Skip to content

gdbusconnection: Don't deliver signals if the sender doesn't match

Philip Withnall requested to merge GNOME/Security/glib:main into main

Otherwise a malicious connection on a shared bus, especially the system bus, could trick GDBus clients into processing signals sent by the malicious connection as though they had come from the real owner of a well-known service name.

Resolves: #3268 (closed)

Merge request reports