Package: libqt5core5t64
Version: 5.15.15+dfsg-3
Severity: important
Control: affects -1 keepassxc-full

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear maintainer,

the latest upload for Qt5 makes my KeepassXC crash when I try to access 
credentials via browser extension. Downgrading Qt5 to 5.15.15+dfsg-2 
resolves the issue, which is why I am filing this bug against Qt5.

I'm the first to admit that the change looks really innocent, though. Maybe 
something else in the toolchain changed which caused Qt5 to miscompile?


GDB stack trace:

#0  __strlen_avx2 () at ../sysdeps/x86_64/multiarch/strlen-avx2.S:76
#1  0x00007ffff61e4de5 in QString::fromUtf8 (size=-1, str=0x8000f64947a8 
<error: Cannot access memory at address 0x8000f64947a8>) at 
../../include/QtCore/../../src/corelib/text/qstring.h:703
#2  containsTLDEntry (entry=..., match=match@entry=ExactMatch) at 
io/qtldurl.cpp:101
#3  0x00007ffff61e4eae in qIsEffectiveTLD (domain=...) at io/qtldurl.cpp:144
#4  0x00007ffff7c4e4b9 in qIsEffectiveTLD (domain=...) at 
../../include/QtCore/5.15.15/QtCore/private/../../../../../src/corelib/io/qtldurl_p.h:66
#5  QNetworkCookieJar::validateCookie (this=<optimized out>, cookie=..., 
url=...) at access/qnetworkcookiejar.cpp:372
#6  0x00007ffff7c4df39 in QNetworkCookieJar::setCookiesFromUrl 
(this=this@entry=0x7fffffffd1f0, cookieList=..., url=...) at 
access/qnetworkcookiejar.cpp:203
#7  0x000055555583d227 in UrlTools::getTopLevelDomainFromUrl 
(this=this@entry=0x555555a81cf0 <(anonymous 
namespace)::Q_QGS_s_urlTools::innerFunction()::holder>, url=...)
    at /usr/include/c++/14/bits/stl_algobase.h:401
#8  0x000055555583d6a5 in UrlTools::getBaseDomainFromUrl 
(this=this@entry=0x555555a81cf0 <(anonymous 
namespace)::Q_QGS_s_urlTools::innerFunction()::holder>, url=...)
    at ./src/core/UrlTools.cpp:66
#9  0x0000555555888ffb in BrowserService::handleURL 
(this=this@entry=0x555555a81f20 <(anonymous 
namespace)::Q_QGS_s_browserService::innerFunction()::holder>, entryUrl=..., 
siteUrl=...,
    formUrl=..., omitWwwSubdomain=omitWwwSubdomain@entry=false) at 
./src/browser/BrowserService.cpp:1489
#10 0x000055555588a52f in BrowserService::shouldIncludeEntry 
(this=this@entry=0x555555a81f20 <(anonymous 
namespace)::Q_QGS_s_browserService::innerFunction()::holder>,
    entry=entry@entry=0x555556ee6050, url=..., submitUrl=..., 
omitWwwSubdomain=omitWwwSubdomain@entry=false) at 
./src/browser/BrowserService.cpp:1350
#11 0x000055555588b4c8 in BrowserService::searchEntries 
(this=this@entry=0x555555a81f20 <(anonymous 
namespace)::Q_QGS_s_browserService::innerFunction()::holder>, db=..., 
siteUrl=...,
    formUrl=..., passkey=passkey@entry=false) at 
./src/browser/BrowserService.cpp:953
#12 0x000055555588e6fa in BrowserService::searchEntries 
(this=this@entry=0x555555a81f20 <(anonymous 
namespace)::Q_QGS_s_browserService::innerFunction()::holder>, siteUrl=..., 
formUrl=...,
    keyList=..., passkey=passkey@entry=false) at 
./src/browser/BrowserService.cpp:1011
#13 0x00005555558914c6 in BrowserService::findEntries (this=0x555555a81f20 
<(anonymous namespace)::Q_QGS_s_browserService::innerFunction()::holder>, 
entryParameters=..., keyList=...,
    entriesFound=entriesFound@entry=0x7fffffffd6ff) at 
./src/browser/BrowserService.cpp:340
#14 0x00005555558af47f in BrowserAction::handleGetLogins 
(this=this@entry=0x555555df2de0, json=..., action=...) at 
./src/browser/BrowserAction.cpp:253
#15 0x00005555558b0801 in BrowserAction::handleAction 
(this=this@entry=0x555555df2de0, socket=socket@entry=0x555557594280, json=...) 
at ./src/browser/BrowserAction.cpp:94
#16 0x00005555558b0d1f in BrowserAction::processClientMessage 
(this=0x555555df2de0, socket=socket@entry=0x555557594280, json=...) at 
./src/browser/BrowserAction.cpp:75
#17 0x000055555588c156 in BrowserService::processClientMessage 
(this=0x555555a81f20 <(anonymous 
namespace)::Q_QGS_s_browserService::innerFunction()::holder>, 
socket=0x555557594280,
    message=...) at ./src/browser/BrowserService.cpp:1753
#18 0x00007ffff63185be in QtPrivate::QSlotObjectBase::call 
(this=0x555555fd00b0, r=0x555555a81f20 <(anonymous 
namespace)::Q_QGS_s_browserService::innerFunction()::holder>, a=0x7fffffffdaf0)
    at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398
#19 doActivate<false> (sender=0x555555d20990, signal_index=3, 
argv=0x7fffffffdaf0) at kernel/qobject.cpp:3925
#20 0x00007ffff6310d87 in QMetaObject::activate 
(sender=sender@entry=0x555555d20990, m=m@entry=0x555555a78d80 
<BrowserHost::staticMetaObject>, local_signal_index=local_signal_index@entry=0,
    argv=argv@entry=0x7fffffffdaf0) at kernel/qobject.cpp:3985
#21 0x00005555558768a8 in BrowserHost::clientMessageReceived 
(this=this@entry=0x555555d20990, _t1=<optimized out>, _t1@entry=0x555557594280, 
_t2=...)
    at 
./obj-x86_64-linux-gnu-full/src/browser/keepassxcbrowser_autogen/EWIEGA46WW/moc_BrowserHost.cpp:152
#22 0x000055555587b766 in BrowserHost::readProxyMessage (this=0x555555d20990) 
at ./src/browser/BrowserHost.cpp:91
#23 0x00007ffff6318592 in doActivate<false> (sender=0x555557594280, 
signal_index=3, argv=0x7fffffffdc20) at kernel/qobject.cpp:3937
#24 0x00007ffff6318592 in doActivate<false> (sender=0x555555fa8350, 
signal_index=3, argv=0x7fffffffdcf0) at kernel/qobject.cpp:3937
#25 0x00007ffff6310d87 in QMetaObject::activate 
(sender=sender@entry=0x555555fa8350, m=m@entry=0x7ffff6587940 
<QIODevice::staticMetaObject>, local_signal_index=local_signal_index@entry=0,
    argv=argv@entry=0x0) at kernel/qobject.cpp:3985
#26 0x00007ffff6201ac4 in QIODevice::readyRead (this=this@entry=0x555555fa8350) 
at .moc/moc_qiodevice.cpp:190
#27 0x00007ffff7ce3a7f in QAbstractSocketPrivate::emitReadyRead 
(this=0x555555b40390, channel=0) at socket/qabstractsocket.cpp:1323
#28 QAbstractSocketPrivate::canReadNotification (this=0x555555b40390) at 
socket/qabstractsocket.cpp:748
#29 0x00007ffff7cf68b9 in QReadNotifier::event (this=<optimized out>, 
e=<optimized out>) at socket/qnativesocketengine.cpp:1274
#30 0x00007ffff7563052 in QApplicationPrivate::notify_helper (this=<optimized 
out>, receiver=0x5555575941c0, e=0x7fffffffde00) at kernel/qapplication.cpp:3640
#31 0x00007ffff62ddc98 in QCoreApplication::notifyInternal2 
(receiver=0x5555575941c0, event=0x7fffffffde00) at 
kernel/qcoreapplication.cpp:1064
#32 0x00007ffff62dde82 in QCoreApplication::sendEvent (receiver=<optimized 
out>, event=<optimized out>) at kernel/qcoreapplication.cpp:1462
#33 0x00007ffff633b76d in socketNotifierSourceDispatch (source=0x555555b664b0) 
at kernel/qeventdispatcher_glib.cpp:107
#34 0x00007ffff4d03d5f in g_main_dispatch 
(context=context@entry=0x7fffec000ed0) at ../../../glib/gmain.c:3361
#35 0x00007ffff4d05fd7 in g_main_context_dispatch_unlocked 
(context=0x7fffec000ed0) at ../../../glib/gmain.c:4212


