Debian Bug report logs - #501691
the case of the missing 's'

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Joey Hess <joeyh@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: the case of the missing 's'

Date: Thu, 9 Oct 2008 12:05:40 -0400

Package: epiphany-browser
Version: 2.22.3-3
Severity: normal

My sister was unable to type lower-case 's' into web forms or epiphany's
url bar, after logging into her gmail account. Investigation showed:

- Typing 's' resulted in apparently nothing happening.
- Cut and paste of 's' worked.
- Entering upper-case 'S' worked.
- Logging out of gmail did not fix the problem.
- The problem affected other tabs than the one used to log into gmail.
- The problem did not show up when using firefox to log into the same
  gmail account.
- The problem did not manifest when using epiphany as another user on
  the same machine and logging into the same gmail account.
- Closing the affected epiphany window, while leaving another epiphany window
  open seemed to fix the problem (until the next time gmail was logged
  into).
- gmail has a link at the top "Older version". Clicking on this link immediatly
  fixed the problem. (Oddly, it continued to say "Older version".)
- In gmail's settings, "Keyboard shortcuts" were off. (Only checked
  after clicking on "Older version" tho.

My guess is it somehow involves gmails keyboard shortcuts, which are
documented to include a key binding for the 's' key, along with other
keys (that did not seem to be affected).

I don't understand how gmail's key bindings work, or how epiphany could
allow one web site to take over a key even once that website was closed.
This seems likely to involve some sort of security hole in epiphany.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages epiphany-browser depends on:
ii  epiphany-gecko                2.22.3-3   Intuitive GNOME web browser - Geck

epiphany-browser recommends no packages.

epiphany-browser suggests no packages.

Versions of packages epiphany-gecko depends on:
ii  dbus-x11               1.2.1-3           simple interprocess messaging syst
ii  epiphany-browser-data  2.22.3-3          Data files for the GNOME web brows
ii  gnome-icon-theme       2.22.0-1          GNOME Desktop icon theme
ii  iso-codes              3.3-1             ISO language, territory, currency,
ii  libart-2.0-2           2.3.20-2          Library of functions for 2D graphi
ii  libatk1.0-0            1.22.0-1          The ATK accessibility toolkit
ii  libavahi-client3       0.6.22-3          Avahi client library
ii  libavahi-common3       0.6.22-3          Avahi common library
ii  libavahi-gobject0      0.6.22-3          Avahi GObject library
ii  libbonobo2-0           2.22.0-1          Bonobo CORBA interfaces library
ii  libbonoboui2-0         2.22.0-1          The Bonobo UI library
ii  libc6                  2.7-13            GNU C Library: Shared libraries
ii  libcairo2              1.6.4-6           The Cairo 2D vector graphics libra
ii  libdbus-1-3            1.2.1-3           simple interprocess messaging syst
ii  libdbus-glib-1-2       0.76-1            simple interprocess messaging syst
ii  libenchant1c2a         1.4.2-3.1         a wrapper library for various spel
ii  libfontconfig1         2.6.0-1           generic font configuration library
ii  libfreetype6           2.3.7-2           FreeType 2 font engine, shared lib
ii  libgcc1                1:4.3.1-9         GCC support library
ii  libgconf2-4            2.22.0-1          GNOME configuration database syste
ii  libglade2-0            1:2.6.2-1         library to load .glade files at ru
ii  libglib2.0-0           2.16.5-1          The GLib library of C routines
ii  libgnome-desktop-2     2.22.3-2          Utility library for loading .deskt
ii  libgnome2-0            2.20.1.1-1        The GNOME 2 library - runtime file
ii  libgnomecanvas2-0      2.20.1.1-1        A powerful object-oriented display
ii  libgnomeui-0           2.20.1.1-1        The GNOME 2 libraries (User Interf
ii  libgnomevfs2-0         1:2.22.0-5        GNOME Virtual File System (runtime
ii  libgtk2.0-0            2.12.11-3         The GTK+ graphical user interface 
ii  libice6                2:1.0.4-1         X11 Inter-Client Exchange library
ii  libnotify1 [libnotify1 0.4.4-3           sends desktop notifications to a n
ii  libnspr4-0d            4.7.1-4           NetScape Portable Runtime Library
ii  liborbit2              1:2.14.13-0.1     libraries for ORBit2 - a CORBA ORB
ii  libpango1.0-0          1.20.5-2          Layout and rendering of internatio
ii  libpixman-1-0          0.10.0-2          pixel-manipulation library for X a
ii  libpng12-0             1.2.27-1          PNG library - runtime
ii  libpopt0               1.14-4            lib for parsing cmdline parameters
ii  libsm6                 2:1.0.3-2         X11 Session Management library
ii  libstartup-notificatio 0.9-1             library for program launch feedbac
ii  libstdc++6             4.3.1-9           The GNU Standard C++ Library v3
ii  libx11-6               2:1.1.5-1         X11 client-side library
ii  libxcb-render-util0    0.2.1+git1-1      utility libraries for X C Binding 
ii  libxcb-render0         1.1-1.1           X C Binding, render extension
ii  libxcb1                1.1-1.1           X C Binding
ii  libxcursor1            1:1.1.9-1         X cursor management library
ii  libxext6               2:1.0.4-1         X11 miscellaneous extension librar
ii  libxfixes3             1:4.0.3-2         X11 miscellaneous 'fixes' extensio
ii  libxi6                 2:1.1.3-1         X11 Input extension library
ii  libxinerama1           2:1.0.3-2         X11 Xinerama extension library
ii  libxml2                2.6.32.dfsg-4     GNOME XML library
ii  libxrandr2             2:1.2.3-1         X11 RandR extension library
ii  libxrender1            1:0.9.4-2         X Rendering Extension client libra
ii  libxslt1.1             1.1.24-2          XSLT processing library - runtime 
ii  python2.5              2.5.2-11          An interactive high-level object-o
ii  xulrunner-1.9          1.9.0.1-1         XUL + XPCOM application runner
ii  xulrunner-1.9-gnome-su 1.9.0.1-1         Support for GNOME in xulrunner app
ii  zlib1g                 1:1.2.3.3.dfsg-12 compression library - runtime

