#1101171 libqt6gui6: Segfault in QAccessibleTableInterface::cellAt

Package:
libqt6gui6
Source:
libqt6gui6
Description:
Qt 6 GUI module
Submitter:
Patrick ZAJDA
Date:
2025-04-16 10:57:02 UTC
Severity:
normal
Tags:
#1101171#5
Date:
2024-09-13 18:40:31 UTC
From:
To:
Dear Maintainer,

In some QT applications using tables E.G. TeamTalk, when using Orca the app crashes because of [1].
[1]: https://bugreports.qt.io/browse/QTBUG-125954

Patch exists for this bug, but it looks it is not part of the version of QT Debian provides.

Could it be possible to have this patch ported to Debian? It cause a serious issue for screen reader users.

Best regards,

Patrick Zajda

- -- System Information:
Debian Release: 12.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-25-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libqt5gui5 depends on:
ii  fontconfig                        2.14.1-4
ii  libc6                             2.36-9+deb12u8
ii  libdrm2                           2.4.114-1+b1
ii  libegl1                           1.6.0-1
ii  libfontconfig1                    2.14.1-4
ii  libfreetype6                      2.12.1+dfsg-5+deb12u3
ii  libgbm1                           22.3.6-1+deb12u1
ii  libgcc-s1                         12.2.0-14
ii  libgl1                            1.6.0-1
ii  libglib2.0-0                      2.74.6-2+deb12u3
ii  libharfbuzz0b                     6.0.0+dfsg-3
ii  libice6                           2:1.0.10-1
ii  libinput10                        1.22.1-1
ii  libjpeg62-turbo                   1:2.1.5-2
ii  libmd4c0                          0.4.8-1
ii  libmtdev1                         1.1.6-1
ii  libpng16-16                       1.6.39-2
ii  libqt5core5a [qtbase-abi-5-15-8]  5.15.8+dfsg-11+deb12u2
ii  libqt5dbus5                       5.15.8+dfsg-11+deb12u2
ii  libqt5network5                    5.15.8+dfsg-11+deb12u2
ii  libsm6                            2:1.2.3-1
ii  libstdc++6                        12.2.0-14
ii  libudev1                          252.30-1~deb12u2
ii  libx11-6                          2:1.8.4-2+deb12u2
ii  libx11-xcb1                       2:1.8.4-2+deb12u2
ii  libxcb-glx0                       1.15-1
ii  libxcb-icccm4                     0.4.1-1.1
ii  libxcb-image0                     0.4.0-2
ii  libxcb-keysyms1                   0.4.0-1+b2
ii  libxcb-randr0                     1.15-1
ii  libxcb-render-util0               0.3.9-1+b1
ii  libxcb-render0                    1.15-1
ii  libxcb-shape0                     1.15-1
ii  libxcb-shm0                       1.15-1
ii  libxcb-sync1                      1.15-1
ii  libxcb-xfixes0                    1.15-1
ii  libxcb-xinerama0                  1.15-1
ii  libxcb-xinput0                    1.15-1
ii  libxcb-xkb1                       1.15-1
ii  libxcb1                           1.15-1
ii  libxkbcommon-x11-0                1.5.0-1
ii  libxkbcommon0                     1.5.0-1
ii  libxrender1                       1:0.9.10-1.1
ii  zlib1g                            1:1.2.13.dfsg-1

Versions of packages libqt5gui5 recommends:
ii  libqt5svg5             5.15.8-3
ii  qt5-gtk-platformtheme  5.15.8+dfsg-11+deb12u2
ii  qtwayland5             5.15.8-2

Versions of packages libqt5gui5 suggests:
pn  qgnomeplatform-qt5         <none>
ii  qt5-image-formats-plugins  5.15.8-2

- -- no debconf information
-----BEGIN PGP SIGNATURE-----
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=0ipD
-----END PGP SIGNATURE-----

#1101171#10
Date:
2025-02-05 15:22:31 UTC
From:
To:
Hi,

There is exactly the same bug in the version of QT6 provided in Debian
Bookworm, which is really critical for assistive technology.
Could it be possible to backport the patch to Bookworm?

Best regards,

#1101171#17
Date:
2025-03-22 00:06:26 UTC
From:
To:
Hello,

The attached patch for QT5 fixes the bug on Bookworm.
I tested successfully with TeamTalk V5.17, more precisely with the
server list which is a table and crashes without this patch.
To test, I applied the patch as it is then built qtbase-opensource-src.
Then I installed patched version of libqt5gui5 and libqt5widget5, which
fixed the issue, no more crash.

I haven't got the patch for QT6.
Someone reported me the version of QT6 in testing has the fix.

Hop this helps,

#1101171#22
Date:
2025-03-22 17:04:42 UTC
From:
To:
Hi,

This second attached patch fixes the crash on QT6, tested on bookworm
with version 6.4.2+dfsg-10.
I found this patch on the issue page in the commits to fix the issue for
different versions.

Best regards,

#1101171#29
Date:
2025-03-24 08:45:18 UTC
From:
To:
Hi Patrick!

Qt 6 is a separate source package, so I am cloning this bug.

I will take care of the Qt 5 stable update.

#1101171#44
Date:
2025-04-16 10:46:12 UTC
From:
To:
Hi,

Is there any probability to have this patch backported to the QT6
version provided in Bookworm?

As a reminder, I tested it without issue and this bug causes a crash
when using accessibility tool I.E. assistive technology like Orca.

Fortunately this is now fixed in QT5, thanks! but it still occurs in QT6
and patch is now provided, from an official source.

Best regards,