- -- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.12-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libqt5network5t64 depends on:
ii  libc6                                2.40-6
ii  libgssapi-krb5-2                     1.21.3-4
ii  libqt5core5t64 [qtbase-abi-5-15-15]  5.15.15+dfsg-3
ii  libqt5dbus5t64                       5.15.15+dfsg-3
ii  libssl3t64                           3.4.0-2
ii  libstdc++6                           14.2.0-16
ii  zlib1g                               1:1.3.dfsg+really1.3.1-1+b1

libqt5network5t64 recommends no packages.

libqt5network5t64 suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEmwPruYMA35fCsSO/zIxr3RQD9MoFAmempeIACgkQzIxr3RQD
9MoeLw/+OngD8UnrD5/DE97BTKxplkJpNXuDbIqTfVUxgLd/dR5QTZG92V3ph3Ym
cTeIdg2XFWpQwVkvw20wxgVSfeEcDfEX2FbDxauUtZMB34ihqzlPvb6T96aqVQoM
kIQcolswgj+WP+nx+GVX9ih2Oet3MYn0B5Oad3LDqzjdDxDweDT7b7p26VGCFs7z
lCAgWZ0BXmnuicZdUK3GqxdFJc1BN9Zhs2c1aXeqDTV+g5gzo2sxs1WNRp9gP3qD
LrMRfxWGrWZkrQCDfk0agAr5Q2zrxhQoNH8w+DKbUtUhoDG/ubyywtMInaBxWG30
F1Y9xX8YBZ/Pfw9C1Al7qe6e5QdY964ZucQU3iLuwpBTeHsgoF+GT5K2TeWYBGBC
pa6vfUtyBbInaUf9XJIHehJyK7vl4i0KJhYJLT/bQUd/5lGW3ePuS1d5SAtQN8ca
KvywdLDPp7BXsMbKXeEUzFgwwjqqBdSCBzqeGMluMbj1P9KT7xxdeb8N28S61sKd
3jMi/6D2QvvP4D4JtPh82JOiScrK1qukKXVK/5LuuleeTGWNsGbgy4AQiC9iugmW
RrxJ1iAgqN3Z2STPxme8BGsiF9w0kGHSbDw1cy0TUbVBd2h3LulubeweIrDnYZIa
Amp5EfWHOU1S72K45PcR62dbyzF4IthHiHDB3EQJOaAEaDwZHws=
=2j+M
-----END PGP SIGNATURE-----

Reply via email to