GUACAMOLE-2221: fix RDP busy-loop on transport failure#635
Merged
mike-jumper merged 1 commit intoapache:staging/1.6.1from Mar 31, 2026
Merged
Conversation
necouchman
requested changes
Mar 16, 2026
Contributor
necouchman
left a comment
There was a problem hiding this comment.
@pwgcz As discussed in the Jira ticket, I don't think we want to simply revert the previous patch, as that just reintroduces the issue that the commit resolves. You had suggested an alternate approach in the Jira issue - you're welcome to update this PR with that approach and we can see if that addresses the issue without (re)introducing other issues.
7366925 to
4444218
Compare
Contributor
Author
|
@necouchman Sorry for not responding sooner. I've updated the code now. |
mike-jumper
requested changes
Mar 29, 2026
Contributor
mike-jumper
left a comment
There was a problem hiding this comment.
Thanks for looking into this, @pwgcz! Please also:
812428f to
913560d
Compare
b3f0524 to
646f867
Compare
necouchman
reviewed
Mar 30, 2026
When an RDP connection hits a transport-level failure (for example, a certificate error), the inner event loop in rdp.c can spin at 100% CPU. This happens because rdp_guac_client_wait_for_events() does not check FreeRDP's error state, so it keeps returning success even after a transport failure has been recorded. As a result, the loop never observes the error and continues polling indefinitely. Fix: check freerdp_get_last_error() in rdp_guac_client_wait_for_events() and return -1 when an error is recorded. This satisfies the function's contract to report errors and ensures the loop exits promptly.
646f867 to
bf1b62d
Compare
necouchman
approved these changes
Mar 31, 2026
Contributor
necouchman
left a comment
There was a problem hiding this comment.
@mike-jumper Any other concerns?
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

When an RDP connection hits a transport-level
failure (for example, a certificate error), the
inner event loop in rdp.c can spin at 100% CPU.
This happens because the error state in
wait_result gets overwritten. When the issue
occurs, guac_rdp_handle_events() sets wait_result
to -1, but the loop doesn’t exit immediately. In
the next iteration, the while condition assigns
wait_result from rdp_guac_client_wait_for_events()
effectively clearing the error flag. As a result,
the loop never observes the transport failure and
continues polling, spinning the CPU.
Fix: break out of the loop immediately after
guac_rdp_handle_events() fails, so we stop
processing when FreeRDP reports a connection
error.