[Secure-testing-team] Bug#875609: gnome-shell: Crashes in 3.25 in g_type_check_instance_cast() called by shell_gtk_embed_window_created_cb()

[Julian Andres Klode]

Package: gnome-shell
Version: 3.25.91-4
Severity: grave
Tags: security
Control: forwarded -1 https://bugzilla.gnome.org/show_bug.cgi?id=787361

gnome-shell crashes in g_type_check_instance_cast() called by shell_gtk_embed_window_created_cb(),
this also happened today when the screen was locked, revealing all information on the screen.

I'm thus filing this bug to block a later unfixed version in unstable from migrating to testing.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (900, 'unstable'), (900, 'testing'), (500, 'unstable-debug'), (500, 'buildd-unstable'), (100, 'experimental'), (1, 'experimental-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnome-shell depends on:
ii  caribou                                      0.4.21-1+b1
ii  dconf-gsettings-backend [gsettings-backend]  0.26.0-2+b1
ii  evolution-data-server                        3.24.5-6
ii  gir1.2-accountsservice-1.0                   0.6.43-1
ii  gir1.2-atspi-2.0                             2.24.1-2
ii  gir1.2-caribou-1.0                           0.4.21-1+b1
ii  gir1.2-freedesktop                           1.53.2-4
ii  gir1.2-gcr-3                                 3.20.0-5.1
ii  gir1.2-gdesktopenums-3.0                     3.24.0-2
ii  gir1.2-gdm-1.0                               3.25.90.1-2
ii  gir1.2-geoclue-2.0                           2.4.7-1
ii  gir1.2-glib-2.0                              1.53.2-4
ii  gir1.2-gnomebluetooth-1.0                    3.25.91-1
ii  gir1.2-gnomedesktop-3.0                      3.25.92-1
ii  gir1.2-gtk-3.0                               3.22.20-1
ii  gir1.2-gweather-3.0                          3.25.92-1
ii  gir1.2-ibus-1.0                              1.5.14-3
ii  gir1.2-mutter-1                              3.25.91+20170902~ce515c5-1.1
ii  gir1.2-networkmanager-1.0                    1.8.2-1
ii  gir1.2-nmgtk-1.0                             1.8.2-1
ii  gir1.2-pango-1.0                             1.40.12-1
ii  gir1.2-polkit-1.0                            0.105-18
ii  gir1.2-rsvg-2.0                              2.40.18-1
ii  gir1.2-soup-2.4                              2.59.90.1-1
ii  gir1.2-upowerglib-1.0                        0.99.5-3
ii  gjs                                          1.49.92-1
ii  gnome-backgrounds                            3.25.4-1
ii  gnome-settings-daemon                        3.24.3-1
ii  gnome-shell-common                           3.25.91-4
ii  gsettings-desktop-schemas                    3.24.0-2
ii  libasound2                                   1.1.3-5
ii  libatk-bridge2.0-0                           2.24.1-1
ii  libatk1.0-0                                  2.24.0-1
ii  libc6                                        2.24-17
ii  libcairo2                                    1.14.10-1
ii  libcanberra-gtk3-0                           0.30-3
ii  libcanberra0                                 0.30-3
ii  libcroco3                                    0.6.12-1
ii  libdbus-glib-1-2                             0.108-2
ii  libecal-1.2-19                               3.24.5-6
ii  libedataserver-1.2-22                        3.24.5-6
ii  libgcr-base-3-1                              3.20.0-5.1
ii  libgdk-pixbuf2.0-0                           2.36.5-4
ii  libgirepository-1.0-1                        1.53.2-4
ii  libgjs0g [libgjs0-libmozjs-52-0]             1.49.92-1
ii  libglib2.0-0                                 2.53.7-1
ii  libglib2.0-bin                               2.53.7-1
ii  libgstreamer1.0-0                            1.12.2-1
ii  libgtk-3-0                                   3.22.20-1
ii  libical2                                     2.0.0-0.5+b1
ii  libjson-glib-1.0-0                           1.2.8-1
ii  libmutter-1-0                                3.25.91+20170902~ce515c5-1.1
ii  libnm-glib4                                  1.8.2-1
ii  libnm-util2                                  1.8.2-1
ii  libpango-1.0-0                               1.40.12-1
ii  libpangocairo-1.0-0                          1.40.12-1
ii  libpolkit-agent-1-0                          0.105-18
ii  libpolkit-gobject-1-0                        0.105-18
ii  libpulse-mainloop-glib0                      11.0-1
ii  libpulse0                                    11.0-1
ii  libsecret-1-0                                0.18.5-3.1
ii  libstartup-notification0                     0.12-4+b2
ii  libsystemd0                                  234-3
ii  libx11-6                                     2:1.6.4-3
ii  libxfixes3                                   1:5.0.3-1
ii  mutter                                       3.25.91+20170902~ce515c5-1.1
ii  python3                                      3.5.3-3

Versions of packages gnome-shell recommends:
ii  chrome-gnome-shell    9-1
ii  gdm3                  3.25.90.1-2
pn  gkbd-capplet          <none>
ii  gnome-control-center  1:3.24.3-1+b1
pn  gnome-user-docs       <none>
pn  iio-sensor-proxy      <none>
ii  switcheroo-control    1.1-1
ii  unzip                 6.0-21

Versions of packages gnome-shell suggests:
ii  gir1.2-telepathyglib-0.12   0.24.1-1.1
ii  gir1.2-telepathylogger-0.2  0.8.2-2

-- no debconf information

-- 
Debian Developer - deb.li/jak | jak-linux.org - free software dev
                  |  Ubuntu Core Developer |
When replying, only quote what is necessary, and write each reply
directly below the part(s) it pertains to ('inline').  Thank you.