bugGnash - The GNU Flash player - Bugs: bug #36401, SWF6: ChristianChat.com and other...

 
 

bug #36401: SWF6: ChristianChat.com and other Flash Chat applications not functional

Submitted by:  Luke <gaming4jc>
Submitted on:  Fri May 4 23:36:40 2012  
 
Category: release 0.8.10Severity: 3 - Normal
Release: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Sun Aug 11 21:32:30 2013, comment #7:

$ wget http://web.archive.org/web//http://christianchat.com/* -O- |grep swf

Attached http://christianchat.com/cc20130402a.swf which seems the most recent one

(file #28812)

Gabriele Giacone <gg0>
Project Member
Wed Jul 10 14:59:51 2013, comment #6:

I think this should be a regular bug until have assurance the report segfault can be attributed to Gnash.

Bastiaan Jacques <bjacques>
Project Member
Tue Jul 9 21:29:01 2013, comment #5:

The SWF from this report is no longer available (http://christianchat.com/cc20120312b.swf). Does anyone have a copy? If so, please attach it.

Bastiaan Jacques <bjacques>
Project Member
Sat Jul 6 04:42:24 2013, comment #4:

I am no longer getting a segfault, that was related to lightspark. I am however still getting the original bug which you are mentioning "Stop scripts" prompt when visiting the page.

So at least this is no longer a security issue. :)

Luke <gaming4jc>
Fri Jul 20 10:57:41 2012, comment #3:

8394:1] 1821 ERROR: Undefined GetUrl2 URL on stack, skipping
8394:1] 3028 ERROR: get URL: target background is not a sprite
8394:3] 3853 ERROR: HTTP response 404 from URL http://christianchat.com/voicechatpics/privatechatpop.jpg?777

Then enters a loop which triggers a "stop scripts?" popup.

So, no segfault for me, with the launcher.
Luke: what segfaulted ? Maybe the browser ?

Sandro Santilli <strk>
Project Member
Fri Jul 20 10:07:59 2012, comment #2:

Url is http://christianchat.com/ homepage.
Attached launcher.

(lightspark bug https://bugs.launchpad.net/lightspark/+bug/957929)

(file #26229)

Gabriele Giacone <gg0>
Project Member
Fri Jul 20 08:44:55 2012, comment #1:

Can you give the exact URL of the website triggering the error ?

tagging this ticket as "Security" severity due to the segfault (unconfirmed)

Sandro Santilli <strk>
Project Member
Fri May 4 23:36:40 2012, original submission:

This is re-post from downstream Lightspark bug #97123814.
"The file is SWF version 6, you manage to get it to load the initial booting sequence followed by glitching and then crashing of the plugin. If you run the swf by itself (not using browser plugin) it catches a segfault.

Attached is debug log of the browser plugin which at least loads part of the GUI."
You may see the debug here -
https://launchpadlibrarian.net/97123814/2
Test case is easy, just visit ChristianChat.com.

Luke <gaming4jc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #28812:  cc20130402a.swf added by gg0 (174kB - application/x-shockwave-flash)
file #26229:  gnash-debug-TXzZ5D.sh added by gg0 (726B - application/sh)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bjacques (Posted a comment)
  • -unavailable- added by gg0 (Updated the item)
  • -unavailable- added by strk (Posted a comment)
  • -unavailable- added by gaming4jc (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun Aug 11 21:32:30 2013gg0Attached File-=>Added cc20130402a.swf, #28812
    Wed Jul 10 14:59:51 2013bjacquesSeverity6 - Security=>3 - Normal
    Fri Jul 20 10:07:59 2012gg0Attached File-=>Added gnash-debug-TXzZ5D.sh, #26229
    Fri Jul 20 08:44:55 2012strkSeverity3 - Normal=>6 - Security

    Back to the top


    Powered by Savane 3.1-cleanup