Confirming on stonking (26.10), and it is not limited to IBus engines: fcitx5 users are hit too. On GNOME Wayland, fcitx5's IBus frontend owns org.freedesktop.IBus, so gnome-shell's IBus client receives fcitx5's styled preedits through the same ibus_input_context_convert_text() path. So this affects every Chinese/Japanese/Korean user running fcitx5 on GNOME Wayland as well.
Here it produced ~2,850 "IBusAttrList has been finalized while it was still owned by gjs" warnings over three days, then a gnome-shell SIGSEGV that ended the Wayland session. Backtrace from the core: #6 g_type_check_instance_is_fundamentally_a () libgobject-2.0.so.0 #7 g_object_unref () libgobject-2.0.so.0 #8 ??? () libibus-1.0.so.5 #9 g_closure_invoke () libgobject-2.0.so.0 ... #13 g_signal_emit () libgobject-2.0.so.0 #14 ??? () libibus-1.0.so.5 #15 g_object_unref () libgobject-2.0.so.0 #16 ??? () libgjs.so.0 Versions: libibus-1.0-5 1.5.34-1ubuntu3, gnome-shell 51.0-2ubuntu3, gjs 1.90.0-1, fcitx5 5.1.22-1. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2170983 Title: [SRU] ibus: IBusAttrList use-after-free crashes gnome-shell on preedit with attributes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ibus/+bug/2170983/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
