the dialog when needed22:32
persiaAnyway, I'm unsure of the right place for the bug.  It sounds like a problem with the master window.  Either it's compiz not respecting the application's request for a full-screen top-level window and grab of *all* XInput events, or it's gnome-screensaver failing to make the call in a failsafe way.22:32
persiaWeatherGod: IT's stacked.22:32
persiaSo it takes control of the display and makes it black.22:32
persiaAnd then it runs (as an embedded process with trapped crashes) the screensaver as yet another window over the blocking controlling window.22:33
WeatherGodah, I see...22:33
persiaThis way if the actual screensaver display code crashes the underlying desktop isn't (supposed to be) exposed.22:33
WeatherGodI was getting a bit mixed up in my thinking22:33
persiaBut clearly there's some issue with the interaction there that means that jwz's rant applies.22:33
hggdhbut persia is right, anyway -- this is proably not a screensaver issue but an X one (somewhere)22:34
persiahggdh: No.22:34
persiaIt is *definitely* a bug in one of: gnome-screensaver or compiz.22:35
hggdhyou state compiz due to the transparency?22:35
persiaThere's a small chance it might be a bug with X, but that would be a protocol-level bug, which sort of thing tends to be glaringly obvious in lots of ways.22:35
persiaI don't know if compiz entirely follows the normal manner of window managers22:36
hggdhoh beauty. My PuTTY download is going at 56 bytes per second22:36
persiaSo I can't rule out that it might be permitting transparency of the full-screen gnome-screensaver window that's supposed to hide the screen.22:36
WeatherGodinteresting thought22:37
WeatherGodhowever, how did the dialogue box get behind the terminals?22:37
persiaBut it could also be an issue with gnome-screensaver having some bug in an underlying library somewhere (although I'm more inclined to suspect compiz given the typical paranoia of screensaver developers)22:38
persiaWeather Window Manager sorting issue?22:38
persiaAppearance of the windows is supposed to be controlled by the window manager22:38
persiaFull screen applications still respect that, but are supposed to be given the full screen.22:38
persiaGoing full screen and then grabbing all XInput Events *should* mean that it's impossible to access the screensaver.22:39
persias/screensaver/window manager/22:39
persiaNow, if one were to implement a window manager such that it grabbed the full screen and drew a GL environment there22:39
persiaAnd grabbed all the XInput events to pass to the virtual windows in this GL environment22:40
persiaand provided a workaround to let applications appear to be full screen and appear to grap input while still keeping them within the GL display, it might not work as expected.22:40
persiaBut I don't really know how compiz works: I'm just speculating about a design that would be able to circumvent gnome-screensaver.22:41
persiaI certainly hope that's not how compiz works.22:41
WeatherGodthe security people are a little exasperated about another "compiz breaking screensaver" issue22:42
WeatherGodhehe22:42
persiaIt happened before?22:43
hggdhweird is docky, shown apparently as having foreground22:43
WeatherGod"kees: is it for an older release?  there were similar bugs fixed in intrepid, IIRC"22:43
WeatherGodisn't docky supposed to do that?22:44
persiaYes, but it's not supposed to be able to override the screensaver :)22:44
WeatherGodkey word: *supposed*22:44
persiaIndeed.22:44
keesWeatherGod: namely: http://www.ubuntu.com/usn/usn-537-2 and http://www.ubuntu.com/usn/usn-688-122:46
WeatherGodlastly, before I leave for the day... I have noticed some bug reports for bug day seems to have already been dealt with by Pedro or Neil Perry, but was not closed on the hug day list22:47
WeatherGodshould I do something about that, or what?22:47
persiaUgh.  With the way those are written, compiz does appear to be architected in a way at least potentially similar to that I outlined above :(22:47
WeatherGodok, gotta run... probably will be on later tonight22:53
chrisccoulsoncompiz contains a hack to unredirect the screensaver window unconditionally on NVIDIA hardware. i wonder if that should just be extended so that it's unredirected unconditionally for everybody22:54
chrisccoulsonit would probably stop things like that happening22:54
persiachrisccoulson: I think there's a *very* strong possibility that there should be such a hack.22:55
persiaThe difficulty then lies in identifying when a given process is a screensaver.22:55
chrisccoulsonpersia - i will discuss this with Amaranth22:55
chrisccoulsonidentifying the screensaver window is easy, as it sets WM_NAME22:55
chrisccoulsonthe hack was implemented to work around a specific bug in the nvidia driver, but it might be beneficial to just unredirect the screensaver for everybody22:56
persiachrisccoulson: So, if I have a program called slkdfj, is it a screen saver?22:56
