Skip to content

gdbusconnection: Allow name owners to have the syntax of a well-known name

Simon McVittie requested to merge wip/smcv/issue3353 into main
  • gdbusconnection: Allow name owners to have the syntax of a well-known name

    In a D-Bus-Specification-compliant message bus, the owner of a well-known name is a unique name. However, ibus has its own small implementation of a message bus (src/ibusbus.c) in which org.freedesktop.IBus is special-cased to also have itself as its owner (like org.freedesktop.DBus on a standard message bus), and connects to that bus with the G_DBUS_CONNECTION_FLAGS_MESSAGE_BUS_CONNECTION flag. The ability to do this regressed when CVE-2024-34397 was fixed.

    Relax the checks to allow the owner of a well-known name to be any valid D-Bus name, even if it is not syntactically a unique name.

    Fixes: 683b14b9 "gdbus: Track name owners for signal subscriptions"
    Resolves: #3353 (closed)
    Bug-Debian: https://bugs.debian.org/1070730
    Bug-Debian: https://bugs.debian.org/1070736
    Bug-Debian: https://bugs.debian.org/1070743
    Bug-Debian: https://bugs.debian.org/1070745

Edited by Simon McVittie

Merge request reports

Loading