bugGnash - The GNU Flash player - Bugs: bug #18309, Specific SWF file causes gnash to...

 
 

bug #18309: Specific SWF file causes gnash to eat up >800MB memory and > 1.7GB swap

Submitter:  James Ausmus <ausmusj1>
Submitted:  Wed 15 Nov 2006 06:32:47 PM UTC
   
 
Category:  render-agg Severity:  4 - Important
Release:  None Status:  Fixed
Privacy:  Public Assigned to:  strk
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Sun 26 Nov 2006 10:35:45 PM UTC, comment #8: 

Remember to add virtual destructors to virtual classes!
Note that the compiler will suggest you that (if only AGG
code gave less warnings on its own...)

Sandro Santilli <strk>
Group Member
Sun 26 Nov 2006 10:48:49 AM UTC, comment #7: 

That comment refers to a performance issue and should not be related.

Does the movie eat immediately so much memory or does it become accumulated with each frame?

Can you try with a different renderer?

Udo Giacomozzi <udog>
Group Member
Mon 20 Nov 2006 07:15:31 PM UTC, comment #6: 

Found this comment in the TODO list, seems related to our problem:
 
 - Converted fill styles (for AGG) are recreated for each sub-shape, even if they never change for a shape. This should be
changed.

Udo, can you confirm this might be the problem ?

Sandro Santilli <strk>
Group Member
Thu 16 Nov 2006 07:54:58 PM UTC, comment #5: 

This flash ad also causes memory hogging:

/usr/bin/gnash -v -x 45666748 -j 728 -k 90 -u http://spe.atdmt.com/ds/AAAVENIKENRU/061017_holiplus06/holiplus06_728x90_low3_nike_running.swf?ver=1&clickTag1=http://ad.doubleclick.net/click%3Bh=v8/349f/3/0/%2a/w%3B55549295%3B0-0%3B0%3B14065696%3B3454-728/90%3B18885217/18903112/1%3B%3B%7Esscs%3D%3fhttp://clk.atdmt.com/go/wrdxdnru0290000711ave/direct;wi.728;hi.90;ai.17944729;ct.1/01&clickTag=http://ad.doubleclick.net/click%3Bh=v8/349f/3/0/%2a/w%3B55549295%3B0-0%3B0%3B14065696%3B3454-728/90%3B18885217/18903112/1%3B%3B%7Esscs%3D%3fhttp://clk.atdmt.com/go/wrdxdnru0290000711ave/direct;wi.728;hi.90;ai.17944729;ct.1/01 -U http://view.atdmt.com/AVE/iview/wrdxdnru0290000711ave/direct;wi.728;hi.90/01?click=http://ad.doubleclick.net/click%3Bh=v8/349f/3/0/%2a/w%3B55549295%3B0-0%3B0%3B14065696%3B3454-728/90%3B18885217/18903112/1%3B%3B%7Esscs%3D%3f -P base=http://spe.atdmt.com/ds/AAAVENIKENRU/061017_holiplus06/ -P height=90 -P loop=true -P pluginspace=http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash -P quality=high -P salign=LT -P src=http://spe.atdmt.com/ds/AAAVENIKENRU/061017_holiplus06/holiplus06_728x90_low3_nike_running.swf?ver=1&clickTag1=http://ad.doubleclick.net/click%3Bh=v8/349f/3/0/%2a/w%3B55549295%3B0-0%3B0%3B14065696%3B3454-728/90%3B18885217/18903112/1%3B%3B%7Esscs%3D%3fhttp://clk.atdmt.com/go/wrdxdnru0290000711ave/direct;wi.728;hi.90;ai.17944729;ct.1/01&clickTag=http://ad.doubleclick.net/click%3Bh=v8/349f/3/0/%2a/w%3B55549295%3B0-0%3B0%3B14065696%3B3454-728/90%3B18885217/18903112/1%3B%3B%7Esscs%3D%3fhttp://clk.atdmt.com/go/wrdxdnru0290000711ave/direct;wi.728;hi.90;ai.17944729;ct.1/01 -P type=application/x-shockwave-flash -P width=728 -P wmode=opaque -


Base SWF URL of http://spe.atdmt.com/ds/AAAVENIKENRU/061017_holiplus06/holiplus06_728x90_low3_nike_running.swf


James Ausmus <ausmusj1>
Thu 16 Nov 2006 06:15:25 PM UTC, comment #4: 

I believe I was using agg - here's my output from running gnash --help on the commandline - however, I did (after the incident) rebuild gnash from CVS to get the latest version, so I can't verify for sure that it was agg prior to the rebuild, but I didn't change any build options, so I'm betting that it was agg.

Build options cvs-20061115
   Target: x86_64-pc-linux-gnu
   Renderer: agg   GUI: gtk   Sound handler: gst   Decoder: none

James Ausmus <ausmusj1>
Thu 16 Nov 2006 08:19:24 AM UTC, comment #3: 

Tried with cairo backend and I don't get that huge eat-up, rather memory allocation seems rather stable (using top to see). It's around 13M.
What renderer were you using ? (can't use opengl from here)

Sandro Santilli <strk>
Group Member
Thu 16 Nov 2006 08:10:39 AM UTC, comment #2: 

attaching memory info obtained using valgrind.

