bugGnash - The GNU Flash player - Bugs: bug #16105, double free or corruption...

 
 

bug #16105: double free or corruption (fasttop) (gcc4.1 amd64)

Submitted by:  None
Submitted on:  Wed 15 Mar 2006 10:24:56 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Release: NoneStatus: Fixed
Privacy: PublicAssigned to: Rob Savoye <rsavoye>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 17 Mar 2006 04:00:35 PM UTC, comment #2:

I added this patch, thanks for finding the bug!

Rob Savoye <rsavoye>
Project AdministratorIn charge of this item.
Wed 15 Mar 2006 10:36:18 PM UTC, comment #1:

Sorry. This bug I send.

Uriy Zhuravlev <stalkerg>
Wed 15 Mar 2006 10:24:56 PM UTC, original submission:

Hello.
#0 0x00002aaaacc57c09 in kill () from /lib/libc.so.6
#1 0x00002aaaac55e8a1 in pthread_kill () from /lib/libpthread.so.0
#2 0x00002aaaac55ec22 in raise () from /lib/libpthread.so.0
#3 0x00002aaaacc57902 in raise () from /lib/libc.so.6
#4 0x00002aaaacc58c42 in abort () from /lib/libc.so.6
#5 0x00002aaaacc8b1ce in __fsetlocking () from /lib/libc.so.6
#6 0x00002aaaacc900a0 in malloc_usable_size () from /lib/libc.so.6
#7 0x00002aaaacc90b6a in free () from /lib/libc.so.6
#8 0x00002aaaab75add0 in ~button_action (this=<value optimized out>) at button.cpp:821
#9 0x00002aaaab75e91d in std::vector<gnash::button_action, std::allocator<gnash::button_action> >::_M_fill_insert (
this=0x727668, __position={_M_current = 0x7277d0}, __n=1, __x=@0x7fffffd94510) at stl_construct.h:107
#10 0x00002aaaab75b0a4 in gnash::button_character_definition::read (this=0x727630, in=0x7fffffd945b0,
tag_type=<value optimized out>, m=0x6ca610) at stl_vector.h:658
#11 0x00002aaaab76b2b3 in gnash::button_character_loader (in=0x7fffffd945b0, tag_type=34, m=0x6ca610) at impl.cpp:1903
#12 0x00002aaaab782ad1 in gnash::movie_def_impl::read (this=0x6ca610, in=<value optimized out>) at Movie.cpp:377
#13 0x00002aaaab76e79f in gnash::create_movie (filename=0x7fffffd96677 "./799.swf") at impl.cpp:454
#14 0x00002aaaab76eb29 in gnash::create_library_movie (filename=0x7fffffd96677 "./799.swf") at impl.cpp:618
#15 0x00000000004032b5 in main (argc=2, argv=0x7fffffd948f8) at gnash.cpp:430

in button.cpp:
int i,n = m_actions.size();
for (i = 0; i < n; i++)
{
if (m_actions[i]!=NULL)
delete m_actions[i];
}
and after m_actions.resize(0);
need simple:
m_actions.clear();
and all work good. :)
PS:
button_action::~button_action()
{
m_actions.clear();
}

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 3 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Fri 17 Mar 2006 04:00:35 PM UTCrsavoyeStatusNone=>Fixed
  Assigned toNone=>rsavoye
  Open/ClosedOpen=>Closed

Back to the top


Powered by Savane 3.1-cleanup1