bugGnash - The GNU Flash player - Bugs: bug #22148, action_buffer assertion failure

 
 

bug #22148: action_buffer assertion failure

Submitted by:  Benjamin Wolsey <bwy>
Submitted on:  Mon 28 Jan 2008 04:59:07 PM UTC  
 
Category: parserSeverity: 5 - Blocker
Release: NoneStatus: Fixed
Privacy: PublicAssigned to: Sandro Santilli <strk>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 28 Jan 2008 07:10:12 PM UTC, comment #4:

This is due to a tag length field being read as zero.

Sandro Santilli <strk>
Project MemberIn charge of this item.
Mon 28 Jan 2008 05:23:26 PM UTC, comment #3:

#2 0x00002b1be2d6868f in __assert_fail () from /lib64/libc.so.6
#3 0x00002b1be0982342 in gnash::action_buffer::read (this=0x2aaaac006638,
in=@0x9d5780, endPos=404) at action_buffer.cpp:64
#4 0x00002b1be08e7fc8 in gnash::SWF::DoActionTag::doActionLoader (
in=0x9d5780, tag=gnash::SWF::DOACTION, m=0x9d8150)
at ../server/swf/DoActionTag.h:56
#5 0x00002b1be098a566 in gnash::movie_def_impl::read_all_swf (this=0x9d8150)
at movie_def_impl.cpp:780

Benjamin Wolsey <bwy>
Project Member
Mon 28 Jan 2008 05:11:04 PM UTC, comment #2:

It aborted at gnash::stream::read(char*, unsigned int) before.

Benjamin Wolsey <bwy>
Project Member
Mon 28 Jan 2008 05:01:16 PM UTC, comment #1:

action_buffer has never been checked for input actually.
it's just assumed actions are well-formed.
I guess it still aborted before the change, didn't it ?
Maybe somewhere else..

Sandro Santilli <strk>
Project MemberIn charge of this item.
Mon 28 Jan 2008 04:59:07 PM UTC, original submission:

(I'll open them in separate bugs so that follow-ups are easier).

action_buffer.cpp:64: void gnash::action_buffer::read(gnash::stream&, long unsigned int): Zusicherung »endPos > startPos« nicht erfüllt.

Benjamin Wolsey <bwy>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #14891:  snoopy_click.zzuf.s465.swf added by bwy (212KiB - application/x-shockwave-flash)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by strk (Posted a comment)
  • -unavailable- added by bwy (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 7 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 29 Jan 2008 07:15:23 AM UTCbwyStatusReady For Test=>Fixed
      Open/ClosedOpen=>Closed
    Mon 28 Jan 2008 07:42:27 PM UTCstrkStatusIn Progress=>Ready For Test
    Mon 28 Jan 2008 07:10:12 PM UTCstrkCategoryNone=>parser
      StatusNone=>In Progress
      Assigned toNone=>strk
    Mon 28 Jan 2008 04:59:07 PM UTCbwyAttached File-=>Added snoopy_click.zzuf.s465.swf, #14891

    Back to the top


    Powered by Savane 3.1-cleanup1