Bug 29440 - gwenview crashes, downgrading lib64exiv2_27 to lib64exiv2_27-0.27.3-1.2.mga8.x86_64 "fixes" the issue
Summary: gwenview crashes, downgrading lib64exiv2_27 to lib64exiv2_27-0.27.3-1.2.mga8....
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
: 29874 (view as bug list)
Depends on:
Blocks:
 
Reported: 2021-09-05 18:21 CEST by Thierry Houx
Modified: 2022-01-12 14:15 CET (History)
9 users (show)

See Also:
Source RPM: exiv2-0.27.3-1.3.mga8
CVE:
Status comment:


Attachments

Description Thierry Houx 2021-09-05 18:21:32 CEST
Description of problem:
Today, updates are proposed, and I install them.
After this installation, it's impossible to use gwenview.
Manual try with the console give those messages:
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type "image/x-nikon-nrw"
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type "image/x-samsung-srw"
terminate called after throwing an instance of 'std::out_of_range'
what(): basic_string::at: __n (which is 19) >= this->size() (which is 19)
Abandon (core dumped)

Version-Release number of selected component (if applicable):
Today the update concerned 24 packages:
photoqt-2.0-1.mga8.x86_64 dim. 05 sept. 2021 07:31:58
lib64gwenviewlib5-20.12.0-1.mga8.x86_64 dim. 05 sept. 2021 07:29:36
gwenview-handbook-20.12.0-1.mga8.noarch dim. 05 sept. 2021 07:29:36
gwenview-20.12.0-1.mga8.x86_64 dim. 05 sept. 2021 07:29:36
libstdc++-static-devel-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:03
gcc-plugins-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:03
lib64exiv2-devel-0.27.3-1.3.mga8.x86_64 dim. 05 sept. 2021 04:28:02
gcc-gfortran-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:02
gcc-c++-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:02
exiv2-0.27.3-1.3.mga8.x86_64 dim. 05 sept. 2021 04:28:02
libquadmath0-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:01
libgomp-devel-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:01
libgomp1-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:01
libgfortran5-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:01
lib64exiv2_27-0.27.3-1.3.mga8.x86_64 dim. 05 sept. 2021 04:28:01
gcc-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:01
libstdc++-python-devel-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:00
libstdc++-devel-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:00
libstdc++6-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:00
libgcc1-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:00
gcc-cpp-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:28:00
libquadmath-devel-10.3.0-2.mga8.x86_64 dim. 05 sept. 2021 04:27:59
cdialog-1.3-1.20160828.3.mga8.x86_64 sam. 04 sept. 2021 09:35:00
Xdialog-2.3.1-13.mga8.x86_64 sam. 04 sept. 2021 07:24:24

How reproducible:
Always.

Steps to Reproduce:
1. Install lib64exiv2_27-0.27.3-1.2.mga8.x86_64.rpm
2. try to use gwenview
3.

Temporary solution:
Reinstall precedent version of lib64exiv2_27

Note: I use a 4K monitor, 3840x2160
Comment 1 Marja Van Waes 2021-09-05 19:54:14 CEST
(In reply to Thierry Houx from comment #0)
> Description of problem:
> Today, updates are proposed, and I install them.
> After this installation, it's impossible to use gwenview.
<snip>
> 
> Version-Release number of selected component (if applicable):
> Today the update concerned 24 packages:
<snip>
> lib64exiv2-devel-0.27.3-1.3.mga8.x86_64 dim. 05 sept. 2021 04:28:02
<snip>
> lib64exiv2_27-0.27.3-1.3.mga8.x86_64 dim. 05 sept. 2021 04:28:01
<snip>
> How reproducible:
> Always.
> 
> Steps to Reproduce:
> 1. Install lib64exiv2_27-0.27.3-1.2.mga8.x86_64.rpm

You just said you had installed lib64exiv2_27-0.27.3-1.3.mga8.x86_64 ;-)
> 2. try to use gwenview
> 3.
> 
> Temporary solution:
> Reinstall precedent version of lib64exiv2_27
> 
> Note: I use a 4K monitor, 3840x2160

Assigning to all packagers collectively, because there is no registered maintainer for this package, and CC'ing some submitters.

CC: (none) => dan, luis.daniel.lucio, marja11, mrambo, nicolas.salguero
Source RPM: lib64exiv2_27-0.27.3-1.2.mga8.x86_64.rpm => exiv2-0.27.3-1.3.mga8
Assignee: bugsquad => pkg-bugs
Summary: gwenview crash => gwenview crashes, downgrading lib64exiv2_27 to lib64exiv2_27-0.27.3-1.2.mga8.x86_64 "fixes" the issue

Comment 2 Dave Hodgins 2021-09-05 23:21:12 CEST
[dave@x3 ~]$ rpm -q -a|grep lib64exiv2_27 
lib64exiv2_27-0.27.3-1.3.mga8
[dave@x3 ~]$ gwenview
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type  "image/x-nikon-nrw"
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type  "image/x-samsung-srw"
ATTENTION: default value of option vblank_mode overridden by environment.

Other then the above messages, it works properly on my system.

