Your message dated Sun, 14 Sep 2025 11:13:49 +0200
with message-id <[email protected]>
and subject line Qt4 has been superseded by Qt5 and Qt6
has caused the Debian Bug report #647470,
regarding libqt4-script: please make it possible to run without execmem
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
647470: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=647470
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libqt4-script
Version: 4:4.7.3-8
Severity: normal
When kwin is run without execmem access it will SEGV. This makes things
difficult for people who want to restrict such access to make it more difficult
for their programs to be exploited.
#0 0x00007ffff65615f4 in QTJSC::ExecutablePool::systemAlloc (n=16384) at
../3rdparty/javascriptcore/JavaScriptCore/jit/ExecutableAllocatorPosix.cpp:49
#1 0x00007ffff65e9393 in ExecutablePool (this=<optimized out>, n=<optimized
out>) at ../3rdparty/javascriptcore/JavaScriptCore/jit/ExecutableAllocator.h:258
#2 create (n=<optimized out>) at
../3rdparty/javascriptcore/JavaScriptCore/jit/ExecutableAllocator.h:97
#3 ExecutableAllocator (this=0x7fffdddf29c8) at
../3rdparty/javascriptcore/JavaScriptCore/jit/ExecutableAllocator.h:150
#4 QTJSC::JSGlobalData::JSGlobalData (this=0x7fffdddf1800, isShared=<optimized
out>) at ../3rdparty/javascriptcore/JavaScriptCore/runtime/JSGlobalData.cpp:146
#5 0x00007ffff65e9b1c in QTJSC::JSGlobalData::create () at
../3rdparty/javascriptcore/JavaScriptCore/runtime/JSGlobalData.cpp:205
#6 0x00007ffff6686821 in QScriptEnginePrivate::QScriptEnginePrivate
(this=0x9309d0) at api/qscriptengine.cpp:973
#7 0x00007ffff6687786 in QScriptEngine::QScriptEngine (this=0x7fffffffe5c0) at
api/qscriptengine.cpp:1958
#8 0x00007ffff7b9566d in ?? () from
/usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#9 0x00007ffff7b054e5 in kdemain () from
/usr/lib/kde4/libkdeinit/libkdeinit4_kwin.so
#10 0x00007ffff7743ead in __libc_start_main () from
/lib/x86_64-linux-gnu/libc.so.6
#11 0x00000000004006b1 in _start ()
Above is a backtrace of a kwin SEGV which shows where the problem is.
Is JavaScript really required for KDE operation? If not can it be an option to
disable it? If it is required can kwin be made to fallback to interpreting the
code if it can't precompile it?
--- End Message ---
--- Begin Message ---
Version: 4:4.8.7+dfsg-20+rm
src:qt4-x11 was last released with Debian 10 (buster)
in July 2019 and has been removed from the Debian archive afterwards.
It has been superseded by newer versions.
See https://bugs.debian.org/953294 for details on the removal.
After regular security support for buster ended in August 2022 and LTS
support ended in June 2024, I'm closing the remaining bug reports now.
Andreas
--- End Message ---