-- no debconf information

-- 
see shy jo

Message #10 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Joey Hess <joeyh@debian.org>, 501691@bugs.debian.org

Subject: Re: Bug#501691: the case of the missing 's'

Date: Thu, 9 Oct 2008 20:02:40 +0200

On Thu, Oct 09, 2008 at 12:05:40PM -0400, Joey Hess wrote:
> Package: epiphany-browser
> Version: 2.22.3-3
> Severity: normal
> 
> My sister was unable to type lower-case 's' into web forms or epiphany's
> url bar, after logging into her gmail account. Investigation showed:
> 
> - Typing 's' resulted in apparently nothing happening.
> - Cut and paste of 's' worked.
> - Entering upper-case 'S' worked.
> - Logging out of gmail did not fix the problem.
> - The problem affected other tabs than the one used to log into gmail.
> - The problem did not show up when using firefox to log into the same
>   gmail account.
> - The problem did not manifest when using epiphany as another user on
>   the same machine and logging into the same gmail account.
> - Closing the affected epiphany window, while leaving another epiphany window
>   open seemed to fix the problem (until the next time gmail was logged
>   into).
> - gmail has a link at the top "Older version". Clicking on this link immediatly
>   fixed the problem. (Oddly, it continued to say "Older version".)
> - In gmail's settings, "Keyboard shortcuts" were off. (Only checked
>   after clicking on "Older version" tho.
> 
> My guess is it somehow involves gmails keyboard shortcuts, which are
> documented to include a key binding for the 's' key, along with other
> keys (that did not seem to be affected).
> 
> I don't understand how gmail's key bindings work, or how epiphany could
> allow one web site to take over a key even once that website was closed.
> This seems likely to involve some sort of security hole in epiphany.

