bugGnash - The GNU Flash player - Bugs: bug #21207, Segfault running...

 
 

bug #21207: Segfault running NetStream-SquareTestRunner

Submitted by:  Sandro Santilli <strk>
Submitted on:  Mon 01 Oct 2007 09:54:29 AM UTC  
 
Category: video-ffmpegSeverity: 6 - Security
Release: NoneStatus: Invalid
Privacy: PublicAssigned to: Sandro Santilli <strk>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 01 Oct 2007 12:37:12 PM UTC, comment #1:

The problem was with dependency tracking (see mail on gnash-dev)

Sandro Santilli <strk>
Project MemberIn charge of this item.
Mon 01 Oct 2007 09:54:29 AM UTC, original submission:

I belive this was introduced by proper virtual destructors.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1229072688 (LWP 21786)]
gnash::VideoDecoderFfmpeg::decodeToImage (this=0x80, input=0x60 <Address 0x60 out of bounds>, inputSize=0) at sdl/VideoDecoderFfmpeg.cpp:319
319 uint8_t* decodedData = decode(input, inputSize, outputSize);
(gdb) bt
#0 gnash::VideoDecoderFfmpeg::decodeToImage (this=0x80, input=0x60 <Address 0x60 out of bounds>, inputSize=0) at sdl/VideoDecoderFfmpeg.cpp:319
#1 0xb7e72c18 in gnash::video_stream_definition::get_decoder (this=0x8115488) at video_stream_def.cpp:133
#2 0xb7d77bda in video_stream_instance (this=0x8137548, def=0x8115488, parent=0x8116988, id=4) at video_stream_instance.cpp:168
#3 0xb7e72915 in gnash::video_stream_definition::create_character_instance (this=0x8115488, parent=0x8116988, id=4) at video_stream_def.cpp:106
#4 0xb7d56d17 in gnash::sprite_instance::add_display_object (this=0x8116988, character_id=4, name=0x811a298 "video", event_handlers=@0x8114fc8,
depth=-16382, color_transform=@0x8114f7c, mat=@0x8114f9c, ratio=-1, clip_depth=-1000000) at sprite_instance.cpp:2730
#5 0xb7d71662 in gnash::SWF::PlaceObject2Tag::execute (this=0x8114f68, m=0x8116988) at swf/PlaceObject2Tag.cpp:365
#6 0xb7d6938c in std::for_each<__gnu_cxx::__normal_iterator<gnash::execute_tag* const, std::vector<gnash::execute_tag, std::allocator<gnash::execute_tag> > >, boost::_bi::bind_t<void, boost::_mfi::cmf1<void, gnash::execute_tag, gnash::sprite_instance>, boost::_bi::list2<boost::arg<1>, boost::_bi::value<gnash::sprite_instance*> > > > (__first={_M_current = 0x8114ab8}, __last={_M_current = 0x8114af0}, __f=
{f_ = {f_ = <error reading variable>}, l_ = {a1_ = {<No data fields>}, a2_ = {t_ = 0x8116988}}}) at /usr/include/boost/bind/mem_fn_template.hpp:195
#7 0xb7d554b0 in gnash::sprite_instance::execute_frame_tags (this=0x8116988, frame=1, typeflags=<value optimized out>) at sprite_instance.cpp:2472
#8 0xb7d5b51d in gnash::sprite_instance::advance_sprite (this=0x8116988) at sprite_instance.cpp:2308
#9 0xb7d486b8 in gnash::movie_instance::advance (this=0x8116988, delta_time=1) at movie_instance.cpp:94
#10 0xb7d48be5 in gnash::movie_root::advanceLiveChar (ch=@0xbfc9e5a8, delta_time=1) at movie_root.cpp:1296
#11 0xb7d4c855 in std::for_each<std::_List_iterator<boost::intrusive_ptr<gnash::character> >, boost::_bi::bind_t<void, void (*)(boost::intrusive_ptr<gnash::character>, float), boost::_bi::list2<boost::arg<1>, boost::_bi::value<float> > > > (__first={_M_node = 0x812cfa8}, __last={_M_node = 0x80efde0}, __f=
{f_ = 0xb7d48bc0 <gnash::movie_root::advanceLiveChar(boost::intrusive_ptr<gnash::character>, float)>, l_ = {a1_ = {<No data fields>}, a2_ = {t_ = 1}}}) at /usr/include/boost/bind.hpp:287
#12 0xb7d48ac3 in gnash::movie_root::advanceLiveChars (this=0x80efde0, delta_time=1) at movie_root.cpp:1312
#13 0xb7d4a242 in gnash::movie_root::advance (this=0x80efde0, delta_time=1) at movie_root.cpp:694
#14 0x0804eb4c in gnash::MovieTester::advance (this=0xbfc9e67c) at MovieTester.cpp:202
#15 0x0804dd78 in main () at NetStream-SquareTestRunner.cpp:65

Sandro Santilli <strk>
Project MemberIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by strk (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 01 Oct 2007 12:37:12 PM UTCstrkStatusNone=>Invalid
      Assigned totgc=>strk
      Open/ClosedOpen=>Closed

    Back to the top


    Powered by Savane 3.1-cleanup1