/srv/irclogs.ubuntu.com/2022/05/30/#ubuntu-security.txt

=== ChanServ changed the topic of #ubuntu-security to: Twitter: @ubuntu_sec || https://usn.ubuntu.com || https://wiki.ubuntu.com/SecurityTeam || https://wiki.ubuntu.com/Security/Features || Community: sbeattie
ItzSwirlzOk. So I just gdb'd gthumb to realize that all the commit did, which is already large in size.. just returns NULL basically.18:13
ItzSwirlzThen, when gthumb tries to set the cairo surface it asserts it; which fails18:13
ItzSwirlzI think this commitw ould fix it; but is it worth continuing trying to fix the CVE if its going to be this big18:13
ItzSwirlzbecause i know people dont like huge SRUs18:13
ItzSwirlzhttps://gitlab.gnome.org/GNOME/gthumb/-/commit/a17b1a903797495fe4de36645c0d4809f5aa74f218:14
ubottuCommit a17b1a9 in GNOME/gthumb "gth-image: allow to set null surfaces"18:14
ItzSwirlzthen theother stability commits go on with allowing the jpeg loader to try to allow for null surfaces18:14
ItzSwirlzis it worth continuing18:14
ItzSwirlzand loading the image threads... should I risk it18:15
ItzSwirlzThe error is gthumb: ../../../../src/cairo-surface.c:930: cairo_surface_reference: Assertion 'CAIRO_REFERENCE_COUNT_HAS_REFERENCE (&surface->ref_count)' failed.18:25
=== cpaelzer_ is now known as cpaelzer
ItzSwirlzdoing more digging in the stacktrace (first time with gdb, i'm sorry if im being annoying) - it might be this https://gitlab.gnome.org/GNOME/gthumb/-/commit/9729b8688d5d67c01deabea46ad469ec517250c519:42
ubottuCommit 9729b86 in GNOME/gthumb "Fixed crash in case of some malformed jpegs"19:42
ItzSwirlzi did try removing a line that freed some image value data but then that'd make other parts of the application/gtk drawing freak out19:43

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!