[Gnash-commit] [bug #38244] Gnash uses a double-escaped URL to invoke xdg-open

[Nachanon Vetjasit]

URL:
  <http://savannah.gnu.org/bugs/?38244>

                 Summary: Gnash uses a double-escaped URL to invoke xdg-open
                 Project: Gnash - The GNU Flash player
            Submitted by: nachanon
            Submitted on: Mon 04 Feb 2013 01:18:06 PM ICT
                Category: ActionScript
                Severity: 3 - Normal
                 Release: 0.8.10
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

I've visited incubatepictures.com homepage with Gnash 0.8.10 standalone.
The page was written entirely in Flash 8.
Aside from text issue in bug #38243, it displayed quite good.

But when I clicked the download link on "Watch the Film" section
of "There's no Tomorrow" film, the browser didn't pop up,
despite having xdg-utils installed.


This is an excerpt from output of "gnash -vv
http://www.incubatepictures.com/index.swf";

3166:1] 11202 DEBUG: get url: target=_blank,
URL=http://www.filehosting.org/file/details/312163/theres_no_tomorrow_(2012)_1280x720.mp4,
method=0 (sendVars:0, loadTarget:0, loadVariable:0)
3166:1] 11202 NETWORK: getURL: HOSTFD is -1
3166:1] 11203 DEBUG: Launching URL: xdg-open
'http%3A%2F%2Fwww%2Efilehosting%2Eorg%2Ffile%2Fdetails%2F312163%2Ftheres%5Fno%5Ftomorrow%5F%282012%29%5F1280x720%2Emp4'
Error showing url: The location or file could not be found.


It shown that gnash have re-encoded the URL before giving it to xdg-open,
rendering it corrupt.

I think the correct behaviour is to pass URL as-is from getURL to xdg-open.
But it may need some sort of command line escaping to prevent injection.

Gnash: gnash_0.8.10-1~lenny from getgnash.org APT repository
System: Debian GNU/Linux 5.0 "Lenny" i386




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?38244>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/