I'm using epiphany-gecko and the new gmail interface too, and there is
no such problem with the s key. Maybe you should try to take a look at X
key events...

Mike

Message #15 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Paul Wise <pabs@debian.org>

To: Joey Hess <joeyh@debian.org>

Cc: 501691@bugs.debian.org

Subject: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 02:53:08 +0800

[Message part 1 (text/plain, inline)]

You might have hit the GTK+/GNOME feature of redefining menu
accelerators by typing the new shortcut while hovering over the menu
item that you want to change the shortcut for.

What is the output of these?

gconftool --get /desktop/gnome/interface/can_change_accels
grep -v ';' ~/.gnome2/accels/epiphany-browser

-- 
bye,
pabs

http://wiki.debian.org/PaulWise

[signature.asc (application/pgp-signature, inline)]

Message #20 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Joey Hess <joeyh@debian.org>

To: Mike Hommey <mh@glandium.org>

Cc: 501691@bugs.debian.org

Subject: Re: Bug#501691: the case of the missing 's'

Date: Thu, 9 Oct 2008 15:09:48 -0400

[Message part 1 (text/plain, inline)]

Mike Hommey wrote:
> I'm using epiphany-gecko and the new gmail interface too, and there is
> no such problem with the s key. Maybe you should try to take a look at X
> key events...

I also have had no luck reproducing it with other accounts/machines, but
it was happening every time on that one machine.

The s key was certianly working ok in general; typing s into other
windows than epiphany worked.

-- 
see shy jo

[signature.asc (application/pgp-signature, inline)]

Message #25 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Joey Hess <joeyh@debian.org>

To: Paul Wise <pabs@debian.org>

Cc: 501691@bugs.debian.org

Subject: Re: epiphany: missing s caused by redefined keyboard accels?

Date: Thu, 9 Oct 2008 15:24:47 -0400

[Message part 1 (text/plain, inline)]

Paul Wise wrote:
> You might have hit the GTK+/GNOME feature of redefining menu
> accelerators by typing the new shortcut while hovering over the menu
> item that you want to change the shortcut for.

It's a thought, but:

- I can't seem teach epiphany to use an unmodified s as a menu shortcut when I
  try. The key has to be modified (ctrl+s or similar).
- Doesn't explain why the problem only appears once logged into gmail.
- Doesn't explain why disabling the "new" gmail interface fixed the
  issue. (Except, my sister now reports the issue is back..)
 
> What is the output of these?
> 
> gconftool --get /desktop/gnome/interface/can_change_accels

maggie@mouse:~$ DISPLAY=:20.0 gconftool --get /desktop/gnome/interface/can_change_accels
true

> grep -v ';' ~/.gnome2/accels/epiphany-browser

maggie@mouse:~$ grep -v ';' ~/.gnome2/accels/epiphany-browser
(gtk_accel_path "<Actions>/BA/Bmk44" "s")

Hmm, this last makes me think you may have been right after all?
What would BA/Bmk44 cause epiphany to do if it were triggered?

OTOH, why is the problem apparently not happening now, and what about my
points above?

PS, I tried putting the same line into my epiphany config, and cannot
reproduce the 's' problem.

PPS, I removed the line from my sister's epiphany config remotely.
It appears to have fixed the issue, at least for now..

-- 
see shy jo

[signature.asc (application/pgp-signature, inline)]

Message #30 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Paul Wise <pabs@debian.org>

To: Joey Hess <joeyh@debian.org>

Cc: 501691@bugs.debian.org

Subject: Re: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 10:53:09 +0800

[Message part 1 (text/plain, inline)]

On Thu, 2008-10-09 at 15:24 -0400, Joey Hess wrote:

> - I can't seem teach epiphany to use an unmodified s as a menu shortcut when I
>   try. The key has to be modified (ctrl+s or similar).

It worked for me after I set the gconf key below to true.

> - Doesn't explain why the problem only appears once logged into gmail.

I was guessing that wasn't related to the problem.

