[Pkg-utopia-maintainers] Bug#845166: nm-applet: SSID is parsed as markup on connect (special treatment of &, <, ...)

[Domen Puncer Kugler]

Package: network-manager-gnome
Version: 0.9.10.0-2
Severity: normal

Dear Maintainer,

Reproduction steps:
1. Run nm-applet from terminal.
2. Set up wifi AP with SSID that contains "&".
3. Connect to that wifi AP.
In terminal you will see error like:
(nm-applet:3753): Gtk-WARNING **: Failed to set text from markup due to error
parsing markup: Error on line 1: Entity did not end with a semicolon; most
likely you used an ampersand character without intending to start an entity —
escape ampersand as &

Variation
If you have wifi such as "<b>foo", you'll get the following error:
(nm-applet:3753): Gtk-WARNING **: Failed to set text from markup due to error
parsing markup: Unknown tag 'script' on line 3 char 86


Seaching the internet suggests this has to do with Pango interpreting markup.
While my test cases are benign, it is worrying that some more complex could be
generated (e.g. including a hyperlink, image; or just triggering some parsing
bug).

As SSIDs do not contain markup, it should just not be interpreted as such.


I have not tested later versions. Updating only network-manager-gnome from
testing on "stable" seems to be impossible.



-- System Information:
Debian Release: 8.6
  APT prefers testing
  APT policy: (1000, 'testing'), (1000, 'stable'), (900, 'stable'), (750, 'testing'), (500, 'stable-updates'), (50, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager-gnome depends on:
ii  dbus-x11                                     1.8.20-0+deb8u1
ii  dconf-gsettings-backend [gsettings-backend]  0.22.0-1
ii  gconf-service                                3.2.6-3
ii  gnome-icon-theme                             3.12.0-1
ii  libc6                                        2.19-18+deb8u6
ii  libcairo2                                    1.14.0-2.1+deb8u1
ii  libdbus-1-3                                  1.8.20-0+deb8u1
ii  libdbus-glib-1-2                             0.102-1
ii  libgconf-2-4                                 3.2.6-3
ii  libgdk-pixbuf2.0-0                           2.31.1-2+deb8u5
ii  libglib2.0-0                                 2.42.1-1+b1
ii  libgnome-keyring0                            3.12.0-1+b1
ii  libgtk-3-0                                   3.14.5-1+deb8u1
ii  libmm-glib0                                  1.4.0-1
ii  libnm-glib-vpn1                              0.9.10.0-7
ii  libnm-glib4                                  0.9.10.0-7
ii  libnm-gtk0                                   0.9.10.0-2
ii  libnm-util2                                  0.9.10.0-7
ii  libnotify4                                   0.7.6-2
ii  libpango-1.0-0                               1.36.8-3
ii  libpangocairo-1.0-0                          1.36.8-3
ii  libsecret-1-0                                0.18-1+b1
ii  network-manager                              0.9.10.0-7
ii  policykit-1-gnome                            0.105-2

Versions of packages network-manager-gnome recommends:
ii  dunst [notification-daemon]          1.1.0-1
ii  gnome-keyring                        3.14.0-1+b1
ii  iso-codes                            3.57-1
ii  mobile-broadband-provider-info       20140317-1
ii  notification-daemon                  0.7.6-2
ii  xfce4-notifyd [notification-daemon]  0.2.4-3

Versions of packages network-manager-gnome suggests:
pn  network-manager-openconnect-gnome  <none>
pn  network-manager-openvpn-gnome      <none>
pn  network-manager-pptp-gnome         <none>
pn  network-manager-vpnc-gnome         <none>

-- no debconf information