Sandro Santilli <strk>
Group Member
Thu 16 Nov 2006 08:01:22 AM UTC, comment #1: 


Confirmed! It starts eating memory when the two batteries are one near the other, and float... The reduced url works as well:

http://spe.atdmt.com/ds/NMMRTUMISITP/mrs05084_elet_v2_300x250.swf

Sandro Santilli <strk>
Group Member
Wed 15 Nov 2006 06:32:47 PM UTC, original submission:  

This was from a Flash ad while browsing in Firefox - I'm not sure the exact URL that caused it, but here's the command-line that gnash was called with from the browser:

/usr/bin/gnash -r 3 -v -x 48844023 -j 300 -k 250 -u http://spe.atdmt.com/ds/NMMRTUMISITP/mrs05084_elet_v2_300x250.swf?ver=1&clickTag1=http%3A%2F%2Fadlog.com.com%2Fadlog%2Fe%2Fr%3D8035%26s%3D690049%26t%3D2006.11.15.17.59.32%26o%3D1001:1006:%26h%3Dcn%26p%3D2%26b%3D5%26l%3Den_US%26site%3D3%26pt%3D2100%26nd%3D1006%26pid%3D%26cid%3D6135137%26pp%3D200%26e%3D3%26rqid%3D00c18-ad-e24540F411FAD932E%26event%3D58%2Fhttp://clk.atdmt.com/go/cntnsitp0110000049mrt/direct;ai.14712860;ct.1/01&clickTag=http%3A%2F%2Fadlog.com.com%2Fadlog%2Fe%2Fr%3D8035%26s%3D690049%26t%3D2006.11.15.17.59.32%26o%3D1001:1006:%26h%3Dcn%26p%3D2%26b%3D5%26l%3Den_US%26site%3D3%26pt%3D2100%26nd%3D1006%26pid%3D%26cid%3D6135137%26pp%3D200%26e%3D3%26rqid%3D00c18-ad-e24540F411FAD932E%26event%3D58%2Fhttp://clk.atdmt.com/go/cntnsitp0110000049mrt/direct;ai.14712860;ct.1/01 -U http://view.atdmt.com/MRT/iview/cntnsitp0110000049mrt/direct/01/2006.11.15.17.59.32?click=http%3A%2F%2Fadlog.com.com%2Fadlog%2Fe%2Fr%3D8035%26s%3D690049%26t%3D2006.11.15.17.59.32%26o%3D1001:1006:%26h%3Dcn%26p%3D2%26b%3D5%26l%3Den_US%26site%3D3%26pt%3D2100%26nd%3D1006%26pid%3D%26cid%3D6135137%26pp%3D200%26e%3D3%26rqid%3D00c18-ad-e24540F411FAD932E%26event%3D58%2F -P base=http://spe.atdmt.com/ds/NMMRTUMISITP/ -P height=250 -P loop=true -P pluginspace=http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash -P quality=high -P salign=LT -P src=http://spe.atdmt.com/ds/NMMRTUMISITP/mrs05084_elet_v2_300x250.swf?ver=1&clickTag1=http%3A%2F%2Fadlog.com.com%2Fadlog%2Fe%2Fr%3D8035%26s%3D690049%26t%3D2006.11.15.17.59.32%26o%3D1001:1006:%26h%3Dcn%26p%3D2%26b%3D5%26l%3Den_US%26site%3D3%26pt%3D2100%26nd%3D1006%26pid%3D%26cid%3D6135137%26pp%3D200%26e%3D3%26rqid%3D00c18-ad-e24540F411FAD932E%26event%3D58%2Fhttp://clk.atdmt.com/go/cntnsitp0110000049mrt/direct;ai.14712860;ct.1/01&clickTag=http%3A%2F%2Fadlog.com.com%2Fadlog%2Fe%2Fr%3D8035%26s%3D690049%26t%3D2006.11.15.17.59.32%26o%3D1001:1006:%26h%3Dcn%26p%3D2%26b%3D5%26l%3Den_US%26site%3D3%26pt%3D2100%26nd%3D1006%26pid%3D%26cid%3D6135137%26pp%3D200%26e%3D3%26rqid%3D00c18-ad-e24540F411FAD932E%26event%3D58%2Fhttp://clk.atdmt.com/go/cntnsitp0110000049mrt/direct;ai.14712860;ct.1/01 -P type=application/x-shockwave-flash -P width=300 -P wmode=opaque -

I'm running Shockwave Flash 8.0 - Gnash cvs-20061107 on an AMD64 system.

I'm not sure how to recreate this, as it was a random ad in rotation on some web site (not even sure which website - had multiple tabs that I had just opened when the problem occurred, and several of the new tabs had Flash ads on them, so I don't know the exact culprit).

James Ausmus <ausmusj1>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #11285:  massif.3748.txt added by strk (13KiB - text/plain - text report (gtk/agg))
file #11284:  massif.3748.ps added by strk (149KiB - application/postscript - diagram of head memory (valgrind --tool=massif) - gtk/agg)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by strk (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 13 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2006-12-12 strk StatusReady For Test Fixed
        Open/ClosedOpen Closed
    2006-11-26 strk StatusConfirmed Ready For Test
        Assigned toudog strk
    2006-11-16 strk Categorycore render-agg
        Assigned tostrk udog
    2006-11-16 strk Attached File- Added massif.3748.txt, #11285
    2006-11-16 strk Attached File- Added massif.3748.ps, #11284
        Carbon-Copy- Added udo
    2006-11-16 strk CategoryNone core
        Severity3 - Normal 4 - Important
        StatusNone Confirmed
        Assigned toNone strk

    Back to the top

    Powered by Savane 3.13-14b3.
    Corresponding source code