Bug 72979 - garbage / parts of previous session displayed on login screen after logout or reboot
Summary: garbage / parts of previous session displayed on login screen after logout or...
Status: NEW
Alias: None
Product: xorg
Classification: Unclassified
Component: Driver/nouveau (show other bugs)
Version: unspecified
Hardware: Other All
: medium critical
Assignee: Nouveau Project
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-12-22 21:47 UTC by Vincent Lefevre
Modified: 2014-09-08 09:08 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Vincent Lefevre 2013-12-22 21:47:45 UTC
After rebooting a machine using the lightdm display manager, garbage / parts of the user's previous session are displayed on the login screen, which is an important security problem, as anyone with physical access to the keyboard and screen of the machine can reboot it (no need to have an account for that). See Debian bugs:
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700235
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732854
Comment 1 Vincent Lefevre 2013-12-24 01:17:18 UTC
The problem can also occur after logging out. And parts of the user's previous session can appear on the whole background screen. That's a lot of data!
Comment 2 Vincent Lefevre 2014-01-18 21:21:20 UTC
Corrupt background also occurs after a cold boot (i.e. from power off), but in this case, there is no security problem of course: I just get a blank background, possibly with random black points.
Comment 3 Vincent Lefevre 2014-09-08 09:08:03 UTC
After the latest Debian/unstable upgrade and reboot, in particular with the xserver-xorg-video-nouveau package upgraded from 1:1.0.10-1+b2 to 1:1.0.11-1, it seems that I can no longer reproduce this problem. I've tried several times after logging out, and only once after the reboot due to the upgrade.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.