Re: [Bug-xnee] Buffer overflow error while replaying recorded file

[Henrik Sandklef]

Kp skrev:
> Hi,
> 
> I'm facing a reproducible buffer overflow error while replaying events
> recorded using xnee.
> 
> The recording takes place fine; there are no errors, and cnee exits
> cheerfully. Then, when I attempt to replay the file, a few events take
> place, and then there is a buffer overflow.
> 
> I appear to have noticed that the buffer overflow occurs only after any
> event that launches a new program. For example, if I move the mouse around
> and navigate my KDE main menu, those events are replayed fine. Cnee dies
> only after the an event that launches a new application.
> 
> Another odd side-effect I'm noticing is that my keyboard repeat stops
> working after cnee dies as seen below. Holding down any key for eternity
> produces just one keystroke. Oddly, though, if I'm running vmware, and the
> keyboard is captured by a guest virtual machine, keyboard repeats work fine
> within that virtual machine... - this seems to indicate that the hardware
> etc. is fine, but something is stopping X from receiving multiple
> keypresses
> when a key is held down...?
>

To make sure the same number of keypress are replayed as when recorded
Xnee disables autorepeat during replay and instead replays every single
recorded keypress. When exiting Xnee restores the keyboard state as when
before replaying. In this case Xnee crashes and can't restore the state.

To switch autorepeat back on, use 'xset'

  xset r on

> Please find below the command output when I run cnee to replay the
> events. I
> have attached the gnumeric2.xnl file to this mail, in case it helps.
> 
> Would be really grateful if someone could give me some answers. I've tried
> the same operation on a Fedora Core 4 machine as well as a newly installed
> CentOS 4 machine, with identical results. The Fedora machine runs KDE,
> while
> the CentOS runs Gnome. No difference in operation visible (I guess it
> wouldn't make a difference anyway... but too much info can't hurt :))


we will look into it asap

> Thanks a lot, in advance!
> 
> =================================================================
> COMMAND OUTPUT BEGINS
> =================================================================
> 
> address@hidden ~/Desktop $ cnee --replay -f ./gnumeric2.xnl
> *** buffer overflow detected ***: cnee terminated
> ======= Backtrace: =========
> /lib/libc.so.6(__chk_fail+0x41)[0xb9bbc5]
> /lib/libc.so.6[0xb9b452]
> cnee[0x8059d9f]
> cnee[0x8051d42]
> cnee(vfprintf+0x318a)[0x804c98e]
> cnee(vfprintf+0x2315)[0x804bb19]
> /lib/libc.so.6(__libc_start_main+0xdf)[0xad2d7f]
> cnee(vfprintf+0x3ad)[0x8049bb1]
> ======= Memory map: ========
> 009cd000-009d6000 r-xp 00000000 fd:00 4355412    /lib/libgcc_s-
> 4.0.2-20051126.so.1
> 009d6000-009d7000 rwxp 00009000 fd:00 4355412    /lib/libgcc_s-
> 4.0.2-20051126.so.1
> 00a9f000-00aa0000 r-xp 00a9f000 00:00 0          [vdso]
> 00aa0000-00aba000 r-xp 00000000 fd:00 4353899    /lib/ld-2.3.6.so
> 00aba000-00abb000 r-xp 00019000 fd:00 4353899    /lib/ld-2.3.6.so
> 00abb000-00abc000 rwxp 0001a000 fd:00 4353899    /lib/ld-2.3.6.so
> 00abe000-00be1000 r-xp 00000000 fd:00 4353901    /lib/libc-2.3.6.so
> 00be1000-00be3000 r-xp 00122000 fd:00 4353901    /lib/libc-2.3.6.so
> 00be3000-00be5000 rwxp 00124000 fd:00 4353901    /lib/libc-2.3.6.so
> 00be5000-00be7000 rwxp 00be5000 00:00 0
> 00c10000-00c12000 r-xp 00000000 fd:00 4353909    /lib/libdl-2.3.6.so
> 00c12000-00c13000 r-xp 00001000 fd:00 4353909    /lib/libdl-2.3.6.so
> 00c13000-00c14000 rwxp 00002000 fd:00 4353909    /lib/libdl-2.3.6.so
> 00c2b000-00cfb000 r-xp 00000000 fd:00 9249054
> /usr/X11R6/lib/libX11.so.6.2
> 00cfb000-00cff000 rwxp 000cf000 fd:00 9249054
> /usr/X11R6/lib/libX11.so.6.2
> 00d01000-00d0f000 r-xp 00000000 fd:00 9249056
> /usr/X11R6/lib/libXext.so.6.4
> 00d0f000-00d10000 rwxp 0000e000 fd:00 9249056
> /usr/X11R6/lib/libXext.so.6.4
> 07fb7000-07fbc000 r-xp 00000000 fd:00 9235748
> /usr/X11R6/lib/libXtst.so.6.1
> 07fbc000-07fbd000 rwxp 00004000 fd:00 9235748
> /usr/X11R6/lib/libXtst.so.6.1
> 08047000-0806c000 r-xp 00000000 fd:00 9242820    /usr/bin/cnee
> 0806c000-08076000 rw-p 00024000 fd:00 9242820    /usr/bin/cnee
> 08076000-08077000 rw-p 08076000 00:00 0
> 080fb000-0811d000 rw-p 080fb000 00:00 0          [heap]
> b7f59000-b7f5b000 rw-p b7f59000 00:00 0
> b7f7b000-b7f7d000 rw-p b7f7b000 00:00 0
> bff66000-bff7c000 rw-p bff66000 00:00 0          [stack]
> Aborted
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Bug-xnee mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/bug-xnee