Re: [Gnash-commit] gnash/server/vm ASHandlers.cpp ASHandlers.h

[strk]

On Mon, Aug 20, 2007 at 03:25:10AM +0000, Chad Musick wrote:
> CVSROOT:      /sources/gnash
> Module name:  gnash
> Changes by:   Chad Musick <cmusick>   07/08/20 03:25:10
> 
> Modified files:
>       server/vm      : ASHandlers.cpp ASHandlers.h 
> 
> Log message:
>       Adding the multibyte string operators.  This behavior currently has
>       no testcases. There may be a more efficient way to know rather than
>       discover encoding, but I have not found it. These operators are
>       deprected since SWF 5.
> 
> CVSWeb URLs:
> http://cvs.savannah.gnu.org/viewcvs/gnash/server/vm/ASHandlers.cpp?cvsroot=gnash&r1=1.122&r2=1.123
> http://cvs.savannah.gnu.org/viewcvs/gnash/server/vm/ASHandlers.h?cvsroot=gnash&r1=1.8&r2=1.9

Found a testcase triggering this:

  /usr/include/c++/4.1.3/debug/vector:192:error: attempt to subscript
      container with out-of-bounds index 0, but container only holds 0
      elements.
  
  Objects involved in the operation:
  sequence "this" @ 0x0xbf90cce8 {
    type = N15__gnu_debug_def6vectorIiSaIiEEE;
  }
  
  Program received signal SIGABRT, Aborted.
  [Switching to Thread -1238735168 (LWP 25433)]
  0xffffe410 in __kernel_vsyscall ()
  (gdb) bt
  #0  0xffffe410 in __kernel_vsyscall ()
  #1  0xb7133875 in raise () from /lib/tls/i686/cmov/libc.so.6
  #2  0xb7135201 in abort () from /lib/tls/i686/cmov/libc.so.6
  #3  0xb72d09e6 in __gnu_debug::_Error_formatter::_M_error () from 
/usr/lib/libstdc++.so.6
  #4  0xb7df8362 in gnash::SWF::SWFHandlers::GuessEncoding (address@hidden, 
address@hidden, address@hidden) at /usr/include/c++/4.1.3/debug/vector:192

You need a build with -D_GLIBCXX_DEBUG .

The testcase:
http://foo.keybit.net/~strk/tmp/panda.swf

Go to the forset, pick the diamond, then go to the vulcan and you should get 
the abort.

The reason seems pretty clear, as the GuessEncoding function is accessing 
elements 
of the 'offsets' vector which is passed in as empty...

--strk;