[Gnash-commit] [bug #40315] tummy_trouble.swf segfaults

[Sandro Santilli]

URL:
  <http://savannah.gnu.org/bugs/?40315>

                 Summary: tummy_trouble.swf segfaults
                 Project: Gnash - The GNU Flash player
            Submitted by: strk
            Submitted on: Sun 20 Oct 2013 05:08:20 PM CEST
                Category: render-agg
                Severity: 6 - Security
                 Release: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

Sounds like an infinite recursion. This movie
(7db88c39605740feeb9a0890f8669886 tummy_truble.swf) used to work just fine
some time ago (0.8.10 ?). Now (master,
0d46c8830264ba86abb9041cff04297e02968516) it segfaults:

Program terminated with signal 11, Segmentation fault.
#0  operator[] (__n=0, this=<optimized out>) at
/usr/src/gnash/gnash-head/librender/agg/Renderer_agg.cpp:2207
2207    } // end of namespace gnash
(gdb)
(gdb) bt
#0  operator[] (__n=0, this=<optimized out>) at
/usr/src/gnash/gnash-head/librender/agg/Renderer_agg.cpp:2207
#1 
gnash::Renderer_agg<agg::pixfmt_alpha_blend_rgba<agg::blender_rgba_pre<agg::rgba8,
agg::order_bgra>, agg::row_accessor<unsigned char>, unsigned int>
>::buildPaths_rounded (address@hidden, dest=..., paths=...,
line_styles=...)
    at /usr/src/gnash/gnash-head/librender/agg/Renderer_agg.cpp:1268
#2  0x00007f3e69b6cdd8 in
gnash::Renderer_agg<agg::pixfmt_alpha_blend_rgba<agg::blender_rgba_pre<agg::rgba8,
agg::order_bgra>, agg::row_accessor<unsigned char>, unsigned int> >::drawShape
(address@hidden, FillStyles=..., line_styles=...,
objpaths=..., mat=..., cx=...)
    at /usr/src/gnash/gnash-head/librender/agg/Renderer_agg.cpp:1180
#3  0x00007f3e69b7349b in
gnash::Renderer_agg<agg::pixfmt_alpha_blend_rgba<agg::blender_rgba_pre<agg::rgba8,
agg::order_bgra>, agg::row_accessor<unsigned char>, unsigned int> >::drawShape
(this=0x7f3e6b748540, shape=..., xform=...)
    at /usr/src/gnash/gnash-head/librender/agg/Renderer_agg.cpp:1141
#4  0x00007f3e69eafbc9 in gnash::MovieClip::draw
(address@hidden, renderer=..., xform=...)
    at /usr/src/gnash/gnash-head/libcore/MovieClip.cpp:1201
#5  0x00007f3e69eafc72 in gnash::MovieClip::display (this=0x7f3e6b98a9c0,
renderer=..., base=...)
    at /usr/src/gnash/gnash-head/libcore/MovieClip.cpp:1216
#6  0x00007f3e69ee82e3 in gnash::DisplayList::display
(address@hidden, renderer=..., base=...)
    at /usr/src/gnash/gnash-head/libcore/DisplayList.cpp:593
#7  0x00007f3e69eafbdb in gnash::MovieClip::draw
(address@hidden, renderer=..., xform=...)
    at /usr/src/gnash/gnash-head/libcore/MovieClip.cpp:1202
#8  0x00007f3e69eafc72 in gnash::MovieClip::display (this=0x7f3e6b98a320,
renderer=..., base=...)
    at /usr/src/gnash/gnash-head/libcore/MovieClip.cpp:1216
#9  0x00007f3e69ee82e3 in gnash::DisplayList::display
(address@hidden, renderer=..., base=...)
    at /usr/src/gnash/gnash-head/libcore/DisplayList.cpp:593
#10 0x00007f3e69eafbdb in gnash::MovieClip::draw
(address@hidden, renderer=..., xform=...)
    at /usr/src/gnash/gnash-head/libcore/MovieClip.cpp:1202
#11 0x00007f3e69eafc72 in gnash::MovieClip::display (this=0x7f3e6b86dc80,
renderer=..., base=...)
    at /usr/src/gnash/gnash-head/libcore/MovieClip.cpp:1216





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?40315>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/