Try renaming or deleting the files shown by ...
$ tree -ifa ~/.config|grep gwenview

CC: (none) => davidwhodgins

Comment 3 Thierry Houx 2021-09-06 06:09:42 CEST
(In reply to Dave Hodgins from comment #2)
> [dave@x3 ~]$ rpm -q -a|grep lib64exiv2_27 
> lib64exiv2_27-0.27.3-1.3.mga8
> [dave@x3 ~]$ gwenview
> org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type 
> "image/x-nikon-nrw"
> org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type 
> "image/x-samsung-srw"
> ATTENTION: default value of option vblank_mode overridden by environment.
> 
> Other then the above messages, it works properly on my system.
> 
> Try renaming or deleting the files shown by ...
> $ tree -ifa ~/.config|grep gwenview

I found one file with this command:
/home/thierry/.config/gwenviewrc
Deleted it
New try: same result,crash.
Comment 4 Thierry Houx 2021-09-06 07:17:06 CEST
Note: Is there others who use 4K monitor like me to test if that have influence?
Comment 5 Dan Fandrich 2021-09-06 07:35:32 CEST
If the problem is related to libexiv and it doesn't affect everyone, then it could be related to the input. Try starting gwenview on a set of images other than the default ones it tries to load at startup, e.g. "gwenview /tmp", so it attempts to load different (probably none, if given /tmp) images.
Comment 6 Dave Hodgins 2021-09-06 07:39:29 CEST
Assigning to Nicolas who implemented the latest security fixes.
Please reassign back to all packagers if you'd prefer not to handle this bug.

Theirry, if you can figure out which one it is, please see if it's suitable
for sharing.

Assignee: pkg-bugs => nicolas.salguero

Comment 7 Thierry Houx 2021-09-06 08:07:51 CEST
I continued my research. It seems that the snapshots made with my Lumix GX80 and GX9 caused the crash. You will find in the link below an example file
https://www.cjoint.com/data/KIgghlOa8Ic_-1000094.jpg
Comment 8 Dan Fandrich 2021-09-06 08:27:31 CEST
I'm able to reproduce a crash with the command "exiv2 -pa pr  KIgghlOa8Ic_-1000094.jpg" so it looks like a libexiv2 regression.
Comment 9 Nicolas Salguero 2021-09-06 10:06:26 CEST
I found this bug: https://bugs.launchpad.net/ubuntu/+source/exiv2/+bug/1941752
Comment 10 Thierry Houx 2021-09-06 10:22:33 CEST
(In reply to Nicolas Salguero from comment #9)
> I found this bug:
> https://bugs.launchpad.net/ubuntu/+source/exiv2/+bug/1941752

OK, I confirm that I use DarkTable for the development of my photos.
Comment 11 Nicolas Salguero 2021-09-06 10:52:25 CEST
Suggested advisory:
========================

The updated packages fix a regression caused by a patch for CVE-2021-37620.

References:
https://bugs.launchpad.net/ubuntu/+source/exiv2/+bug/1941752
https://bugs.mageia.org/show_bug.cgi?id=29440
========================

Updated packages in core/updates_testing:
========================
exiv2-0.27.3-1.4.mga8
exiv2-doc-0.27.3-1.4.mga8
lib(64)exiv2_27-0.27.3-1.4.mga8
lib(64)exiv2-devel-0.27.3-1.4.mga8

from SRPM:
exiv2-0.27.3-1.4.mga8.src.rpm

Status: NEW => ASSIGNED
Assignee: nicolas.salguero => qa-bugs

Comment 12 Dave Hodgins 2021-09-06 17:32:12 CEST
Confirmed fixed for that image with the updated exiv package and still working
with my Pictures directory. Validating the update.

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update
Whiteboard: (none) => MGA8-64-OK

Comment 13 Dan Fandrich 2021-09-06 18:41:34 CEST
Working for me, too, also on mga8 x86_64.
Comment 14 Thierry Houx 2021-09-07 10:36:03 CEST
It works fine now for me, I think this update validated.
Comment 15 Dave Hodgins 2021-09-07 17:03:27 CEST
Advisory committed to svn

Keywords: (none) => advisory

Comment 16 Jose Manuel López 2021-09-07 21:59:57 CEST
Hi, Gwenview don't works. It appears in konsole:

[jose@localhost ~]$ gwenview
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type  "image/x-nikon-nrw"
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type  "image/x-samsung-srw"
kf.service.services: KApplicationTrader: mimeType "x-scheme-handler/appstream" not found
kf.service.services: KApplicationTrader: mimeType "x-scheme-handler/appstream" not found
terminate called after throwing an instance of 'std::out_of_range'
  what():  basic_string::at: __n (which is 19) >= this->size() (which is 19)
Abortado (`core' generado)

I can't open any image


Greetings!!

CC: (none) => joselp

Comment 17 Dan Fandrich 2021-09-07 22:08:24 CEST
Jose: are you seeing the crash with the update in comment#11 installed?
Comment 18 sturmvogel 2021-09-08 10:53:14 CEST
The testing packages works fine with mga8 x86_64.
Comment 19 Mageia Robot 2021-09-08 11:24:55 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2021-0184.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED

Comment 20 David Walser 2022-01-12 14:15:27 CET
*** Bug 29874 has been marked as a duplicate of this bug. ***

CC: (none) => luigiwalser


Note You need to log in before you can comment on or make changes to this bug.