bugGnash - The GNU Flash player - Bugs: bug #25215, AVM2: toyota.com rendered...

 
 

bug #25215: AVM2: toyota.com rendered incorrectly

Submitter:  Michael Gilbert <zero79>
Submitted:  Tue 30 Dec 2008 11:02:48 PM UTC
   
 
Category:  ActionScript Severity:  6 - Security
Release:  0.8.4 release Status:  Wont Fix
Privacy:  Public Assigned to:  None
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 19 Jun 2009 09:12:58 AM UTC, comment #3: 

The issue in both bugs is that objects are being pushed to the scope stack and left there. The GC then deletes them, so at the latest when the scope stack is printed Gnash crashes.

I guess the scope stack should be cleared of out-of-scope objects at some point; seems like the GC is doing a better job than the VM...

Benjamin Wolsey <bwy>
Group Member
Thu 18 Jun 2009 04:34:20 PM UTC, comment #2: 

Segfault due to GC deleting stuff. See bug #26541 for probably the same bug.

Benjamin Wolsey <bwy>
Group Member
Tue 30 Dec 2008 11:56:45 PM UTC, comment #1: 

It's an SWF9, unsupported by current Gnash.

Tom, avm2 branch results in:
lt-gtk-gnash: Machine.cpp:2752: void gnash::Machine::instantiateClass(std::string, gnash::as_object*): Assertion `theClass' failed.

Attached launcher

(file #17177)

Sandro Santilli <strk>
Group Member
Tue 30 Dec 2008 11:02:48 PM UTC, original submission:  

gnash renders the main page of http://www.toyota.com incorrectly.  i know this is nitpickey, but my friend was looking for a car, and i've been trying to get him to convert to linux recently.  when he went to toyota.com and saw that he couldn't do what he wanted to do, he said, "see, its things like this why linux sucks".

thanks for your hard work.

this is debian bug #428622: http://bugs.debian.org/428622

Michael Gilbert <zero79>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #17177:  bug25215_launcher.sh added by strk (380B - application/x-sh)
file #17174:  . added by zero79 (1B - application/octet-stream)
file #17175:  . added by zero79 (1B - application/octet-stream)
file #17176:  . added by zero79 (1B - application/octet-stream)
file #17173:  . added by zero79 (1B - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bwy (Posted a comment)
  • -email is unavailable- added by strk (Updated the item)
  • -email is unavailable- added by zero79 (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 13 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2010-07-23 bwy StatusConfirmed Wont Fix
        Assigned totstellar None
        Open/ClosedOpen Closed
    2009-06-18 bwy Severity3 - Normal 6 - Security
    2008-12-30 strk CategoryNone ActionScript
    2008-12-30 strk StatusNone Confirmed
    2008-12-30 strk Attached File- Added bug25215_launcher.sh, #17177
        Assigned toNone tstellar
        Summarytoyota.com rendered incorrectly AVM2: toyota.com rendered incorrectly
    2008-12-30 zero79 Attached File- Added ., #17174
        Attached File- Added ., #17175
        Attached File- Added ., #17176
    2008-12-30 zero79 Attached File- Added ., #17173

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code