bugGnash - The GNU Flash player - Bugs: bug #19511, Segfault playing...

 
 

bug #19511: Segfault playing http://gc-group.dk/gnash/stream.swf

Submitted by:  Sandro Santilli <strk>
Submitted on:  Wed 04 Apr 2007 10:44:29 AM UTC  
 
Category: NoneSeverity: 4 - Important
Release: NoneStatus: Fixed
Privacy: PublicAssigned to: Bastiaan Jacques <bjacques>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 11 Apr 2007 03:59:05 PM UTC, comment #3:

The crash is fixed in CVS. Scaling is up next, hopefully.

Bastiaan Jacques <bjacques>
Project MemberIn charge of this item.
Sun 08 Apr 2007 06:09:58 PM UTC, comment #2:

I believe the problem is that video rendering with AGG doesn't yet handle scaling. As a result, the AGG renderer receives a video image (in this case) that is bigger than the buffer in which it is to be stored. Combined with an apparent bug in the renderer, this causes attempted invalid data read/write.

The solution to this problem is to implement proper scaling.

Bastiaan Jacques <bjacques>
Project MemberIn charge of this item.
Sat 07 Apr 2007 12:19:28 PM UTC, comment #1:

I can now reproduce this error, and i'm now leaning toward saying that this is a AGG-render issue. Not sure yet though.

Tomas Groth <tgc>
Wed 04 Apr 2007 10:44:29 AM UTC, original submission:

The segfault seems related to a race condition.
If I trigger gdb it doesn't happen.
I had to set ulimit -c unlimited to obtain a coredump.

#0 0xb763ec0c in gnash::render_handler_agg<agg::pixfmt_alpha_blend_rgb<agg::blender_rgb_pre<agg::rgba8, agg::order_rgb>, agg::row_accessor<unsigned char> > >::drawVideoFrame (this=0x822f300, baseframe=0x83e4ba8, mat=0xbfa81cfc, bounds=0xbfa81cec) at /home/strk/src/gnash/gnash-head/backend/render_handler_agg.cpp:475
475 memcpy(aggbuf_ptr, rgbbuf_ptr, frame_width);
(gdb) bt
#0 0xb763ec0c in gnash::render_handler_agg<agg::pixfmt_alpha_blend_rgb<agg::blender_rgb_pre<agg::rgba8, agg::order_rgb>, agg::row_accessor<unsigned char> > >::drawVideoFrame (this=0x822f300, baseframe=0x83e4ba8, mat=0xbfa81cfc, bounds=0xbfa81cec) at /home/strk/src/gnash/gnash-head/backend/render_handler_agg.cpp:475
#1 0xb758a60f in gnash::render::drawVideoFrame (frame=0x83e4ba8, mat=0xbfa81cfc, bounds=0xbfa81cec) at /home/strk/src/gnash/gnash-head/server/render.cpp:106
#2 0xb7547877 in gnash::video_stream_instance::display (this=0x82b7118) at /home/strk/src/gnash/gnash-head/server/video_stream_instance.cpp:97
#3 0xb75671e6 in gnash::DisplayList::display (this=0x8244a20) at /home/strk/src/gnash/gnash-head/server/dlist.cpp:659
#4 0xb7530258 in gnash::sprite_instance::display (this=0x8244958) at /home/strk/src/gnash/gnash-head/server/sprite_instance.cpp:2582
#5 0xb7517b59 in gnash::movie_root::display (this=0x824d670) at /home/strk/src/gnash/gnash-head/server/movie_root.cpp:631
#6 0xb76937a2 in gnash::Gui::display (this=0x806c558, m=0x824d670) at /home/strk/src/gnash/gnash-head/gui/gui.cpp:364
#7 0xb769387e in gnash::Gui::advance_movie (gui=0x806c558) at /home/strk/src/gnash/gnash-head/gui/gui.cpp:435

Sandro Santilli <strk>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by bjacques (Updated the item)
  • -unavailable- added by tgc (Posted a comment)
  • -unavailable- added by strk (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 11 Apr 2007 03:59:05 PM UTCbjacquesStatusNone=>Fixed
      Open/ClosedOpen=>Closed
    Sun 08 Apr 2007 05:52:37 PM UTCbjacquesAssigned totgc=>bjacques

    Back to the top


    Powered by Savane 3.1-cleanup1