bugGnash - The GNU Flash player - Bugs: bug #36401, SWF6: ChristianChat.com and other...

 
 

bug #36401: SWF6: ChristianChat.com and other Flash Chat applications not functional

Submitter:  Luke <gaming4jc>
Submitted:  Fri 04 May 2012 11:36:40 PM UTC
   
 
Category:  release 0.8.10 Severity:  3 - Normal
Release:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Sun 11 Aug 2013 09:32:30 PM UTC, comment #7: 

$ wget http://web.archive.org/web/*/http://christianchat.com/* -O- |grep swf

Attached http://christianchat.com/cc20130402a.swf which seems the most recent one

(file #28812)

 Gabriele Giacone <gg0>
Group Member
Wed 10 Jul 2013 02:59:51 PM UTC, comment #6: 

I think this should be a regular bug until have assurance the report segfault can be attributed to Gnash.

 Bastiaan Jacques <bjacques>
Group Member
Tue 09 Jul 2013 09:29:01 PM UTC, comment #5: 

The SWF from this report is no longer available (http://christianchat.com/cc20120312b.swf). Does anyone have a copy? If so, please attach it.

 Bastiaan Jacques <bjacques>
Group Member
Sat 06 Jul 2013 04:42:24 AM UTC, comment #4: 

I am no longer getting a segfault, that was related to lightspark. I am however still getting the original bug which you are mentioning "Stop scripts" prompt when visiting the page.

So at least this is no longer a security issue. :)

 Luke <gaming4jc>
Fri 20 Jul 2012 10:57:41 AM UTC, comment #3: 

8394:1] 1821 ERROR: Undefined GetUrl2 URL on stack, skipping
8394:1] 3028 ERROR: get URL: target background is not a sprite
8394:3] 3853 ERROR: HTTP response 404 from URL http://christianchat.com/voicechatpics/privatechatpop.jpg?777

Then enters a loop which triggers a "stop scripts?" popup.

So, no segfault for me, with the launcher.
Luke: what segfaulted ? Maybe the browser ?

 Sandro Santilli <strk>
Group Member
Fri 20 Jul 2012 10:07:59 AM UTC, comment #2: 

Url is http://christianchat.com/ homepage.
Attached launcher.

(lightspark bug https://bugs.launchpad.net/lightspark/+bug/957929)

(file #26229)

 Gabriele Giacone <gg0>
Group Member
Fri 20 Jul 2012 08:44:55 AM UTC, comment #1: 

Can you give the exact URL of the website triggering the error ?


tagging this ticket as "Security" severity due to the segfault (unconfirmed)

 Sandro Santilli <strk>
Group Member
Fri 04 May 2012 11:36:40 PM UTC, original submission:  

This is re-post from downstream Lightspark bug #97123814.
"The file is SWF version 6, you manage to get it to load the initial booting sequence followed by glitching and then crashing of the plugin. If you run the swf by itself (not using browser plugin) it catches a segfault.

Attached is debug log of the browser plugin which at least loads part of the GUI."
You may see the debug here -
https://launchpadlibrarian.net/97123814/2
Test case is easy, just visit ChristianChat.com.


Luke <gaming4jc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #28812:  cc20130402a.swf added by gg0 (174KiB - application/x-shockwave-flash)
file #26229:  gnash-debug-TXzZ5D.sh added by gg0 (726B - application/sh)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bjacques (Posted a comment)
  • -email is unavailable- added by gg0 (Updated the item)
  • -email is unavailable- added by strk (Posted a comment)
  • -email is unavailable- added by gaming4jc (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2013-08-11 gg0 Attached File- Added cc20130402a.swf, #28812
    2013-07-10 bjacques Severity6 - Security 3 - Normal
    2012-07-20 gg0 Attached File- Added gnash-debug-TXzZ5D.sh, #26229
    2012-07-20 strk Severity3 - Normal 6 - Security

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-54b4.
    Corresponding source code