[GUACAMOLE-1903] guacd 1.5.4/master double free issue

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.4
• Fix Version/s: 1.5.5
• Component/s: guacamole-server, guacd
• Assignee: Unassigned
• Reporter: Simon Vogl
• Created: 11/Jan/24 15:53
• Updated: 18/Jan/24 19:34
• Resolved: 18/Jan/24 19:34

Description

Hi all,

we have a running 1.4 installation that serves vnc connections (only). I am trying to upgrade to a recent code basis as we want to add some features (alt-f4 etc on the OSD).

I installed client and server versions 1.5.4 on a test machine and it works only for some of our client boxes (ones in our office,p.ex.) but guacd dies for other connections (at a remote site behind a firewall) with a 'double free' error. Guacd seemingly dies when cursor movements happen on the web client, and I saw it happen consistently when the mouse enters / leaves the rendered remote display in the browser window.

I ran guacd with the valgrind drd tool

valgrind --tool=drd --trace-fork-join=yes /usr/local/sbin/guacd-1.5.4a -f -L trace -b 127.0.0.1 -l 4822 -p /tmp/guacd.pid

and captured the state in the attachmed drd.log when guacd died away.