Bug 28333 - Some zip on firefox are not open with the selected Ark app, but with "share with kdeconnect".
Summary: Some zip on firefox are not open with the selected Ark app, but with "share w...
Status: NEW
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: KDE maintainers
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 28788
  Show dependency treegraph
 
Reported: 2021-02-09 17:21 CET by Jybz
Modified: 2022-04-17 14:58 CEST (History)
4 users (show)

See Also:
Source RPM: kdeconnect-kde-20.12.0-1.mga8.src.rpm
CVE:
Status comment: Don't register /usr/bin/kdeconnect-handler with all file types


Attachments
Screenshot of the kdeconnect call (221.10 KB, image/png)
2021-02-09 17:24 CET, Jybz
Details
Edit File Type application/zip (112.32 KB, image/png)
2021-02-09 17:54 CET, Aurelien Oudelet
Details
Edit File Type image-png (124.30 KB, image/png)
2021-02-09 17:55 CET, Aurelien Oudelet
Details

Description Jybz 2021-02-09 17:21:08 CET
Hello !

Examples based on that page:
https://github.com/pxb1988/dex2jar/releases/tag/2.0


There are zip files, like this one:
https://github.com/pxb1988/dex2jar/archive/2.0.zip
when we select "open with : Ark", it opens with Ark.
(It seems stupid to write it, isn't it ?)
But, other zip file, like this one:
https://github.com/pxb1988/dex2jar/releases/download/2.0/dex-tools-2.0.zip
When we select "open with : Ark", it opens with `kdeconnect-handler --open %U`
(I copy past it from the plasma menu, under the `internet` menu.)

$ rpm -qa firefox
firefox-78.7.0-1.mga8

Tested on two different computers (mine and Auroud85 confirms)

Have a nice day !
Comment 1 Jybz 2021-02-09 17:24:59 CET
Created attachment 12323 [details]
Screenshot of the kdeconnect call

See a screenshot proving firefox calls kdeconnect-handler instead of ark.

In :
plasma-menu → internet → open on a kdeconnect device → [right clic] properties → application → supported files → application/octet-stream

Does it give any interested information ?
Comment 2 Aurelien Oudelet 2021-02-09 17:50:06 CET
M8 Plasma x86_64 from RC1 public CI installation.

I confirm bug with above link.
The https://github.com/pxb1988/dex2jar/releases/download/2.0/dex-tools-2.0.zip link is affected.

Workaround: Save on disk before open it. This always opens Ark.

That is interesting is that "Open on connected device via KDE Connect" is listed on many mime-type.
This should not occur.

Seems an error in mime/type association here.

CC: (none) => ouaurelien

Comment 3 Aurelien Oudelet 2021-02-09 17:54:08 CET
Created attachment 12324 [details]
Edit File Type application/zip

"Open on connected device via KDE Connect"

is available in "Open" properties. This should not occur. This leads to inconsistency and potentially bad bugs like this one.

This application should not be registered to "Open" neither file but available as a Service, in Share menu, or Action menu. Note that there is a Send to device available in Share submenu of Right click one.
Comment 4 Aurelien Oudelet 2021-02-09 17:55:56 CET
Created attachment 12325 [details]
Edit File Type image-png

Note the same for png image. This obvious app should not be here.

Upstream bug?
Comment 5 Aurelien Oudelet 2021-02-09 18:08:09 CET
In facts, it is in all file associations in

systemsettings5 => Personalization => Applications => File Associations

Every file types have an Entry "Open on connected device via KDE Connect" in Application Preference Order.
So, basically, all files can be "opened" with this Application to be send to a phone that has been registered with the current running Plasma system.

That's too much.

/usr/bin/kdeconnect-handler is owned by kdeconnect-kde

Assigning to KDE maintainers.

Source RPM: (none) => kdeconnect-kde-20.12.0-1.mga8.src.rpm
Status comment: (none) => Don't register /usr/bin/kdeconnect-handler with all file types

Aurelien Oudelet 2021-02-09 18:08:25 CET

Assignee: bugsquad => kde

Comment 6 Aurelien Oudelet 2021-02-09 18:11:25 CET
@Jybz,

Workaround for this bug: remove "Open on connected device via KDE Connect" in Application Preference Order for application/zip in

systemsettings5 => Personalization => Applications => File Associations

Firefox no longer switches silently to this app and still opens a file in Ark.

Better: always download and save to a directory before really Open a file/application/whatever.
Comment 7 Dave Hodgins 2021-02-09 23:23:03 CET
Also something is strange with the zip file
$ zipinfo 2.0.zip |head -n 5
Archive:  2.0.zip
Zip file size: 918893 bytes, number of entries: 492
drwx---     0.0 fat        0 bx stor 14-Sep-29 22:00 dex2jar-2.0/
-rw----     0.0 fat      156 tx defN 14-Sep-29 22:00 dex2jar-2.0/.hgignore
-rw----     0.0 fat     1475 tx defN 14-Sep-29 22:00 dex2jar-2.0/.hgtags

$ zipinfo dex-tools-2.0.zip |head -n 5
Archive:  dex-tools-2.0.zip
Zip file size: 2362460 bytes, number of entries: 34
?rwsrwsrwt  2.0 unx        0 b- stor 14-Oct-27 17:32 dex2jar-2.0/
?rwsrwsrwt  2.0 unx        0 b- stor 14-Oct-27 17:32 dex2jar-2.0/lib/
-rw-rw-r--  2.0 unx    78909 b- defN 14-Oct-27 17:31 dex2jar-2.0/lib/dex-translator-2.0.jar

Note the unknown file type for both directories, and suid/sgid bits set.

What impact that could have, I haven't looked into.

CC: (none) => davidwhodgins

Aurelien Oudelet 2021-04-16 13:20:43 CEST

Blocks: (none) => 28788

Comment 8 Jybz 2022-03-22 07:42:11 CET
Side effect?
This bug was reported with something else than firefox:

https://www.mageialinux-online.org/forum/topic-29724+libreoffice.php

Dirty workarround:
> su -c 'mv /usr/share/applications/org.kde.kdeconnect_open.desktop /usr/share/applications/org.kde.kdeconnect_open.desktop.bak'
Morgan Leijström 2022-03-22 09:25:21 CET

CC: (none) => fri

Comment 9 Nicolas Lécureuil 2022-04-17 14:58:35 CEST
done on cauldron.

I will later on mga8

CC: (none) => mageia


Note You need to log in before you can comment on or make changes to this bug.