bugGnash - The GNU Flash player - Bugs: bug #24804, AVM2 segfault

 
 

bug #24804: AVM2 segfault

Submitted by:  Sandro Santilli <strk>
Submitted on:  Mon 10 Nov 2008 07:36:16 PM UTC  
 
Category: ActionScriptSeverity: 6 - Security
Release: NoneStatus: Fixed
Privacy: PublicAssigned to: Tom Stellard <tstellar>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 11 Nov 2008 10:11:11 AM UTC, comment #5:

Fixed, thanks.
Unfortunately the application still doesn't work, and
the only hint I get is:

UNIMPLEMENTED: SYMBOLCLASS tag parsed but not yet used

Should I get more ERROR lines ?

Sandro Santilli <strk>
Project Member
Tue 11 Nov 2008 05:46:00 AM UTC, comment #4:

If you get the latest version of the AVM2 branch, you should no longer get a segfault playing the xfonia.swf file.

Tom Stellard <tstellar>In charge of this item.
Tue 11 Nov 2008 04:04:05 AM UTC, comment #3:

initPrototype is called in the execute function of the doABCTag, right before we begin to build as_object objects from the abc_Trait objects. This part of AVM2 is particularly ugly and needs some work. However, I think this bug is caused by other problems with the ABC parser, which I am working on.

Tom Stellard <tstellar>In charge of this item.
Mon 10 Nov 2008 07:58:10 PM UTC, comment #2:

The mPrototype of asClass is never initialized.
Seems to be done with initPrototype, no idea which code
is supposed to call then, and when...
Should we initialize when-needed ?

Sandro Santilli <strk>
Project Member
Mon 10 Nov 2008 07:41:28 PM UTC, comment #1:

The backtrace:

iterator_find (p=@0x10, name=713, nsId=0) at /usr/include/boost/multi_index_container.hpp:433
433 return bfm_header::member;
(gdb) bt
#0 iterator_find (p=@0x10, name=713, nsId=0) at /usr/include/boost/multi_index_container.hpp:433
#1 0x00007ff8e8e5ec01 in gnash::PropertyList::setValue (this=0x10, key=713, val=@0x7ff8d803be38,
this_ptr=@0x0, nsId=0, flagsIfMissing=@0x0) at PropertyList.cpp:168
#2 0x00007ff8e8e7b6ee in gnash::as_object::init_member (this=0x0, key=713, val=@0x7ff8d803be38, flags=6,
nsname=0, order=<value optimized out>) at as_object.cpp:773
#3 0x00007ff8e8e9204e in gnash::asClass::addValue (this=0x8fb3b8, name=713, ns=0x7ff8d8007e58, slotId=0,
type=0x8ef668, val=@0x7ff8d803be38, isconst=true, isstatic=false) at asClass.cpp:116

mPrototype member of asClass is not initialized by
the constructor ! (I'm working a bit on that)

Sandro Santilli <strk>
Project Member
Mon 10 Nov 2008 07:36:16 PM UTC, original submission:

The flash application published on wikifonia.org segfaults
the AVM2 (from avm2 branch).
Attempts to play the bare SWF (no params needed) is enough,
and the SWF is small so I attach it.

Since I'm there I also attach the script created by the
plugin for invocation, just in case you want to debug
further when the segfault is fixed.

Sandro Santilli <strk>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #16819:  xfonia.swf added by strk (21KiB - application/x-shockwave-flash)
file #16820:  wikifonia-gnash.sh added by strk (549B - application/x-sh)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by tstellar (Posted a comment)
  • -unavailable- added by strk (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 11 Nov 2008 10:11:11 AM UTCstrkStatusReady For Test=>Fixed
      Open/ClosedOpen=>Closed
    Tue 11 Nov 2008 05:46:00 AM UTCtstellarStatusIn Progress=>Ready For Test
    Tue 11 Nov 2008 04:04:30 AM UTCtstellarStatusNone=>In Progress
    Mon 10 Nov 2008 07:36:16 PM UTCstrkAttached File-=>Added xfonia.swf, #16819
      Attached File-=>Added wikifonia-gnash.sh, #16820

    Back to the top


    Powered by Savane 3.1-cleanup1