On Sat, 17 Sep 2005 19:20:35 +0200
Bogus__aw Brandys <[EMAIL PROTECTED]> wrote:

> Lord Satan wrote:
> >>Btw the only changes to my system I can think of were some security
> >updates, mostly xorg but I cannot see any connection.
> > 
> > 
> > After a lot of trouble I have verified that the xorg security update is
> > the reason for lazarus stopping to work. I downgraded the xserver and
> > all its dependencies manually and now lazarus starts again. For the time
> > being I can keep the old version of xorg but I think this is a real
> > problem as I like to keep my system updated in regard to security
> > issues.
> > 
> > These are the details about the vulnerability from the Ubuntu security
> > notes:
> > 
> > A local privilege escalation vulnerability has been discovered in the
> > pixmap allocation handling of the X server. By allocating a huge
> > pixmap, a local user could trigger an integer overflow that resulted
> > in a memory allocation that was too small for the requested pixmap.
> > This resulted in a buffer overflow which could eventually be exploited
> > to execute arbitrary code with full root privileges.
> 
> I had discover that problem too. Any solution for today other then
> downgrading xorg (what's that?) ?

xorg: http://www.x.org/ - The code below your KDE/Gnome.

The problem is, that we don't know, how to debug this. gdb always ends up
with no stack.
We tried already putting some debugln around every pixbuf call, but it never
gets there.
gdk is so friendly to write at least BadAlloc. My guess was, that
gdk_x_error writes this message and thus by setting a breakpoint at it and
running the IDE with --sync should break. Again without success.

So, the only thing we know is: it crash.
Gladfully the gtk2 interface works.

Maybe someone has an idea?


Mattias

_________________________________________________________________
     To unsubscribe: mail [EMAIL PROTECTED] with
                "unsubscribe" as the Subject
   archives at http://www.lazarus.freepascal.org/mailarchives

Reply via email to