> - Doesn't explain why disabling the "new" gmail interface fixed the
>   issue. (Except, my sister now reports the issue is back..)

No idea about that.

> > What is the output of these?
> > 
> > gconftool --get /desktop/gnome/interface/can_change_accels
> 
> maggie@mouse:~$ DISPLAY=:20.0 gconftool --get /desktop/gnome/interface/can_change_accels
> true

I'd suggest turning this off, the default is now off (for new lenny
GNOME installs, but it used to be on, so this setting is probably a
leftover from those days.

gconftool --set --type bool /desktop/gnome/interface/can_change_accels false

> > grep -v ';' ~/.gnome2/accels/epiphany-browser
> 
> maggie@mouse:~$ grep -v ';' ~/.gnome2/accels/epiphany-browser
> (gtk_accel_path "<Actions>/BA/Bmk44" "s")
> 
> Hmm, this last makes me think you may have been right after all?

It appears so.

> What would BA/Bmk44 cause epiphany to do if it were triggered?

To be honest, I have no idea. You'd have to grep the source code or hunt
through the menus to find the right action.

> PS, I tried putting the same line into my epiphany config, and cannot
> reproduce the 's' problem.

You'd have to do it while epiphany is closed, not sure why it didn't
work, perhaps the versions are different?

> PPS, I removed the line from my sister's epiphany config remotely.
> It appears to have fixed the issue, at least for now..

Cool, perhaps the bug should be closed?

I filed a similar bug against galeon ages ago, which is why I had this
thought.

-- 
bye,
pabs

http://wiki.debian.org/PaulWise

[signature.asc (application/pgp-signature, inline)]

Message #35 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Joey Hess <joeyh@debian.org>

To: Paul Wise <pabs@debian.org>

Cc: 501691@bugs.debian.org

Subject: Re: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 00:52:12 -0400

[Message part 1 (text/plain, inline)]

Paul Wise wrote:
> I'd suggest turning this off, the default is now off (for new lenny
> GNOME installs, but it used to be on, so this setting is probably a
> leftover from those days.

FWIW, this install is less than 1 month old, installed with the most
recent d-i beta.
 
> > PS, I tried putting the same line into my epiphany config, and cannot
> > reproduce the 's' problem.
> 
> You'd have to do it while epiphany is closed, not sure why it didn't
> work, perhaps the versions are different?

Same version and of course I didn't start epiphany until the line was
added.

> > PPS, I removed the line from my sister's epiphany config remotely.
> > It appears to have fixed the issue, at least for now..
> 
> Cool, perhaps the bug should be closed?

I still don't understand how the binding for 's' got in there, or why it
only began eating the key once gmail was involved..

-- 
see shy jo

[signature.asc (application/pgp-signature, inline)]

Message #40 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Joey Hess <joeyh@debian.org>, 501691@bugs.debian.org

Cc: Paul Wise <pabs@debian.org>

Subject: Re: Bug#501691: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 07:28:28 +0200

On Thu, Oct 09, 2008 at 03:24:47PM -0400, Joey Hess wrote:
> - Doesn't explain why the problem only appears once logged into gmail.

My guess is that the action the shortcut is set to launch is only
enabled in few situations, gmail being one of them.

Mike

Message #45 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Paul Wise <pabs@debian.org>, 501691@bugs.debian.org

Cc: Joey Hess <joeyh@debian.org>

Subject: Re: Bug#501691: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 07:39:12 +0200

On Fri, Oct 10, 2008 at 10:53:09AM +0800, Paul Wise wrote:
> > What would BA/Bmk44 cause epiphany to do if it were triggered?
> 
> To be honest, I have no idea. You'd have to grep the source code or hunt
> through the menus to find the right action.

They are actions on bookmark items. I successfully was able to block a
key by setting such a shortcut. What is different in my case is that it
blocks the key on all sites...
Another interesting thing is that I was unable to set the shortcut
without a modifier key until I did set one with a modifier key. Seems
like a gtk issue, here...

