[Gnash-commit] [bug #39404] invalid read from XMLNode_as::clearChildren()

[Bastiaan Jacques]

URL:
  <http://savannah.gnu.org/bugs/?39404>

                 Summary: invalid read from XMLNode_as::clearChildren()
                 Project: Gnash - The GNU Flash player
            Submitted by: bjacques
            Submitted on: Wed 03 Jul 2013 11:39:29 AM CEST
                Category: ActionScript
                Severity: 4 - Important
                 Release: master
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

Valgrind shows the following error for quite a few movies, Youtube among
which.


==10762== Invalid read of size 8
==10762==    at 0x4DCD9AC: gnash::XMLNode_as::clearChildren()
(XMLNode_as.cpp:384)
==10762==    by 0x4DCDA34: gnash::XMLNode_as::~XMLNode_as()
(XMLNode_as.cpp:113)
==10762==    by 0x4DCDB30: gnash::XMLNode_as::~XMLNode_as()
(XMLNode_as.cpp:114)
==10762==    by 0x4C9ED0B: gnash::as_object::~as_object()
(checked_delete.hpp:34)
==10762==    by 0x4C9EE50: gnash::as_object::~as_object() (as_object.h:173)
==10762==    by 0x56FA108: gnash::GC::cleanUnreachable() (GC.cpp:84)
==10762==    by 0x56FA16C: gnash::GC::runCycle() (GC.cpp:125)
==10762==    by 0x4CF1947: gnash::movie_root::advance() (movie_root.cpp:932)
==10762==    by 0x14C166: gnash::Gui::advanceMovie(bool) (gui.cpp:953)
==10762==    by 0x1656ED: gnash::Gui::advance_movie(gnash::Gui*) (gui.h:271)
==10762==    by 0x6C13962: ??? (in /usr/lib64/libglib-2.0.so.0.3600.3)
==10762==    by 0x6C12E05: g_main_context_dispatch (in
/usr/lib64/libglib-2.0.so.0.3600.3)
==10762==  Address 0x153f51d0 is 32 bytes inside a block of size 96 free'd
==10762==    at 0x4A078DE: operator delete(void*) (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==10762==    by 0x4C9ED0B: gnash::as_object::~as_object()
(checked_delete.hpp:34)
==10762==    by 0x4C9EE50: gnash::as_object::~as_object() (as_object.h:173)
==10762==    by 0x56FA108: gnash::GC::cleanUnreachable() (GC.cpp:84)
==10762==    by 0x56FA16C: gnash::GC::runCycle() (GC.cpp:125)
==10762==    by 0x4CF1947: gnash::movie_root::advance() (movie_root.cpp:932)
==10762==    by 0x14C166: gnash::Gui::advanceMovie(bool) (gui.cpp:953)
==10762==    by 0x1656ED: gnash::Gui::advance_movie(gnash::Gui*) (gui.h:271)
==10762==    by 0x6C13962: ??? (in /usr/lib64/libglib-2.0.so.0.3600.3)
==10762==    by 0x6C12E05: g_main_context_dispatch (in
/usr/lib64/libglib-2.0.so.0.3600.3)
==10762==    by 0x6C13157: ??? (in /usr/lib64/libglib-2.0.so.0.3600.3)
==10762==    by 0x6C13559: g_main_loop_run (in
/usr/lib64/libglib-2.0.so.0.3600.3)





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?39404>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/