Your message dated Tue, 22 Jun 2021 10:03:43 +0000
with message-id <[email protected]>
and subject line Bug#989934: fixed in flatpak 1.10.2-2
has caused the Debian Bug report #989934,
regarding flatpak-portal fd leak when apps run flatpak-spawn --env=...
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
989934: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989934
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: flatpak
Version: 1.8.5-1
Severity: important
Tags: upstream fixed-upstream
Control: found -1 1.2.5-0+deb10u2

The flatpak-portal service in flatpak >= 1.8.5-1 leaks a file descriptor
every time a Flatpak app launches a subsandbox (a separate container for
part of itself, perhaps with more restrictions or a different runtime
library stack) using flatpak-spawn --env=... or equivalent D-Bus calls.

Minimal reproducer: in one terminal run

    /usr/libexec/flatpak-portal -vr

and in another, run

    flatpak run --command=bash org.gnome.Weather -euxc \
    'while flatpak-spawn --env=FOO=bar sh -euxc "$1"; do :; done' \
    sh \
    'test "$FOO" = bar'

(org.gnome.Weather is just an example, it can be any app). Terminate
the flatpak run loop with Ctrl+C after a few seconds.

Ignore lines of output that say "F: ioctl(0, TIOCSCTTY, 0) failed:
Operation not permitted"; these are harmless.

Good result: in the flatpak-portal -vr output, you see the same --env-fd=
every time.

Bad result: the number after --env-fd= keeps going up.

The real-world impact is that if Flatpak apps launch enough subsandboxes,
the subsandbox interface will stop working for the rest of the login
session, causing other Flatpak apps to fail to work. Chromium is a notable
example of a Flatpak app that uses subsandboxes.

    smcv

--- End Message ---
--- Begin Message ---
Source: flatpak
Source-Version: 1.10.2-2
Done: Simon McVittie <[email protected]>

We believe that the bug you reported is fixed in the latest version of
flatpak, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon McVittie <[email protected]> (supplier of updated flatpak package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 22 Jun 2021 10:10:38 +0100
Source: flatpak
Architecture: source
Version: 1.10.2-2
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team 
<[email protected]>
Changed-By: Simon McVittie <[email protected]>
Closes: 989934 989935
Changes:
 flatpak (1.10.2-2) unstable; urgency=medium
 .
   * Backport changes from upstream git to fix regressions when apps invoke
     flatpak-spawn --env=... to launch a subsandbox.
     - d/p/Fix-several-memory-leaks.patch:
       Fix minor memory leaks so that subsequent backports apply cleanly
     - d/p/portal-Don-t-leak-fd-used-for-serialized-environment.patch:
       Don't leak a file descriptor each time flatpak-spawn --env=... is used
       (Closes: #989934)
     - d/p/portal-Use-a-GArray-to-store-fds.patch,
       d/p/portal-Remap-env-fd-into-child-process-s-fd-space.patch:
       When an app uses flatpak-spawn --env=... --forward-fd=..., ensure
       that the file descriptors do not collide, which could result in the
       subsandbox failing to launch or being launched with wrong environment
       variables. (Closes: #989935)
Checksums-Sha1:
 0e5451989746e54bcddd5263921a5c5174bc1348 3615 flatpak_1.10.2-2.dsc
 36682c9af5a6fc3fe9ba297bb89f5b4f801369ec 34628 flatpak_1.10.2-2.debian.tar.xz
 ad2175862120b759e590cfe944a216df6ae4680e 11447 
flatpak_1.10.2-2_source.buildinfo
Checksums-Sha256:
 76e3dbb9955eb98748964a2da210990491fbb94eb0429bfd6e7c49bd704aea57 3615 
flatpak_1.10.2-2.dsc
 653cac3e5263aca1dac11861881882298951579d417f3460e7f4e55a32c181e0 34628 
flatpak_1.10.2-2.debian.tar.xz
 668ac2be6c76d14106440a93869d71fddb82133df06f135c775fa6fba95e970d 11447 
flatpak_1.10.2-2_source.buildinfo
Files:
 8e5cc49f5dcf7427d5c86b919f2dc91e 3615 admin optional flatpak_1.10.2-2.dsc
 93b11ced3d9ae67a2442ea0d80939372 34628 admin optional 
flatpak_1.10.2-2.debian.tar.xz
 3b4bb73531131069b94bbd3ccc493399 11447 admin optional 
flatpak_1.10.2-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=8nn8
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers

Reply via email to