! Please note that this is a snapshot of our old Bugzilla server, which is read only since May 29, 2020. Please go to gitlab.xfce.org for our new server !
Chinese letters in window title crashes xfce4-panel
Status:
RESOLVED: MOVED
Product:
Xfce4-panel
Component:
Window Buttons

Comments

Description irrlicht 2014-01-09 21:58:38 CET
Using version 4.10.0git-5551513 when I visit a website like http://www.huobi.com/ with Firefox, xfce4-panel crashes probably due to the fact, that the window title (and thus the panel button) gets renamed to the title of the website containing chinese letters. Terminal output is:

xfce4-panel: cairo-scaled-font.c:459: _cairo_scaled_glyph_page_destroy: Assertion `!scaled_font->cache_frozen' failed.
Aborted (core dumped)

Anything more I can do to sort this out?
Comment 1 Sven Slootweg 2014-08-29 01:22:09 CEST
I can confirm that the same issue occurs for me in 4.10.1 on openSUSE 13.1 (x64). My version output:

    sven@linux-o82e:~> xfce4-panel -V
    xfce4-panel 4.10.1 (Xfce 4.10)
    
    Copyright (c) 2004-2011
        The Xfce development team. All rights reserved.

The error message:

    xfce4-panel: cairo-scaled-font.c:459: _cairo_scaled_glyph_page_destroy: Assertion `!scaled_font->cache_frozen' failed.

I'm not sure if this error message is related to the problem.

I can reproduce the issue by creating a webpage with the following characters in the page title:

    ¯\_(ツ)_/¯

When loading the page in either Firefox or Chrome, the window and button title is set to include those characters, and xfce4-panel will crash as a result.

This seems rather high-priority to me - it's effectively a remote DoS vulnerability, and may be indicative of a more serious issue.
Comment 2 Sven Slootweg 2014-08-29 01:28:29 CEST
For clarification; my xfce4-panel does NOT crash when visiting huobi.com, but it DOES crash in my particular test case: http://cryto.net/~joepie91/xfce4-crashtest.html
Comment 3 Sven Slootweg 2014-08-29 01:41:41 CEST
Further clarification: My architecture is x86_64, typo on my end.

Furthermore, somebody else is reporting to me that the issue does NOT occur for them; neither my test case, nor the Huobi case. They are using Arch Linux on x86 (32-bits), also with xfce4-panel 4.10.1 - according to them, the system hasn't been updated for several months, so it may be out of date in some other way.

Not sure whether this may be useful in any way, but the hash of their xfce4-panel binary is:

    $ md5sum /usr/bin/xfce4-panel 
    afd2ec11d62480765d4ebfdd1e7323df  /usr/bin/xfce4-panel

The hash of my binary is:

    sven@linux-o82e:~> md5sum /usr/bin/xfce4-panel 
    06769554e8678e9103f2e94fd886bef1  /usr/bin/xfce4-panel
Comment 4 kubriel 2014-12-01 09:34:33 CET
i can confirm here on arch linux 64bit
xfce4-panel and xfwm4 version 4.10.1

maybe not relevant, but not only crash. also window decorations dissapear, keyboard shortcuts not working.. wm unusable
Comment 5 heystax 2015-01-25 15:32:58 CET
You can mitigate the bug by unticking "Show button label" in the Windows Buttons preference.
Comment 6 Anthony 2015-02-19 23:44:55 CET
I can confirm this bug with a completely up2date Arch x64. It happened to me when visiting the following page containing the famous "tableflip" emoji (╯°□°)╯ ┻━┻: http://imgur.com/gallery/7oXkt5I

In reply to Sven's last comment:

Anthony@ponyville ~ $ md5sum /usr/bin/xfce4-panel 
4fa90327c0cba759a62298b5ecc465d2  /usr/bin/xfce4-panel
Anthony@ponyville ~ $ /usr/bin/xfce4-panel --version
xfce4-panel 4.10.1 (Xfce 4.10)
<further output omitted>
Comment 7 Anthony 2015-02-19 23:49:16 CET
Additionally:

Anthony@ponyville ~ $ pacman -Ss xfce4-panel
extra/xfce4-panel 4.10.1-2 (xfce4) [installed]

"sudo pacman --install ttf-droid" resolves the problem for me - however, a real fix is needed.
Comment 8 Sijmen Schoon 2015-06-06 19:09:25 CEST
I had the same issue on Arch Linux (4.0.4-3-ck) when opening an imgur post containing "香山" in the title (http://imgur.com/gallery/AvXnJ). Installing ttf-droid, as Anthony suggested, worked around the issue.

Versions:
firefox:     38.0.5
xfwm4:       4.12.3
xfdesktop:   4.12.2
xfce4-panel: 4.12.0

$ md5sum /usr/bin/xfce4-panel 
c9c4fb161900765d2ada7fd6c28fe110  /usr/bin/xfce4-panel
Comment 9 Maycne Sonahoz 2017-05-01 09:59:16 CEST
This issue is still occurring, also with Korean and emoji characters, even with ttf-droid and ttf-dejavu fonts installed. I needed to add noto fonts in order to prevent new crashes.

Manjaro 17.0.1 Gellivara
Kernel: x86_64 Linux 4.4.63-1-MANJARO
xfce4-panel 4.12.1 (Xfce 4.12)
Comment 10 haarp 2018-08-22 22:10:11 CEST
Bug 13765 and bug 14532 might be related or dupes.
Comment 11 Simon Steinbeiss editbugs 2018-12-06 00:55:36 CET
*** Bug 14532 has been marked as a duplicate of this bug. ***
Comment 12 Git Bot editbugs 2020-05-28 01:50:06 CEST
-- GitLab Migration Automatic Message --

This bug has been migrated to xfce.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.xfce.org/xfce/xfce4-panel/-/issues/83.

Please create an account or use an existing account on one of our supported OAuth providers. 

If you want to fork to submit patches and merge requests please continue reading here: https://docs.xfce.org/contribute/dev/git/start#gitlab_forks_and_merge_requests

Also feel free to reach out to us on the mailing list https://mail.xfce.org/mailman/listinfo/xfce4-dev

Bug #10616

Reported by:
irrlicht
Reported on: 2014-01-09
Last modified on: 2020-05-28
Duplicates (1):
  • 14532 Panel crashes on webpage visit

People

Assignee:
Nick Schermer
CC List:
10 users

Version

Version:
4.10.0

Attachments

Additional information