Mike

Message #50 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Mike Hommey <mh@glandium.org>

To: Paul Wise <pabs@debian.org>, 501691@bugs.debian.org

Cc: Joey Hess <joeyh@debian.org>

Subject: Re: Bug#501691: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 07:41:48 +0200

On Fri, Oct 10, 2008 at 07:39:12AM +0200, Mike Hommey wrote:
> On Fri, Oct 10, 2008 at 10:53:09AM +0800, Paul Wise wrote:
> > > What would BA/Bmk44 cause epiphany to do if it were triggered?
> > 
> > To be honest, I have no idea. You'd have to grep the source code or hunt
> > through the menus to find the right action.
> 
> They are actions on bookmark items. I successfully was able to block a
> key by setting such a shortcut. What is different in my case is that it
> blocks the key on all sites...
> Another interesting thing is that I was unable to set the shortcut
> without a modifier key until I did set one with a modifier key. Seems
> like a gtk issue, here...

Oh, and the shortcuts on bookmarks do absolutely nothing here, except
preventing keys to properly work, so there would be a bug in epiphany,
too.

Mike

Message #55 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Joey Hess <joeyh@debian.org>

To: Mike Hommey <mh@glandium.org>

Cc: Paul Wise <pabs@debian.org>, 501691@bugs.debian.org

Subject: Re: Bug#501691: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 02:33:19 -0400

[Message part 1 (text/plain, inline)]

Mike Hommey wrote:
> They are actions on bookmark items. I successfully was able to block a
> key by setting such a shortcut. What is different in my case is that it
> blocks the key on all sites...
> Another interesting thing is that I was unable to set the shortcut
> without a modifier key until I did set one with a modifier key. Seems
> like a gtk issue, here...

So gtk is allowing a shortcut to be set w/o a modifier, but only if you
first set a shortcut with one? For the same menu item?

I'm pretty sure gtk is not intended to allow unmodified keys as
shortcuts, it'd be far too error-prone to allow that, certianly.

-- 
see shy jo

[signature.asc (application/pgp-signature, inline)]

Message #60 received at 501691@bugs.debian.org (full text, mbox, reply):

From: Josselin Mouette <joss@debian.org>

To: Joey Hess <joeyh@debian.org>, 501691@bugs.debian.org

Subject: Re: Bug#501691: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 10 Oct 2008 11:40:16 +0200

[Message part 1 (text/plain, inline)]

Le vendredi 10 octobre 2008 à 00:52 -0400, Joey Hess a écrit :
> Paul Wise wrote:
> > I'd suggest turning this off, the default is now off (for new lenny
> > GNOME installs, but it used to be on, so this setting is probably a
> > leftover from those days.
> 
> FWIW, this install is less than 1 month old, installed with the most
> recent d-i beta.

I’m pretty sure this setting has defaulted to false since before etch.
You need to enable it in gnome-appearance-properties.

> I still don't understand how the binding for 's' got in there

GTK+ does not forbid setting accels for keys without modifiers, so
that’s easily reproducible. 

> or why it only began eating the key once gmail was involved..

Accels with bookmarks don’t seem to work correctly at all, so this is
probably caused by an interaction with some obscure code to manage
keyboard in Gecko.

Cheers,
-- 
 .''`.
: :' :      We are debian.org. Lower your prices, surrender your code.
`. `'       We will add your hardware and software distinctiveness to
  `-        our own. Resistance is futile.

[signature.asc (application/pgp-signature, inline)]

Message #65 received at 501691-done@bugs.debian.org (full text, mbox, reply):

From: Diego Escalante Urrelo <dieguito@gmail.com>

To: 501691-done@bugs.debian.org

Subject: Re: Bug#501691: epiphany: missing s caused by redefined keyboard accels?

Date: Fri, 02 Jan 2009 15:21:21 -0500

Marking done given it's not a bug.

And I can confirm editable accels is not enabled in default debian/gnome
installs nowadays.

greetings

Send a report that this bug log contains spam.