https://bugs.kde.org/show_bug.cgi?id=523572
Bug ID: 523572
Summary: kglobalacceld aborts (SIGABRT via libdbus) on
malformed setShortcutKeys QKeySequence argument,
killing the whole Wayland session
Classification: Frameworks and Libraries
Product: frameworks-kglobalaccel
Version First 6.24.0
Reported In:
Platform: Kubuntu
OS: Linux
Status: REPORTED
Severity: crash
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Target Milestone: ---
Created attachment 194652
--> https://bugs.kde.org/attachment.cgi?id=194652&action=edit
Full backtrace (all threads) from the reproduced kwin_wayland SIGABRT
On a Plasma 6 Wayland session, a D-Bus call to org.kde.kglobalaccel
setShortcutKeys with an unexpected QList<QKeySequence> argument aborts
kglobalacceld. On Wayland kglobalacceld runs inside kwin_wayland, so the entire
compositor/session dies (SIGABRT). 100% reproducible.
Reproduction (from a normal Wayland session):
gdbus call --session --dest org.kde.kglobalaccel --object-path /kglobalaccel
--method org.kde.KGlobalAccel.setShortcutKeys "['kwin','Walk Through
Windows','KWin','Walk Through Windows']" "[([150994945],), ([268435530],)]" 4
Result: kwin_wayland aborts (signal 6); all windows disappear and the
compositor restarts to an empty session.
Expected: a malformed/wrong-typed argument from a session-bus client should
return a D-Bus error reply, not abort the process. As-is, any client on the
session bus can crash the compositor.
Crashing thread (library symbols; full backtrace to be attached):
abort() <- _dbus_warn_check_failed (libdbus-1) <-
QDBusArgument::operator>>(int&) (libQt6DBus) <- operator>>(QDBusArgument
const&, QKeySequence&) (libKF6GlobalAccel) <- QDBusMetaType::demarshall
Environment: Kubuntu 26.04, Plasma 6.6.5, KGlobalAccel 6.24.0, Qt 6.10.2,
kernel 7.0.0-28-generic, Wayland session, NVIDIA proprietary driver.
--
You are receiving this mail because:
You are watching all bug changes.
