[GUACAMOLE-1902] SIGSEGV in __guac_common_surface_touch_rect for telnet and SSH

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Duplicate
• Affects Version/s: 1.5.4
• Component/s: SSH, Telnet
• Environment: OS: SLES 12.5 ; ; Versions of libraries used during compilation of guacd: ; ; * libtelnet: 0.23 ; * libssh2: 1.11.0 ; * freerdp: 2.11.1 ; * openssl: 1.1.1w ; * LibVNCServer: 0.9.14
• Assignee: Unassigned
• Reporter: Libor Svehlak
• Created: 09/Jan/24 10:11
• Updated: 15/Jan/24 11:19
• Resolved: 12/Jan/24 17:55

Description

After update from version 1.5.3 to 1.5.4 we are facing with core dumps when using Telnet or SSH:

Program terminated with signal SIGSEGV, Segmentation fault.

In both cases function __guac_common_surface_touch_rect is causing the SIGSEGV.

Stack trace for telnet:

#0  0x00007f7988c5eef3 in __guac_common_surface_touch_rect () from /opt/guacd/lib/libguac-client-telnet.so
#1  0x00007f7988c60268 in guac_common_surface_draw () from /opt/guacd/lib/libguac-client-telnet.so
#2  0x00007f7988c35eda in __guac_terminal_set () from /opt/guacd/lib/libguac-terminal.so.0
#3  0x00007f7988c36f77 in __guac_terminal_display_flush_set () from /opt/guacd/lib/libguac-terminal.so.0
#4  0x00007f7988c36fdc in guac_terminal_display_flush () from /opt/guacd/lib/libguac-terminal.so.0
#5  0x00007f7988c3b358 in guac_terminal_flush () from /opt/guacd/lib/libguac-terminal.so.0
#6  0x00007f7988c39b07 in guac_terminal_render_frame () from /opt/guacd/lib/libguac-terminal.so.0
#7  0x00007f7988c390dc in guac_terminal_thread () from /opt/guacd/lib/libguac-terminal.so.0
#8  0x00007f798d44b71a in start_thread () from /lib64/libpthread.so.0
#9  0x00007f798cffe21d in clone () from /lib64/libc.so.6

Stack trace for SSH:

#0  0x00007f4b5c9831f0 in __guac_common_surface_touch_rect () from /opt/guacd/lib/libguac-client-ssh.so
#1  0x00007f4b5c984565 in guac_common_surface_draw () from /opt/guacd/lib/libguac-client-ssh.so
#2  0x00007f4b5c913eda in __guac_terminal_set () from /opt/guacd/lib/libguac-terminal.so.0
#3  0x00007f4b5c914f77 in __guac_terminal_display_flush_set () from /opt/guacd/lib/libguac-terminal.so.0
#4  0x00007f4b5c914fdc in guac_terminal_display_flush () from /opt/guacd/lib/libguac-terminal.so.0
#5  0x00007f4b5c919358 in guac_terminal_flush () from /opt/guacd/lib/libguac-terminal.so.0
#6  0x00007f4b5c917b07 in guac_terminal_render_frame () from /opt/guacd/lib/libguac-terminal.so.0
#7  0x00007f4b5c9170dc in guac_terminal_thread () from /opt/guacd/lib/libguac-terminal.so.0
#8  0x00007f4b6117371a in start_thread () from /lib64/libpthread.so.0
#9  0x00007f4b60d2621d in clone () from /lib64/libc.so.6

Issue Links

• duplicates: GUACAMOLE-1900 Resizing an RDP connection produces segfault