bugGnash - The GNU Flash player - Bugs: bug #29282, crash in gnash-1:0.8.6-13.fc12:...

 
 

bug #29282: crash in gnash-1:0.8.6-13.fc12: Process /usr/bin/gtk-gnash was killed by signal 6 (SIGABRT)

Submitted by:  David Timms <sunset06>
Submitted on:  Sun 21 Mar 2010 11:41:39 AM UTC  
 
Category: coreSeverity: 5 - Blocker
Release: trunkStatus: Fixed
Privacy: PublicAssigned to: Benjamin Wolsey <bwy>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Sun 12 Dec 2010 08:19:51 PM UTC, comment #9:

I tested http://members.iinet.net.au/~timmsy/bugz/test6.swf.bz2 in a recent gnash version built from git, and the video seem to play just fine with this version.

Petter Reinholdtsen <pere>
Project Member
Mon 27 Sep 2010 09:32:32 AM UTC, comment #8:

It was an assertion asserting our expectations of a SWF, which is never a good idea.

After the first frame of the SWF was executed after looping, a character was moved to depth 65535 by a PlaceObject2 tag. Merge displaylist asserted that this wouldn't happen.

The assertion is evidently bogus, so I've dropped it. The question is whether we should ignore that unexpected character in merging or not; I've treated the new list like the old one, i.e. ignoring the character, and left a TODO. It's the first time this has been reported, so I don't expect it happens very often.

Benjamin Wolsey <bwy>
Project MemberIn charge of this item.
Wed 25 Aug 2010 03:13:16 PM UTC, comment #7:

Thanks, that's great. The testcase reliably crashes trunk.

Benjamin Wolsey <bwy>
Project MemberIn charge of this item.
Wed 25 Aug 2010 12:36:28 PM UTC, comment #6:

http://members.iinet.net.au/~timmsy/bugz/test6.swf.bz2

Hopefully, that is enough to reproduce...

David Timms <sunset06>
Wed 25 Aug 2010 11:23:58 AM UTC, comment #5:

The version you tested is probably current enough. Can you post the swf somewhere?

Benjamin Wolsey <bwy>
Project MemberIn charge of this item.
Wed 25 Aug 2010 11:18:45 AM UTC, comment #4:

gnash-0.8.8-1.fc12.x86_6:
$ gnash test6.swf
gtk-gnash: DisplayList.cpp:893: void gnash::DisplayList::mergeDisplayList(gnash::DisplayList&): Assertion `itNewEnd == dlistTagsEffectiveZoneEnd(newList._charsByDepth)' failed.
Aborted (core dumped)

The line number has changed 16 lines, but same assertion.

I wasn't sure if you are asking me to test a specific version, or cvs snapshot ?

David Timms <sunset06>
Wed 25 Aug 2010 07:33:30 AM UTC, comment #3:

It would be useful to have the testfile, or if the reporter could test again with the latest release; the display list code was partly rewritten, so hopefully the bug is fixed.

Benjamin Wolsey <bwy>
Project MemberIn charge of this item.
Sun 21 Mar 2010 11:47:24 AM UTC, comment #2:

from the command line:
gnash ~/test6.swf
gtk-gnash: DisplayList.cpp:909: void gnash::DisplayList::mergeDisplayList(gnash::DisplayList&): Assertion `itNewEnd == dlistTagsEffectiveZoneEnd(newList._charsByDepth)' failed.
Aborted (core dumped)

David Timms <sunset06>
Sun 21 Mar 2010 11:43:06 AM UTC, comment #1:

Forgot to mention that gnash-0.8.7-1.fc12.x86_64 also exhibits the same crash.

David Timms <sunset06>
Sun 21 Mar 2010 11:41:39 AM UTC, original submission:

The above crash occurred while attempting to play an swf file record by the recordwin script, which is part of the pyvnc2swf package. This was captured and submitted to the fedora project bugtracker, and includes the backtrace.

https://bugzilla.redhat.com/show_bug.cgi?id=572507

It possibly occurs when the swf being created (live from screen capture) is ctrl-c'd, maybe this nastily trims the end of the swf stream, and gnash can't cope ?

Please let me know if you want the source .swf posted here or elsewhere, and if the backtrace should be pasted here.

David Timms <sunset06>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by pere (Posted a comment)
  • -unavailable- added by bwy (Posted a comment)
  • -unavailable- added by strk (Updated the item)
  • -unavailable- added by sunset06 (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 9 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 20 Dec 2010 04:33:26 PM UTCstrkStatusReady For Test=>Fixed
      Open/ClosedOpen=>Closed
    Mon 27 Sep 2010 09:32:32 AM UTCbwyCategorygui-gtk=>core
      Release0.8.7=>trunk
      StatusConfirmed=>Ready For Test
      Assigned toNone=>bwy
    Wed 25 Aug 2010 03:13:16 PM UTCbwyStatusNeed Info=>Confirmed
    Wed 25 Aug 2010 07:33:30 AM UTCbwyStatusNone=>Need Info
    Sun 21 Mar 2010 11:52:18 AM UTCstrkSeverity3 - Normal=>5 - Blocker

    Back to the top


    Powered by Savane 3.1-cleanup1