[Gnash-commit] gnash ChangeLog server/asobj/Global.cpp

[Sandro Santilli]

CVSROOT:        /sources/gnash
Module name:    gnash
Changes by:     Sandro Santilli <strk>  06/10/11 14:03:42

Modified files:
        .              : ChangeLog 
        server/asobj   : Global.cpp 

Log message:
        * server/asobj/Global.cpp (as_global_parseint): fixed invalid free.

CVSWeb URLs:
http://cvs.savannah.gnu.org/viewcvs/gnash/ChangeLog?cvsroot=gnash&r1=1.1141&r2=1.1142
http://cvs.savannah.gnu.org/viewcvs/gnash/server/asobj/Global.cpp?cvsroot=gnash&r1=1.12&r2=1.13

Patches:
Index: ChangeLog
===================================================================
RCS file: /sources/gnash/gnash/ChangeLog,v
retrieving revision 1.1141
retrieving revision 1.1142
diff -u -b -r1.1141 -r1.1142
--- ChangeLog   11 Oct 2006 13:57:41 -0000      1.1141
+++ ChangeLog   11 Oct 2006 14:03:42 -0000      1.1142
@@ -1,5 +1,10 @@
 2006-10-11 Sandro Santilli <address@hidden>
 
+       * server/asobj/Global.cpp (as_global_parseint): fixed invalid
+         free.
+
+2006-10-11 Sandro Santilli <address@hidden>
+
        * testsuite/misc-ming.all/DefineEditTextVariableNameTest-Runner.cpp,
          testsuite/misc-ming.all/Makefile.am: first movie tester.
        * testsuite/Makefile.am, testsuite/MovieTester.cpp,

Index: server/asobj/Global.cpp
===================================================================
RCS file: /sources/gnash/gnash/server/asobj/Global.cpp,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -b -r1.12 -r1.13
--- server/asobj/Global.cpp     4 Oct 2006 15:04:00 -0000       1.12
+++ server/asobj/Global.cpp     11 Oct 2006 14:03:42 -0000      1.13
@@ -18,7 +18,7 @@
 
 // Implementation of the Global ActionScript Object
 
-/* $Id: Global.cpp,v 1.12 2006/10/04 15:04:00 strk Exp $ */
+/* $Id: Global.cpp,v 1.13 2006/10/11 14:03:42 strk Exp $ */
 
 #include "as_object.h"
 #include "array.h"
@@ -292,7 +292,8 @@
 
     // Set up some variables
     const string digits = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
-    char *input = new char[strlen(fn.arg(0).to_string())+1];
+    char *input_buffer = new char[strlen(fn.arg(0).to_string())+1];
+    char *input = input_buffer;
     strcpy(input,fn.arg(0).to_string());
     double base;
     int result = 0, i;
@@ -352,7 +353,7 @@
     if (numdigits == 0)
        {
            fn.result->set_nan();
-           delete [] input;
+           delete [] input_buffer;
            return;
        }
 
@@ -364,7 +365,7 @@
     if (bNegative)
        result = -result;
     
-    delete [] input;
+    delete [] input_buffer;
     
     // Now return the parsed string
     fn.result->set_int(result);