bugGnash - The GNU Flash player - Bugs: bug #36401, SWF6: ChristianChat.com and other...

 
 

bug #36401: SWF6: ChristianChat.com and other Flash Chat applications not functional

Submitted by:  Luke <gaming4jc>
Submitted on:  Fri 04 May 2012 11:36:40 PM UTC  
 
Category: release 0.8.10Severity: 3 - Normal
Release: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Sun 11 Aug 2013 09:32:30 PM UTC, comment #7:

$ wget http://web.archive.org/web//http://christianchat.com/* -O- |grep swf

Attached http://christianchat.com/cc20130402a.swf which seems the most recent one

(file #28812)

Gabriele Giacone <gg0>
Project Member
Wed 10 Jul 2013 02:59:51 PM UTC, comment #6:

I think this should be a regular bug until have assurance the report segfault can be attributed to Gnash.

Bastiaan Jacques <bjacques>
Project Member
Tue 09 Jul 2013 09:29:01 PM UTC, comment #5:

The SWF from this report is no longer available (http://christianchat.com/cc20120312b.swf). Does anyone have a copy? If so, please attach it.

Bastiaan Jacques <bjacques>
Project Member
Sat 06 Jul 2013 04:42:24 AM UTC, comment #4:

I am no longer getting a segfault, that was related to lightspark. I am however still getting the original bug which you are mentioning "Stop scripts" prompt when visiting the page.

So at least this is no longer a security issue. :)

Luke <gaming4jc>
Fri 20 Jul 2012 10:57:41 AM UTC, comment #3:

8394:1] 1821 ERROR: Undefined GetUrl2 URL on stack, skipping
8394:1] 3028 ERROR: get URL: target background is not a sprite
8394:3] 3853 ERROR: HTTP response 404 from URL http://christianchat.com/voicechatpics/privatechatpop.jpg?777

Then enters a loop which triggers a "stop scripts?" popup.

So, no segfault for me, with the launcher.
Luke: what segfaulted ? Maybe the browser ?

Sandro Santilli <strk>
Project Member
Fri 20 Jul 2012 10:07:59 AM UTC, comment #2:

Url is http://christianchat.com/ homepage.
Attached launcher.

(lightspark bug https://bugs.launchpad.net/lightspark/+bug/957929)

(file #26229)

Gabriele Giacone <gg0>
Project Member
Fri 20 Jul 2012 08:44:55 AM UTC, comment #1:

Can you give the exact URL of the website triggering the error ?

tagging this ticket as "Security" severity due to the segfault (unconfirmed)

Sandro Santilli <strk>
Project Member
Fri 04 May 2012 11:36:40 PM UTC, original submission:

This is re-post from downstream Lightspark bug #97123814.
"The file is SWF version 6, you manage to get it to load the initial booting sequence followed by glitching and then crashing of the plugin. If you run the swf by itself (not using browser plugin) it catches a segfault.

Attached is debug log of the browser plugin which at least loads part of the GUI."
You may see the debug here -
https://launchpadlibrarian.net/97123814/2
Test case is easy, just visit ChristianChat.com.

Luke <gaming4jc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #28812:  cc20130402a.swf added by gg0 (174kB - application/x-shockwave-flash)
file #26229:  gnash-debug-TXzZ5D.sh added by gg0 (726B - application/sh)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bjacques (Posted a comment)
  • -unavailable- added by gg0 (Updated the item)
  • -unavailable- added by strk (Posted a comment)
  • -unavailable- added by gaming4jc (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 11 Aug 2013 09:32:30 PM UTCgg0Attached File-=>Added cc20130402a.swf, #28812
    Wed 10 Jul 2013 02:59:51 PM UTCbjacquesSeverity6 - Security=>3 - Normal
    Fri 20 Jul 2012 10:07:59 AM UTCgg0Attached File-=>Added gnash-debug-TXzZ5D.sh, #26229
    Fri 20 Jul 2012 08:44:55 AM UTCstrkSeverity3 - Normal=>6 - Security

    Back to the top


    Powered by Savane 3.1-cleanup