Your message dated Tue, 01 Nov 2011 11:39:56 +0100
with message-id <1320143996.16763.8.camel@server>
and subject line Re: libwebkit-1.0-2: makes DNS query for every mouse movement
has caused the Debian Bug report #578019,
regarding libwebkit-1.0-2: makes DNS query for every mouse movement
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
578019: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578019
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libwebkit-1.0-2
Version: 1.2.0-1
Severity: important
Webkit seems to make a DNS query for every mouse movement event that it receives
from the browser window. (This happens with both Epiphany and Midori, so I
assume
that the problem is in Webkit.)
This is easy to reproduce; run the following command (as root):
tcpdump -n -i eth0 port 53
(use appropriate network interface for remote DNS server)
Then load any random website (say, www.debian.org) into a browser window, and
simply
move the mouse pointer around in that window, without clicking on anything.
This will
generate a continuous stream of hundreds of DNS queries, of the following form:
21:54:13.616734 IP client.address.net.55545 > dns.server.net.53: 47984+ A? .
(17)
21:54:13.616870 IP client.address.net.55545 > dns.server.net.53: 21375+ AAAA? .
(17)
21:54:13.637479 IP dns.server.net.53 > client.address.net.55545: 47984 0/1/0
(92)
21:54:13.638427 IP dns.server.net.53 > client.address.net.55545: 21375 0/1/0
(92)
21:54:13.657687 IP client.address.net.40289 > dns.server.net.53: 53754+ A? .
(17)
21:54:13.657824 IP client.address.net.40289 > dns.server.net.53: 43656+ AAAA? .
(17)
21:54:13.678386 IP dns.server.net.53 > client.address.net.40289: 53754 0/1/0
(92)
21:54:13.678841 IP dns.server.net.53 > client.address.net.40289: 43656 0/1/0
(92)
21:54:13.688747 IP client.address.net.34724 > dns.server.net.53: 52909+ A? .
(17)
21:54:13.688878 IP client.address.net.34724 > dns.server.net.53: 19941+ AAAA? .
(17)
21:54:13.709435 IP dns.server.net.53 > client.address.net.34724: 52909 0/1/0
(92)
21:54:13.710367 IP dns.server.net.53 > client.address.net.34724: 19941 0/1/0
(92)
(IP addresses replaced with appropriate hostnames)
Presumably, even with a local DNS server, tracing calls to the DNS resolver
library
would show the same phenomenon.
I have to say that I find this behaviour appalling. It seems to be a security
issue
all by itself, and is probably a symptom of even bigger problems.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-3-686 (SMP w/1 CPU core)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libwebkit-1.0-2 depends on:
ii libatk1.0-0 1.30.0-1 The ATK accessibility toolkit
ii libc6 2.10.2-6 Embedded GNU C Library: Shared lib
ii libcairo2 1.8.10-4 The Cairo 2D vector graphics libra
ii libenchant1c2a 1.4.2-3.3 a wrapper library for various spel
ii libfontconfig1 2.8.0-2 generic font configuration library
ii libfreetype6 2.3.11-1 FreeType 2 font engine, shared lib
ii libgail18 2.20.0-2 GNOME Accessibility Implementation
ii libgcc1 1:4.4.2-9 GCC support library
ii libglib2.0-0 2.24.0-1 The GLib library of C routines
ii libgstreamer-plugins-base0. 0.10.28-1 GStreamer libraries from the "base
ii libgstreamer0.10-0 0.10.28-1 Core GStreamer libraries and eleme
ii libgtk2.0-0 2.20.0-2 The GTK+ graphical user interface
ii libicu42 4.2.1-3 International Components for Unico
ii libjpeg62 6b-15 The Independent JPEG Group's JPEG
ii libpango1.0-0 1.28.0-1 Layout and rendering of internatio
ii libpng12-0 1.2.43-1 PNG library - runtime
ii libsoup2.4-1 2.30.0-1 an HTTP library implementation in
ii libsqlite3-0 3.6.23.1-1 SQLite 3 shared library
ii libstdc++6 4.4.2-9 The GNU Standard C++ Library v3
ii libwebkit-1.0-common 1.2.0-1 Web content engine library for Gtk
ii libxml2 2.7.7.dfsg-1 GNOME XML library
ii libxslt1.1 1.1.26-2 XSLT processing library - runtime
ii libxt6 1:1.0.7-1 X11 toolkit intrinsics library
libwebkit-1.0-2 recommends no packages.
libwebkit-1.0-2 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1.6.1-4
On Thu, 2010-04-15 at 23:40 -0700, Ian Bruce wrote:
> Webkit seems to make a DNS query for every mouse movement event that it
> receives
> from the browser window. (This happens with both Epiphany and Midori, so I
> assume
> that the problem is in Webkit.)
While I also experienced that problem with older versions of Epiphany, I
can no longer reproduce it with Epiphany 3.0.4-1 and WebKit 1.6.1-4, so
I'm closing this bug. Feel free to reopen if necessary.
Best regards
Alexander Kurtz
signature.asc
Description: This is a digitally signed message part
--- End Message ---
