Occur Segmentation Fault with homescreen API tap_shortcut, showWindow verb

Description

Two verb take different actions, but the basic routines are similar.
Segmentation Fault caused by incorrect validation when passing unintended application_id.

Attempting to find the application id entered, but entering the else statement because if statement validation is incorrect. (hs-clientmanager.cpp:205)
ret variable is set to AFB_REQ_NOT_STARTED_APPLICATION as it enters the internal else statement.
After the handleRequest function, if statement validation is true (homescreen.cpp:163, 315), it enters the HS_AppInfo::getAppProperty function and returns "" (empty string) becase no value is found.
empty string passed as HS_AfmMainProxy::start function. (hs-proxy.cpp:173)
Assigning id passed to cdata->appid caused Segmentation Fault due to assign validation by basic_string operator=.

Environment

None

Activity

Walt Miner 
December 7, 2021 at 11:18 PM

Close for LL 12.0.1

Marius Vlad 
October 5, 2021 at 1:10 PM

Changes have landed into master.

Marius Vlad 
July 30, 2021 at 9:10 AM

I'll ask on Tuesday on our dev meeting, but highly unlikely. You could also join and ask yourself if you want: https://lists.automotivelinux.org/g/agl-dev-community/viewevent?repeatid=20413&eventid=1179597&calstart=2021-08-03

Bahyun Lee 
July 30, 2021 at 3:51 AM

 Testing in many ways have shown that segfault is not occurring. I think the patch is fine.

Also, please let me know when you're done talking about CVE. If it's impossible, the our company has to go through its submit process.

Marius Vlad 
July 29, 2021 at 3:37 PM

Well, do no see how this is a CVE related issue. any thoughts?

Fixed

Details

Assignee

Reporter

Labels

Hardware Platform(s) Affected

QEMU x86_64
Raspberry Pi 4

Affects versions

Priority

Created July 28, 2021 at 7:29 AM
Updated December 7, 2021 at 11:18 PM
Resolved October 5, 2021 at 1:10 PM