persiaI think it would be beneficial, because the screensaver tries to do an unconditional grab on a top-level full-screen window to be secure.  Any way around that is a security issue.22:57
persia(and it's likely that the compiz code paths are less well audited than any screensaver codepath)22:57
chrisccoulsonpersia - sorry, i had to disappear23:11
chrisccoulsonthe current patch in compiz identifies any window with WM_NAME=gnome-screensaver23:11
chrisccoulsonthat is set in GDK when the window is created, based on the string returned from g_get_application_name()23:12
chrisccoulsonbut applications can override that23:12
persiachrisccoulson: That's probably sufficient, as compiz mostly only gets used for GNOME.23:12
* persia thinks23:12
chrisccoulsonit might be beneficial for screensaver windows to identify themselves by setting a property on the window, which screensaver developers could agree to between themselves23:13
chrisccoulsonrather than needing to identify every possible screensaver by their name23:13
persiaI can see an alternate DoS attack using that hack, but I think the risk of needing to reboot is less than the risk of exposing information.23:13
persiaThat's a nifty idea, but not something that likely can be done in the short-term, as it requires lots of people to agree.23:14
* chrisccoulson wonders what happens if gnome-screensaver calls gdk_window_set_override_redirect()23:15
chrisccoulsoni don't know if compiz will then unredirect it23:15
persiaI think a real solution needs to sort out the architectural issues.23:16
persiaIf compiz is grabbing the entire display and mitigating everything, it ought take responsibility for locking.23:16
chrisccoulsonyeah, possibly23:17
persiaMind you, it might not be so well audited, but I think trying to apply workarounds is a recipe for falling behind.23:17
chrisccoulsonwe've had quite a few screensaver issues this cycle23:17
persiaIt doesn't really need screensaver code: it could just run the screensaver as an embedded process.23:17
chrisccoulsonone of them being a crash when entering your password incorrectly 5 times23:17
persiawhich means that any password works if tried 6 times?23:18
chrisccoulsonpersia - it didn't crash every time, but i could reproduce it23:18
chrisccoulsonbut it's fixed now anyway:)23:18
persiaDid you happen to compare the behaviour with metacity vs. the behaviour with compiz?23:18
chrisccoulsonfor the crash?23:19
persiaYeah.23:19
chrisccoulsonthe crash wasn't related to the window manager. it was a race between the lock dialog process and the main gnome-screensaver daemon23:19
persiaUm, that shouldn't be able to happen because the lock dialog is an embedded process of the main gnome-screensaver.23:20
persiaOr else my understanding of gnome-screensaver is completely wrong.23:20
chrisccoulsonthe lock dialog process is a completely separate process. gnome-screensaver reparents the lock dialog drawable in to the main window with XEMBED23:21
chrisccoulsonthe crash was triggered because gnome-screensaver tried to create a pixmap derived from the lock dialog drawable, which had just been destroyed because the lock dialog process exitted23:21
chrisccoulsonand that triggered an X error23:21
persiaUgh.23:22
persiaGiven that bug, I'm less sure of the response to jwz's rant I pointed to earlier.23:23
chrisccoulsonwhich one was that? (i've not looked at the whole scrollback)23:23
persiahttp://live.gnome.org/GnomeScreensaver/FrequentlyAskedQuestions#Have_you_read_and_understood_http:.2BAC8ALw-www.jwz.org.2BAC8-xscreensaver.2BAC8-toolkits.html.3F23:24
chrisccoulsonyeah, we actually handled the issue in gnome-screensaver, by adding some synchronization between the 2 processes to avoid the race23:25
persiawhich isn't ever supposed to happen :)23:26
chrisccoulsonbut it's actually been fixed also in GTK now, by not creating pixmaps derived from foreign windows in the code path where the bug occurred23:26
persia"... This way there is no transfer of grabs to cause a race condition. " :)23:26
chrisccoulsonyeah, i slightly disagree with the idea that running things in separate processes eliminates race conditions :)23:27
chrisccoulsonbut it does mean that the main gnome-screensaver daemon doesn't use much GTK really23:28
persiaWhich is actually a good thing, just because GTK is 1) complex and 2) subject to GTK extensions23:28
persia(mind you, these are *good* things for non-screensavers)23:29
chrisccoulsonit is. i find GTK issues quite hard to track down ;)23:29
chrisccoulsonlike the screensaver crashes23:29
persiaIndeed.  I like to think I'm fairly good with stacktraces, but the GTK ones nearly always baffle me.23:30
chrisccoulsonyeah, me too. but in the case of X errors, xtrace makes it a bit easier :)23:30
persiaYep :)23:30
chrisccoulsonit's often obvious why the error occurred without trying to interpret the stacktrace23:31

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!